proc-maillog:
- Use "-d yesterday" to get more correct statistics on the typical case of
rotating logs at midnight.
- Add smtpd connection statistics.
- Remove per-user top 10 lists.
proc-messages:
- Message updates:
- New messages: Cyrus, HP printers, ISC dhcpd, NetBSD kernel, Net-SNMP
and ProFTPD.
- Account for views in more BIND named messages.
- Handle rsnapshot, smartd and Sipura SIP phones/gateways.
- Logic fixes:
- Facilities don't always have a trailing colon (esp. on non-UNIX).
- Remove sequence number and extra timestamp from Cisco messages.
- Keep $origin per-host, so "last message repeated" is logged correctly.
- Log only remote host when counting warnings for different software,
so the thresholds are tripped more easily (the account used is not
considered as important, since dictionary attacks are common).
- Code maintenance:
- Modernise Perl subroutine calls (no ampersand).
- Centralise host[addr] string parsing.
- Some whitespace cleanup.
- Configuration changes:
- Update $LOCAL (should go into a config file).
roller:
- Use "uname -n" instead of "netname", so network connectivity is not used.
around at either build-time or at run-time is:
USE_TOOLS+= perl # build-time
USE_TOOLS+= perl:run # run-time
Also remove some places where perl5/buildlink3.mk was being included
by a package Makefile, but all that the package wanted was the Perl
executable.
proc-httpd-errors:
- Ignore Digest startup.
- Ignore first signal repeat.
- Remove PID from unresponsive child warning.
proc-ipmon:
- Handle ip-filter v4.
proc-maillog:
- Put back user and host limits (10).
proc-messages:
- Ignore empty lines from SCSI errors.
- Added daemons: cyrus 2.2, jabber v2, rsynconly wrapper, BIND 9.3, ntpd v4.
- Weed out more NetBSD-current messages.
- Recognize more proftpd messages.
- Ignore more racoon messages.
proc-xferlog:
- Handle deleted files.
- List all incoming and deleted files.
- logroll now rolls wtmpx and httpd-ssl as well (no reporting)
- proc-ipmon adds scan analysis and log data summary
- proc-news now produces a sorted domain-only readership report
Add support for:
- repeating IMAP and HORDE warnings.
- new cyrus versions: lmtpd, master
- net-snmp as a new name for ucd-snmp
- recognize more NetBSD boot messages and new devices
- new daemons: netsaint, pptpd
- use pflogsumm to process maillog (postfix only)
foo-* to foo-[0-9]*. This is to cause the dependencies to match only the
packages whose base package name is "foo", and not those named "foo-bar".
A concrete example is p5-Net-* matching p5-Net-DNS as well as p5-Net. Also
change dependency examples in Packages.txt to reflect this.
logroll:
- rotate ipmon log (no processing yet)
proc-httpd-errors
- do not report usernames on authentication failures (better summary
and possible passwords are not shown)
- do not report "file not found" errors (not useful at system level,
and some authors choose to live with such links produced by tools)
- do not report "no acceptable variant" (the user gets a menu)
- do not report clients blocked by server configuration
proc-messages
- updates to local domains and networks (needs a config file)
- handle multi-port HP print servers successfully
- handle ntpd v4 messages
- handle new NetBSD messages (up-to 1.4Y)
- update named to BIND v8.2.2-P5, and add some new types of messages
- handle verbose amd startup
- minor updates: inetd, sendmail, snmpd, sshd
- new daemons: dhcpd, dhclient, gated, gdc, lpd, portmap, savecore, tftpd
- added a placeholder for mrouted
proc-news
- don't count "msgid:" as a system with connection failures (the failed
connections are probably to msgidd, e.g. it is not running)
- Set a threshold for reporting mail rejection (a single unknown address is
insignificant, as is mostly any other single rejection).
- Added daemons: deliver (cyrus), rdist, websterd.
- Handle more messages: ftpd, inetd, listserv, sendmail, snmpd, sshd.
- handle more daemons and new versions in proc-messages
- summarize rejected mail in proc-messages
- handle URL language codes better in proc-httpd-access
- do not report missing "favicon.ico" in proc-httpd-errors
- ignore XTHREAD and high load average in proc-news
- knows about /var/run/syslogd.pid, which is what our current syslogd is
creating (even if this is against the manual page of syslogd)
- proc-newstally tweak (a very local proc script)
