[Logcheck-devel] Bug#366364: Logcheck files for spamd

[Duncan Findlay]

Package: logcheck-database
Version: 1.2.44
Severity: normal

In order to consolidate the spamassassin logcheck files into one
package, as discussed with Jamie Penman-Smithson in February, I'm
going to remove the logcheck files from the next release of the
spamassassin package. I don't use logcheck, so I usually forget to
update the file until people file bug reports.

Here are the logcheck entries I think you're missing. These are part
of the normal functioning of spamd, so probably should be ignored in
all configurations:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]:( spamd:)? got connection over 
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]:( spamd:)? handled cleanup of child pid [0-9]+ due to SIGCHHLD$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]:( spamd:)? server successfully spawned child process, pid [0-9]+$

There may be some other messages I'm missing.

The logcheck entry:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: prefork: child states: I+$

is a bit restrictive. Child states other than I can and will occur in the normal functioning of spamassassin.


Thanks,
-- 
Duncan Findlay
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20060507/d764595e/attachment.pgp