[Logcheck-devel] Bug#254133: logcheck: additional innd rules

Jamie L. Penman-Smithson jamie at silverdream.org
Sun Jun 13 00:46:09 UTC 2004


Package: logcheck
Version: 1.2.22a
Severity: minor

There are some messages from INN which are not being filtered:

Jun 13 00:46:08 lorien innfeed[24951]: news.jgaa.com final seconds 38585 offered 1862 accepted 30 refused 1722 rejected 7 missing 0 accsize 130781 rejsize 335084 spooled 0 on_close 0 unspooled 0 deferred 103/0.0 requeued 0 queue 0.0/200:100,0,0,0,0,0
Jun 13 00:46:08 lorien innfeed[24951]: gw.efnet.com final seconds 38585 offered 7841 accepted 149 refused 6494 rejected 0 missing 0 accsize 801400 rejsize 0 spooled 0 on_close 0 unspooled 0 deferred 1199/0.0 requeued 0 queue 0.0/200:100,0,0,0,0,0
Jun 13 00:46:39 lorien innd: gw.efnet.com:34 closed seconds 1539
accepted 0 refused 4 rejected 1 duplicate 1 accepted size 0 duplicate
size 9392
Jun 13 00:53:01 lorien innfeed[24951]: news.uhro.net final seconds 861
offered 82 accepted 0 refused 65 rejected 17 missing 0 accsize 0 rejsize
46154 spooled 0 on_close 0 unspooled 0 deferred 0/0.0 requeued 0 queue
0.0/200:100,0,0,0,0,0
Jun 13 00:56:37 lorien innfeed[24951]: gw.efnet.com checkpoint seconds
600 offered 371 accepted 0 refused 357 rejected 0 missing 0 accsize 0
rejsize 0 spooled 0 on_close 0 unspooled 0 deferred 14/0.2 requeued 0
queue 0.1/200:96,4,0,0,0,0
Jun 13 00:58:05 lorien innd: news.uhro.net:21 checkpoint seconds 58
accepted 49 refused 4 rejected 1 duplicate 0 accepted size 103030
duplicate size 0
Jun 13 00:06:49 lorien innd: ME time 614087 hishave 12902(265) hiswrite
16807(104) hissync 233(2) idle 247176(313) artclean 110(111) artwrite
226569(104) artcncl 0(0) hishave/artcncl 0(0) hiswrite/artcncl 0(0)
artlog/artcncl 0(0) hisgrep/artcncl 0(0) sitesend 559(208) overv
39371(104) perl 37468(104) nntpread 5285(341) artparse 85(308) artlog
722(176) datamove 481(152)

The following regexps match some of the above:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ innfeed\[[0-9]+\]: [a-z\.]+
(final|checkpoint) seconds [0-9]+ offered [0-9]+ accepted [0-9]+ refused
[0-9]+ rejected [0-9]+ missing [0-9]+ accsize [0-9]+ rejsize [0-9]+
spooled [0-9]+ on_close [0-9]+ unspooled [0-9]+ deferred [0-9]+/[0-9\.]+
requeued [0-9]+ queue [0-9\.]+/[0-9\:\,]+$

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ innd: [a-z0-9\:\.]+
(final|checkpoint|closed) seconds [0-9]+ accepted [0-9]+ refused [0-9]+
rejected [0-9]+ duplicate [0-9]+ accepted size [0-9]+ duplicate size
[0-9]+$

I'll have a go at the other one tomorrow when I'm not feeling as
exhausted as I am now

Thanks,

-- 
-jamie <jamie at silverdream.org> | spamtrap: spam at silverdream.org
 w: http://www.silverdream.org | p: sms at silverdream.org
 pgp key @ http://silverdream.org/~jps/pub.key
 04:30:01 up 2 days, 13:39, 13 users,  load average: 2.10, 2.19, 2.31

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040613/11e0fc7b/attachment.pgp 


More information about the Logcheck-devel mailing list