Bug#592365: logcheck: ignore rules for transmission-daemon

2024-04-27 Thread Richard Lewis
On Tue, 10 Aug 2010 10:28:54 +1000 Nemo  wrote:

> > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ 
> > transmission-daemon\[[[:digit:]]+\]: Saved 
> > "/var/lib/transmission-daemon/info/.*" \(bencode.c:1651\)$
> > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ transmission-daemon\[[0-9]+\]: .* DHT 
> > announce .*\(tr-dht.c:(669|637)\)$

Hi Nemo, in 14 years ago you reported a bug against logcheck-database
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=592365 -

I believe you suggested that the above be added to logcheck.

It;s a shame no-one ever replied to you - let me at least try now:

Are these rules still needed for transmission-daemon? I imagine there
may have been several changes to message formats since then.



Bug#592365: logcheck: ignore rules for transmission-daemon

2010-08-09 Thread Nemo
Package: logcheck
Version: 1.3.10
Severity: wishlist
Tags: patch


Hi, I've noticed that transmission-daemon (torrent downloader) is rather
verbose.

Example 1: this line appears approx every 2 minutes whilst the torrent
downloads (differing only by timestamp):

--
Aug  4 14:39:28 falcon transmission-daemon[2685]: Saved 
/var/lib/transmission-daemon/info/resume/debian-505-amd64-businesscard.iso.a437cd5c17cc853d.resume
 (bencode.c:1651)
--

And this appears every 2 minutes regardless. 
--
Aug  4 14:39:28 falcon transmission-daemon[2685]: Saved 
/var/lib/transmission-daemon/info/stats.json (bencode.c:1651)
--


similarly, there the following pairs appear regularly from the time the
torrent begins downloading, and continues all the time it is seeding.
These logs are in pairs, and for my observation, 4 lines per hour is
pretty constant. 

--
Aug  5 00:19:56 falcon transmission-daemon[2685]: 
debian-505-amd64-businesscard.iso Starting DHT announce (firewalled, 170 nodes) 
(tr-dht.c:669)
Aug  5 00:23:13 falcon transmission-daemon[2685]: 
debian-505-amd64-businesscard.iso DHT announce done (tr-dht.c:637)
Aug  5 00:46:27 falcon transmission-daemon[2685]: 
debian-505-amd64-businesscard.iso Starting DHT announce (firewalled, 171 nodes) 
(tr-dht.c:669)
Aug  5 00:50:45 falcon transmission-daemon[2685]: 
debian-505-amd64-businesscard.iso DHT announce done (tr-dht.c:637)
--


The following is my ignore.d.server/transmission-daemon file.
Two lines - the first filters the first two examples, the second filters
the second pair.

--
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ transmission-daemon\[[[:digit:]]+\]: 
Saved /var/lib/transmission-daemon/info/.* \(bencode.c:1651\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ transmission-daemon\[[0-9]+\]: .* DHT 
announce .*\(tr-dht.c:(669|637)\)$
--

The effectiveness of these rules can be seen from:

falcon:/etc/logcheck/ignore.d.server# grep transmission-daemon 
/var/log/syslog.0 | wc -l
2446
falcon:/etc/logcheck/ignore.d.server# grep transmission-daemon 
/var/log/syslog.0 | egrep -v -f transmission-daemon | wc -l
131


cheers
.../Nemo



-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages logcheck depends on:
ii  adduser   3.112  add and remove users and groups
ii  cron  3.0pl1-113 process scheduling daemon
ii  lockfile-progs0.1.15 Programs for locking and unlocking
ii  logtail   1.3.10 Print log file lines that have not
ii  mime-construct1.11   construct/send MIME messages from 
ii  postfix [mail-transport-agent 2.7.1-1High-performance mail transport ag
ii  sysklogd [system-log-daemon]  1.5-5  System Logging Daemon

Versions of packages logcheck recommends:
ii  logcheck-database 1.3.10 database of system log rules for t

Versions of packages logcheck suggests:
ii  syslog-summary1.14-1 summarize the contents of a syslog

-- Configuration Files:
/etc/cron.d/logcheck changed [not included]
/etc/logcheck/logcheck.conf [Errno 13] Permission denied: 
u'/etc/logcheck/logcheck.conf'
/etc/logcheck/logcheck.logfiles [Errno 13] Permission denied: 
u'/etc/logcheck/logcheck.logfiles'

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#592365: logcheck: ignore rules for transmission-daemon

2010-08-09 Thread Nemo

Just realised I'd only tweaked :digit: style into one line. Revised
version included:

--
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ transmission-daemon\[[[:digit:]]+\]: 
Saved /var/lib/transmission-daemon/info/.* \(bencode.c:1651\)$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ transmission-daemon\[[[:digit:]]+\]: 
.* DHT announce .*\(tr-dht.c:(669|637)\)$
--

Changes tested against my logs to same results as previous

.../Nemo



On Tue, Aug 10, 2010 at 01:11:54AM +1000, Nemo did utter:
 
 --
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ transmission-daemon\[[[:digit:]]+\]: 
 Saved /var/lib/transmission-daemon/info/.* \(bencode.c:1651\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ transmission-daemon\[[0-9]+\]: .* DHT 
 announce .*\(tr-dht.c:(669|637)\)$
 --
 



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org