From Bugzilla Helper: User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.6) Gecko/20050225 Firefox/1.0.1 Description of problem: This version of logwatch do not recognize messages of sgi_fam Version-Release number of selected component (if applicable): logwatch-4.3.2-2 How reproducible: Always Steps to Reproduce: 1. Install a program which uses fam 2. See logwatch output next day Actual Results: --------------------- Connections (secure-log) Begin ------------------------ **Unmatched Entries** xinetd[9028]: START: sgi_fam pid=23057 from=<no address> xinetd[9028]: START: sgi_fam pid=26338 from=<no address> xinetd[9028]: START: sgi_fam pid=32302 from=<no address> xinetd[9940]: START: sgi_fam pid=11961 from=<no address> xinetd[9958]: START: sgi_fam pid=10551 from=<no address> xinetd[9958]: START: sgi_fam pid=18655 from=<no address> xinetd[9958]: START: sgi_fam pid=4607 from=<no address> xinetd[9958]: START: sgi_fam pid=6205 from=<no address> xinetd[9958]: START: sgi_fam pid=10700 from=<no address> xinetd[9958]: START: sgi_fam pid=10918 from=<no address> xinetd[9958]: START: sgi_fam pid=11015 from=<no address> ---------------------- Connections (secure-log) End ------------------------- Expected Results: No such "unmached entries", because this are valid entries. Additional info:
Can you please attach your /var/log/secure.? file containing sgi_fam log messages (or part of that containing these messages).
Jun 14 20:57:34 host xinetd[12229]: START: sgi_fam pid=27865 from=<no address> Jun 14 21:47:56 host xinetd[12229]: START: sgi_fam pid=29684 from=<no address> Jun 15 05:34:33 host xinetd[12229]: START: sgi_fam pid=19790 from=<no address> Jun 16 00:12:56 host xinetd[12229]: START: sgi_fam pid=29987 from=<no address> Jun 16 07:51:43 host xinetd[12229]: START: sgi_fam pid=18451 from=<no address>
Created attachment 118455 [details] Proposed patch. Hello, thank you for your help. Attached patch should fix this problem. Could you test it?
I already tested it since March by updating to logwatch-6.0.1 (where your patch is included), it's working proper since then: Service sgi_fam [Connection(s) per day]: <no address>: 3 Time(s) Total Connections: 3