[Bug 534594] Re: logcheck filter misses kernel status changed message

[Richard Ayotte]

** Description changed:

  Binary package hint: ntp
  
  The logcheck filter shipped with ntp in karmic misses the following
  messages:
  
  Mar  8 10:06:29 chunks ntpd[1000]: kernel time sync status change 6001
  Mar  8 10:23:32 chunks ntpd[1000]: kernel time sync status change 2001
  
  According to the NTP folks, these messages are expected behaviour (in a future version, they've eliminated the message):
  https://support.ntp.org/bugs/show_bug.cgi?id=452#c10
  
  In the mean time, please apply this patch to the logcheck filter:
  
  --- ntp.orig    2010-03-08 12:36:29.771334912 -0500
  +++ ntp 2010-03-08 12:37:14.191334900 -0500
  @@ -3,7 +3,7 @@
-  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: no servers reachable$
-  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronized to ([0-9.]{7,15}|[0-9a-fA-F:.]{4,39}), stratum [0-9]+$
-  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronized to LOCAL\([0-9]+\), stratum [0-9]+$
+  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: no servers reachable$
+  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronized to ([0-9.]{7,15}|[0-9a-fA-F:.]{4,39}), stratum [0-9]+$
+  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronized to LOCAL\([0-9]+\), stratum [0-9]+$
  -^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: kernel time sync (disabled|enabled) [0-9]+$
  +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: kernel time sync (disabled|enabled|status change) [0-9]+$
-  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: precision = [0-9]+\.[0-9]+ usec$
-  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: peer ([.0-9]{7,15}|[0-9a-fA-F:.]{4,39}) now (in)?valid$
-  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: adjusting local clock by -?[.0-9]+s$
+  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: precision = [0-9]+\.[0-9]+ usec$
+  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: peer ([.0-9]{7,15}|[0-9a-fA-F:.]{4,39}) now (in)?valid$
+  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: adjusting local clock by -?[.0-9]+s$
  
  ProblemType: Bug
  Architecture: amd64
  Date: Mon Mar  8 14:13:03 2010
  DistroRelease: Ubuntu 9.10
  Package: ntp 1:4.2.4p6+dfsg-1ubuntu5.1
  ProcEnviron:
-  LANG=en_CA.UTF-8
-  SHELL=/bin/bash
+  LANG=en_CA.UTF-8
+  SHELL=/bin/bash
  SourcePackage: ntp
  Uname: Linux 2.6.33-020633-generic x86_64

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to ntp in ubuntu.
https://bugs.launchpad.net/bugs/534594

Title:
  logcheck filter misses kernel status changed message