Bug#337998: [Logcheck-devel] Bug#337998: logcheck ignore rules updates

2005-11-17 Thread Jamie L. Penman-Smithson

On 7 Nov 2005, at 18:53, Dave Vehrs wrote:

Package: logcheck-database
Version: 1.2.42
Files:  /etc/logcheck/ignore.d.server/kernel
  /etc/logcheck/ignore.d.workstation/kernel
Severity:  Minor
Tags: Patch

Local system: Linux B166ER 2.6.11-mm4 #1 Fri May 27 17:30:15 MDT 2005
x86_64 GNU/Linux

Updated the following rules to match the output seen on my system.


Can you provide the log messages that should be ignored?

Thanks,

-j



--
-Jamie L. Penman-Smithson [EMAIL PROTECTED]
 t: +44 1273 424795; f: +44 1273 424795
 PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8
 never send mail to: [EMAIL PROTECTED]




PGP.sig
Description: This is a digitally signed message part


Bug#337998: Subject: Re: [Logcheck-devel] Bug#337998: logcheck ignore rules updates

2005-11-17 Thread Jamie L. Penman-Smithson

package logcheck-database
tags 337998 pending
thanks

[N.B. Please ensure that you always Cc bugs.debian.org when replying.]

On 17 Nov 2005, at 21:09, lowkey wrote:

On 7 Nov 2005, at 18:53, Dave Vehrs wrote:

snip

Updated the following rules to match the output seen on my system.


Can you provide the log messages that should be ignored?


Log messages and old/new rules:

Message(s):
Oct 20 03:54:41 Hostname kernel: usb 2-1: USB disconnect, address 101
Oct 20 03:54:41 Hostname kernel: usb 2-1.1: USB disconnect, address  
102

snip

Oct 20 03:54:42 Hostname kernel: usb 2-1: new full speed USB device
using ohci_hcd and address 104
Oct 20 03:54:42 Hostname kernel: usb 2-1.1: new full speed USB device
using ohci_hcd and address 105

snip
Oct 20 03:54:43 Hostname input.agent[11665]:  mousedev: already  
loaded
Oct 20 03:54:43 Hostname input.agent[11665]:  tsdev: already  
loaded

snip

Oct 20 03:54:43 Hostname input: USB HID v1.00 Keyboard [Chicony
PFU-65 USB Keyboard] on usb-:00:02.0-1.1
Oct 20 03:54:43 Hostname input: USB HID v1.10 Mouse [B16_b_02 USB-PS/2
Optical Mouse] on usb-:00:02.0-1.3

snip

This will be fixed in the next release.

Thanks for your bug report,

--
-Jamie L. Penman-Smithson [EMAIL PROTECTED]
 t: +44 1273 424795; f: +44 1273 424795
 PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8
 never send mail to: [EMAIL PROTECTED]




PGP.sig
Description: This is a digitally signed message part


Bug#337998: logcheck ignore rules updates

2005-11-07 Thread Dave Vehrs
Package: logcheck-database
Version: 1.2.42
Files:  /etc/logcheck/ignore.d.server/kernel
  /etc/logcheck/ignore.d.workstation/kernel
Severity:  Minor
Tags: Patch

Local system: Linux B166ER 2.6.11-mm4 #1 Fri May 27 17:30:15 MDT 2005
x86_64 GNU/Linux

Updated the following rules to match the output seen on my system.

(Note:  Rules should be on a single line but email may break them up)

---

OLD:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usb [0-9]-[0-9]: USB
disconnect, address [0-9]$

NEW:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usb [0-9]-[.[:digit:]]+:
USB disconnect, address [0-9]+$

---

OLD:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usb [0-9]+-[0-9]+: new
(low|full|high) speed USB device using ([_[:alnum:]-]+ and )?address
[0-9]+$

NEW:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usb [0-9]+-[.[:digit:]]+:
new (low|full|high) speed USB device using ([_[:alnum:]-]+ and
)?address [0-9]+$

---

OLD:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+
input.agent\[[0-9]+\]:[[:space:]]+(evdev|evbug|joydev): (already
loaded|loaded successfully|blacklisted)$

NEW:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+
input.agent\[[0-9]+\]:[[:space:]]+(mousedev|tsdev|evdev|evbug|joydev):
(already loaded|loaded successfully|blacklisted)$

---

OLD:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: input: USB HID
v[.[:digit:]]+ Joystick \[[ [:alnum:][:punct:]]+\] on
usb-[\:[:digit:].-]+$

NEW:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: input: USB HID
v[.[:digit:]]+ (Joystick|Keyboard|Mouse) \[[ [:alnum:][:punct:]]+\] on
usb-[\:[:digit:].-]+$

---

Thanks,

Dave Vehrs