[Bug 534594] [NEW] logcheck filter misses kernel status changed message

[Marc Sherman]

Public bug reported:

Binary package hint: ntp

The logcheck filter shipped with ntp in karmic misses the following
messages:

Mar  8 10:06:29 chunks ntpd[1000]: kernel time sync status change 6001
Mar  8 10:23:32 chunks ntpd[1000]: kernel time sync status change 2001

According to the NTP folks, these messages are expected behaviour (in a future version, they've eliminated the message):
https://support.ntp.org/bugs/show_bug.cgi?id=452#c10

In the mean time, please apply this patch to the logcheck filter:

--- ntp.orig    2010-03-08 12:36:29.771334912 -0500
+++ ntp 2010-03-08 12:37:14.191334900 -0500
@@ -3,7 +3,7 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: no servers reachable$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronized to ([0-9.]{7,15}|[0-9a-fA-F:.]{4,39}), stratum [0-9]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronized to LOCAL\([0-9]+\), stratum [0-9]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: kernel time sync (disabled|enabled) [0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: kernel time sync (disabled|enabled|status change) [0-9]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: precision = [0-9]+\.[0-9]+ usec$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: peer ([.0-9]{7,15}|[0-9a-fA-F:.]{4,39}) now (in)?valid$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: adjusting local clock by -?[.0-9]+s$

ProblemType: Bug
Architecture: amd64
Date: Mon Mar  8 14:13:03 2010
DistroRelease: Ubuntu 9.10
Package: ntp 1:4.2.4p6+dfsg-1ubuntu5.1
ProcEnviron:
 LANG=en_CA.UTF-8
 SHELL=/bin/bash
SourcePackage: ntp
Uname: Linux 2.6.33-020633-generic x86_64

** Affects: ntp (Ubuntu)
     Importance: Undecided
         Status: New

-- 
logcheck filter misses kernel status changed message
https://bugs.launchpad.net/bugs/534594
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to ntp in ubuntu.