logwatch-7.3.4-6 does not handle bind query diagnostics right. I get megs of lines like this: **Unmatched Entries** queries: client 127.0.0.1 view localhost_resolver: query: 1.178.101.85.in-ad dr.arpa IN PTR +: 1 Time(s) queries: client 127.0.0.1 view localhost_resolver: query: 1.178.101.85.sbl-x bl.spamhaus.org IN A +: 1 Time(s) queries: client 127.0.0.1 view localhost_resolver: query: 1.178.101.85.sbl-x bl.spamhaus.org IN TXT +: 1 Time(s) queries: client 127.0.0.1 view localhost_resolver: query: 10.46.223.81.in-ad dr.arpa IN PTR +: 1 Time(s) queries: client 127.0.0.1 view localhost_resolver: query: 10.46.223.81.sbl-x bl.spamhaus.org IN A +: 1 Time(s) Bind diagnostics lines in /var/log/messages is like this: Jun 2 02:00:47 mserver named[18951]: queries: client 127.0.0.1#34433: view localhost_resolver: query: 19.0.168.192.in-addr.arpa IN PTR +
Fixed in logwatch-7.3.6-2.fc8.