Hello,

First time posting to the list here.  Perhaps this should have gone to the
developers list though - not sure.

Some of us over at the logwatch list have noticed that freshclam syslog
entries were not being detected by the logwatch filters.  The cause of this
turned out to be that entries to syslog are being terminated with newlines,
which syslog happily turns into trailing spaces.  For example (output using
vim's :set list command to end of line with a $):

Jan 15 05:01:34 glacier freshclam[30051]: Daemon started. $
Jan 15 05:01:34 glacier freshclam[30051]: ClamAV update process started at
Sun Jan 15 05:01:34 2006 $

Clamav is the only service that seems to include a newline in its syslog
entries. This should probably be stripped before being sent to syslog.

Thanks,
MrC

_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to