[logcheck/f16] 1.3.14-2: modify ignore-filter for dhclient messages

Matthias Runge mrunge at fedoraproject.org
Mon Nov 14 21:29:26 UTC 2011 

commit 559f517aa8ec19ca709da1d3c1fed73aca69a334
Author: Matthias Runge <mrunge at matthias-runge.de>
Date:   Mon Nov 14 22:28:45 2011 +0100

    1.3.14-2: modify ignore-filter for dhclient messages

 logcheck-dhclient.patch |   53 +++++++++++++++++++++++++++++++++++++++++++++++
 logcheck.spec           |    8 ++++++-
 2 files changed, 60 insertions(+), 1 deletions(-)
---
diff --git a/logcheck-dhclient.patch b/logcheck-dhclient.patch
new file mode 100644
index 0000000..7d1b98c
--- /dev/null
+++ b/logcheck-dhclient.patch
@@ -0,0 +1,53 @@
+diff -ur a/logcheck-1.3.14/rulefiles/linux/ignore.d.server/dhclient b/logcheck-1.3.14/rulefiles/linux/ignore.d.server/dhclient
+--- a/logcheck-1.3.14/rulefiles/linux/ignore.d.server/dhclient	2011-09-08 15:33:44.000000000 +0200
++++ b/logcheck-1.3.14/rulefiles/linux/ignore.d.server/dhclient	2011-11-14 22:20:41.780262147 +0100
+@@ -1,26 +1,26 @@
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Internet (Software|Systems) Consortium DHCP Client [.[:alnum:]-]+$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Copyright [-0-9]+ Internet Systems Consortium\.$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: All rights reserved\.$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: For info, please visit http(://www\.isc\.org/(products/DHCP|sw/dhcp/)|s://www\.isc\.org/software/dhcp/)$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: There is already a pid file /var/run/dhclient\.[[:alnum:]]+\.pid with pid [[:digit:]]+$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: killed old client process, removed PID file$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?:$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Listening on [^[:space:].]+$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Sending on[[:space:]]+[^[:space:]]+$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: DHCPDISCOVER on [[:alnum:].-]+ to [.0-9]{7,15} port 67 interval [0-9]+$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: DHCP(NAK|ACK|OFFER) (of [.0-9]{7,15} )?from [.0-9]{7,15}$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: DHCP(REQUEST|RELEASE) (of [.0-9]{7,15} )?on [[:alnum:].-]+ to [.0-9]{7,15} port 67$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: bound(:| to [.0-9]{7,15} --) renewal in [0-9]+ seconds\.$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: [[:lower:]]+[0-9]: unknown hardware address type [0-9]+$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Trying recorded lease [.0-9]{7,15}$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: No working leases in persistent database( - sleeping)?\.$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: send_packet: Network is unreachable$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: send_packet: please consult README file regarding broadcast address\.$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: Internet (Software|Systems) Consortium DHCP Client [.[:alnum:]-]+$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: Copyright [-0-9]+ Internet Systems Consortium\.$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: All rights reserved\.$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: For info, please visit http(://www\.isc\.org/(products/DHCP|sw/dhcp/)|s://www\.isc\.org/software/dhcp/)$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: There is already a pid file /var/run/dhclient\.[[:alnum:]]+\.pid with pid [[:digit:]]+$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: killed old client process, removed PID file$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]:$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: Listening on [^[:space:].]+$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: Sending on[[:space:]]+[^[:space:]]+$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: DHCPDISCOVER on [[:alnum:].-]+ to [.0-9]{7,15} port 67 interval [0-9]+$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: DHCP(NAK|ACK|OFFER) (of [.0-9]{7,15} )?from [.0-9]{7,15}$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: DHCP(REQUEST|RELEASE) (of [.0-9]{7,15} )?on [[:alnum:].-]+ to [.0-9]{7,15} port 67$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: bound(:| to [.0-9]{7,15} --) renewal in [0-9]+ seconds\.$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: [[:lower:]]+[0-9]: unknown hardware address type [0-9]+$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: Trying recorded lease [.0-9]{7,15}$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: No working leases in persistent database( - sleeping)?\.$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: send_packet: Network is unreachable$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: send_packet: please consult README file regarding broadcast address\.$
+ # dhcp-client 2.0
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Copyright (199[5-9],? ){5}(The )?Internet Software Consortium\.$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Please contribute if you find this software useful\.$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: For info, please visit http://www.isc.org/dhcp-contrib.html$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: No DHCPOFFERS received\.$
+-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Sleeping\.$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: Copyright (199[5-9],? ){5}(The )?Internet Software Consortium\.$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: Please contribute if you find this software useful\.$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: For info, please visit http://www.isc.org/dhcp-contrib.html$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: No DHCPOFFERS received\.$
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient\[[[:digit:]]+\]: Sleeping\.$
+ # 3.0
+ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient: parse_option_buffer: option [-[:alnum:]]+ \([[:digit:]]+\) larger than buffer\.$
diff --git a/logcheck.spec b/logcheck.spec
index 67b87f5..f7baca5 100644
--- a/logcheck.spec
+++ b/logcheck.spec
@@ -1,12 +1,13 @@
 Name:           logcheck 
 Version:        1.3.14
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        Analyzes log files and sends noticeable events as email 
 
 License:        GPLv2
 Group:          Applications/System
 URL:            http://logcheck.org/
 Source0:        http://ftp.de.debian.org/debian/pool/main/l/%{name}/%{name}_%{version}.tar.gz
+Patch0:         logcheck-dhclient.patch
 BuildArch:      noarch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 
@@ -26,6 +27,8 @@ expression files contain in the database.
 
 %prep
 %setup -q
+%patch0 -p2
+
 # use fedora-style logfiles. (/var/log/syslog is /var/log/messages, 
 #                              auth.log is named secure)
 sed -i "s/syslog/messages/" etc/logcheck.logfiles
@@ -102,6 +105,9 @@ exit 0
 
 
 %changelog
+* Mon Nov 14 2011 Matthias Runge <mrunge at matthias-runge.de> 1.3.14-2
+- ignore dhclient messages (bug 751047)
+
 * Mon Sep 12 2011 Matthias Runge <mrunge at matthias-runge.de> 1.3.14-1
 - new version

More information about the scm-commits mailing list