[Logcheck-devel] Bug#264158: logcheck-database: ntp synchronization rule too tight

[Philip Kendall]

Package: logcheck-database
Version: 1.2.24
Severity: wishlist

The rule in /etc/logcheck/ignore.d.server/ntp for synchronization with
an NTP server:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronized to [0-9.]{7,15}, stratum 2$

is slightly too tight: synhronizing not at stratum 2 is a perfectly
normal event; eg when using pool.ntp.org as suggested in the ntp.conf
default config file, the server is at stratum 3.

I'd suggest just changing the '2' at the end to '[0-9]+'.

Cheers,

Phil

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (990, 'testing'), (1, 'experimental')
Architecture: alpha
Kernel: Linux 2.6.7
Locale: LANG=C, LC_CTYPE=C

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.4.30     Debian configuration management sy

-- debconf information:
* logcheck-database/rules-directories-note:
* logcheck-database/standard-rename-note:
* logcheck-database/conffile-cleanup: true
* logcheck-database/security_level: workstation