Attachment 604518 Details for Bug 799690 – Patch

[patch] Patch

pluto.patch (text/plain), 2.77 KB, created by Jan Synacek on 2012-08-15 07:07:55 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jan Synacek

Created: 2012-08-15 07:07:55 UTC

Size: 2.77 KB

patch

obsolete

>--- logwatch/scripts/services/pluto.orig	2011-02-28 12:08:10.000000000 +0100
>+++ logwatch/scripts/services/pluto	2012-08-15 08:03:06.621115865 +0200
>@@ -52,6 +52,12 @@ while(<>) {
>    $today="$month $day";
> 
>    next unless ($process =~ /pluto/i);
>+   $iserror=0;
>+
>+   if ($conn eq "ERROR:") {
>+      $iserror = 1;
>+      ($junk,$conn,$msg)=split(/ +/,$msg,3);
>+   }
> 
>    $loglines{$today}++;
> 
>@@ -119,7 +125,7 @@ while(<>) {
>    next if($rest =~ /no suitable connection for peer/);
>    next if($rest =~ /sending encrypted notification/);
>    next if($rest =~ /enabling possible NAT-traversal with method/);
>-   next if($rest =~ /received Vendor ID payload/);
>+   next if($rest =~ /(received|ignoring) Vendor ID payload/);
>    next if($rest =~ /ignoring unknown Vendor ID payload/);
>    next if($rest =~ /Dead Peer Detection $RFC 3706$: enabled/);
>    next if($rest =~ /DPD: No response from peer - declaring peer dead/);
>@@ -128,6 +134,21 @@ while(<>) {
>    next if($rest =~ /discarding packet received during asynchronous work $DNS or crypto$ in STATE_(MAIN|QUICK)_../);
>    next if($rest =~ /STATE_(MAIN|QUICK)_[RI][1-3]: sent [MQ][RI][1-3], expecting [MQ][IR][1-3]/);
>    next if($rest =~ /STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2/);
>+   next if($rest =~ /down-client output/);
>+   next if($rest =~ /(restore|update)resolvconf-client output/);
>+   next if($rest =~ /transform .* ignored/);
>+   next if($rest =~ /multiple DH groups were set in aggressive mode\./);
>+   next if($rest =~ /received mode cfg reply/);
>+   next if($rest =~ /modecfg: Sending IP request/);
>+   next if($rest =~ /setting .* address to/);
>+   next if($rest =~ /STATE_XAUTH_I1: XAUTH client - awaiting CFG_set/);
>+   next if($rest =~ /initiating Aggressive Mode/);
>+   next if($rest =~ /Aggressive mode peer ID is/);
>+   next if($rest =~ /protocol\/port in Phase \d ID Payload must be/);
>+   next if($rest =~ /XAUTH: Bad Message: /);
>+   next if($rest =~ /XAUTH: Answering XAUTH challenge with user/);
>+   next if($rest =~ /Received IP4|DNS|subnet /);
>+   next if($rest =~ /sendto on .* to .* failed in delete notify/);
>    $relevantlog{"$today"}++;
> 
>    print STDERR "Rest is $rest\n" if $debug>1;
>@@ -194,6 +215,9 @@ while(<>) {
>       $rekeyfail{$conn}++;
>       $rekeyfail_ICMPunreachable{$conn}++;
> 
>+   } elsif($rest =~ /XAUTH: Successfully Authenticated/) {
>+      $xauthsuccess{$conn}++;
>+
>    } elsif($rest =~ /starting keying attempt (.*) of an unlimited number/) {
>       $lastattempt=$1;
>       if($maxattempts{$conn} < $lastattempt) {
>@@ -242,6 +266,9 @@ if (keys %conns) {
>       if($setupfail{$conn} > 0) {
>          print "\tSetup failures: ".$setupfail{$conn}."\n";
>       }
>+      if($xauthsuccess{$conn} > 0) {
>+         print "\tXAUTH successful connections: ".$xauthsuccess{$conn}."\n";
>+      }
>    }
> }
>

Actions: View | Diff

Attachments on bug 799690: 604518 | 759965