I have found the package that is at fault.

It was the upgrade of rsyslog from version 4.6.4-2 to 5.7.3-1
As per rsyslog bug #612829 the daemon no longer strips off trailing blanks from 
the syslog output.

In my /var/log/syslog file there are blank lines every time my snmp daemon logs 
something:
eg.

        Feb 21 13:28:51 monitor snmpd[1310]: Connection from UDP: 
[10.128.0.1]:37645->[10.128.0.6]

        Feb 21 13:28:51 monitor snmpd[1310]: Connection from UDP: 
[10.128.0.1]:37645->[10.128.0.6]

        Feb 21 13:28:51 monitor snmpd[1310]: Connection from UDP: 
[10.128.0.1]:37645->[10.128.0.6]

Instead of:

        Feb 21 13:28:51 monitor snmpd[1310]: Connection from UDP: 
[10.128.0.1]:37645->[10.128.0.6]
        Feb 21 13:28:51 monitor snmpd[1310]: Connection from UDP: 
[10.128.0.1]:37645->[10.128.0.6]
        Feb 21 13:28:51 monitor snmpd[1310]: Connection from UDP: 
[10.128.0.1]:37645->[10.128.0.6]

The fix is to add the following pattern to the ignore.d.server list for 
logcheck:

        ^\s*$

This stops it reporting on the blank lines, or lines that consist of only 
white-space.

Regards,

--
----------
Jim Barber
DDI Health



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to