[Logcheck-devel] Bug#254133: logcheck: additional innd rules
Jamie L. Penman-Smithson
jamie at silverdream.org
Sun Jun 13 00:46:09 UTC 2004
Package: logcheck
Version: 1.2.22a
Severity: minor
There are some messages from INN which are not being filtered:
Jun 13 00:46:08 lorien innfeed[24951]: news.jgaa.com final seconds 38585 offered 1862 accepted 30 refused 1722 rejected 7 missing 0 accsize 130781 rejsize 335084 spooled 0 on_close 0 unspooled 0 deferred 103/0.0 requeued 0 queue 0.0/200:100,0,0,0,0,0
Jun 13 00:46:08 lorien innfeed[24951]: gw.efnet.com final seconds 38585 offered 7841 accepted 149 refused 6494 rejected 0 missing 0 accsize 801400 rejsize 0 spooled 0 on_close 0 unspooled 0 deferred 1199/0.0 requeued 0 queue 0.0/200:100,0,0,0,0,0
Jun 13 00:46:39 lorien innd: gw.efnet.com:34 closed seconds 1539
accepted 0 refused 4 rejected 1 duplicate 1 accepted size 0 duplicate
size 9392
Jun 13 00:53:01 lorien innfeed[24951]: news.uhro.net final seconds 861
offered 82 accepted 0 refused 65 rejected 17 missing 0 accsize 0 rejsize
46154 spooled 0 on_close 0 unspooled 0 deferred 0/0.0 requeued 0 queue
0.0/200:100,0,0,0,0,0
Jun 13 00:56:37 lorien innfeed[24951]: gw.efnet.com checkpoint seconds
600 offered 371 accepted 0 refused 357 rejected 0 missing 0 accsize 0
rejsize 0 spooled 0 on_close 0 unspooled 0 deferred 14/0.2 requeued 0
queue 0.1/200:96,4,0,0,0,0
Jun 13 00:58:05 lorien innd: news.uhro.net:21 checkpoint seconds 58
accepted 49 refused 4 rejected 1 duplicate 0 accepted size 103030
duplicate size 0
Jun 13 00:06:49 lorien innd: ME time 614087 hishave 12902(265) hiswrite
16807(104) hissync 233(2) idle 247176(313) artclean 110(111) artwrite
226569(104) artcncl 0(0) hishave/artcncl 0(0) hiswrite/artcncl 0(0)
artlog/artcncl 0(0) hisgrep/artcncl 0(0) sitesend 559(208) overv
39371(104) perl 37468(104) nntpread 5285(341) artparse 85(308) artlog
722(176) datamove 481(152)
The following regexps match some of the above:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ innfeed\[[0-9]+\]: [a-z\.]+
(final|checkpoint) seconds [0-9]+ offered [0-9]+ accepted [0-9]+ refused
[0-9]+ rejected [0-9]+ missing [0-9]+ accsize [0-9]+ rejsize [0-9]+
spooled [0-9]+ on_close [0-9]+ unspooled [0-9]+ deferred [0-9]+/[0-9\.]+
requeued [0-9]+ queue [0-9\.]+/[0-9\:\,]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ innd: [a-z0-9\:\.]+
(final|checkpoint|closed) seconds [0-9]+ accepted [0-9]+ refused [0-9]+
rejected [0-9]+ duplicate [0-9]+ accepted size [0-9]+ duplicate size
[0-9]+$
I'll have a go at the other one tomorrow when I'm not feeling as
exhausted as I am now
Thanks,
--
-jamie <jamie at silverdream.org> | spamtrap: spam at silverdream.org
w: http://www.silverdream.org | p: sms at silverdream.org
pgp key @ http://silverdream.org/~jps/pub.key
04:30:01 up 2 days, 13:39, 13 users, load average: 2.10, 2.19, 2.31
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040613/11e0fc7b/attachment.pgp
More information about the Logcheck-devel
mailing list