Bug#303661: [Logcheck-devel] Bug#303661: logcheck: Simple rule

Ralf Hildebrandt Ralf.Hildebrandt at charite.de
Tue Apr 19 06:59:24 UTC 2005


* maximilian attems <debian at sternwelten.at>:
> > ntpd\[[0-9]+\]: peer .* now (in)?valid
> > 
> > adapted from the ntp-server rule
> 
> please take a look at 
> /usr/share/doc/logcheck-database/README.logcheck-database.gz

Please take a look at the ntp-server rule, which according to your
reasoning is buggy.

> * aboves rule doesn't match the complete logline
> * gratious .* (should only be used for random remote supplied strings)

Like the ntp-server rule.
 
> if your read the bug report you'll find above a rule,
> that was added to current logcheck cvs.

That's why I said I have a simpler rule.

> please test that one.

-- 
_________________________________________________

  Charité - Universitätsmedizin Berlin
_________________________________________________

  Ralf Hildebrandt
   i.A. des IT-Zentrum | Netzwerkdienste
   Stabsstelle des Klinikumsvorstandes
   Campus Benjamin Franklin
   Hindenburgdamm 30 | Berlin
   Tel. +49 30 450 570155 | Fax +49 30 450 570962
   Ralf.Hildebrandt at charite.de
   http://www.charite.de





More information about the Logcheck-devel mailing list