Not sure if this is related or not, but since the upgrade to 5.7.3 in testing, I've been getting lots of mail from logcheck that look like this:
> This email is sent by logcheck. If you wish to no-longer receive it, > you can either deinstall the logcheck package or modify its > configuration file (/etc/logcheck/logcheck.conf). > > System Events > =-=-=-=-=-=-= > > > ... and that's all. It seems there are a lot of programs that write to syslog with embedded newlines, which rsyslog (and syslog before it) used to clean up. Examples: > Feb 20 03:02:11 tinkerbell nmbd[17925]: [2011/02/20 03:02:11.537685, > 0] nmbd/nmbd.c:132(nmbd_sig_hup_handler) > > Feb 20 03:02:11 tinkerbell nmbd[17925]: Got SIGHUP dumping debug info. > > Feb 20 03:02:11 tinkerbell nmbd[17925]: [2011/02/20 03:02:11.660000, > 0] nmbd/nmbd_workgroupdb.c:281(dump_workgroups) > > Feb 20 03:02:11 tinkerbell nmbd[17925]: dump_workgroups() > The worst ones seem to come from the notifyd daemon that comes with cyrus. I have it set to log incoming email, but I didn't know it did it in a multi-line format (it seems syslog/rsyslog cleaned it up, unbeknownst to me). Now I'm getting log lines like: > Feb 20 03:03:21 tinkerbell notifyd[5373]: do_notify using method 'log' > Feb 20 03:03:21 tinkerbell notifyd[5373]: MAIL, , rjmx, > INBOX.logcheck, "From: logcheck system account <logch...@rjmx.net> > Subject: tinkerbell.rjmx.net 2011-02-20 03:02 System Events > To: logch...@tinkerbell.rjmx.net > " > Feb 20 03:03:21 tinkerbell notifyd[5373]: do_notify using method 'log' > Feb 20 03:03:21 tinkerbell notifyd[5373]: SIEVE, normal, rjmx, , > "Logcheck alert > > Action(s) taken: > Filed into: INBOX.logcheck > " I'll probably turn syslog notification off (it's not really useful, anyway), but why the change? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
