Hi Vincent, Quoting Vincent Lefevre (2025-01-30 09:49:40) > On 2025-01-30 08:13:43 +0100, Johannes Schauer Marin Rodrigues wrote: > > If you look at mailgraph in Trixie, it still uses the same regex: > > > > https://sources.debian.org/src/mailgraph/1.14-22/mailgraph.pl/#L229 > > You're looking at the wrong place. It should use the regexp at > > https://sources.debian.org/src/mailgraph/1.14-22/mailgraph.pl/#L212 > > ($year, $mon, $day, $hour, $min, $sec, $host, $text) = $str =~ /^ > (\d+)-(\d+)-(\d+)T(\d+):(\d+):(\d+)\S+ # datetime > \s+ > (\S+) # host > \s+ > (.*) # text > $/x or do > > At least this works for me on bookworm.
your sources.debian.org link is for mailgraph 1.14-22 but the version in
bookworm is 1.14-20 and it does not include this regex. I provided the link to
the bookworm version in my last message.
And even if I'm wrong and if I'm reading the code wrongly, how do you explain
the error message that I see with mailgraph in *both* a clean Bookworm chroot
as well as inside a clean Trixie chroot. What kind of reproducer would you like
to have if that is not sufficient to show the issue?
My last message had the reproducer for Bookworm. To see this in Trixie, just
replace "bookworm" by "trixie" in the mmdebstrap command I provided. Here is
the resulting command:
mmdebstrap --include=mailgraph --customize-hook='echo
H4sICIztmGcAA2xvZwCVjz1PwzAQQPf+ittJXd/ZMbYlD6gDqsTXwBZliPKhWiR2mjiCn0+BCRoJuOV0y3v3iFO+5bgl/YzSIlkhmFRaK3XF0XIO7VD5HvxQjY2Fu8fbw0MGy9xOLgM/usLa7jy2zGCMU3KFwlznH9cUU6xj7w73N08burBcM6O5EXLNso8htHXyMaw7co4CyxWoZpJLUuJfrwtkqBjl/LzkD8cvHcKSZqQNJ/qmHOOcOv+2m4c0NoUhlFhaqL+yoJviAEt4CfE1FBcZn0whjTHyD8zGz+tYaI99dAjVko6O7xBOi08ON++wHLyi8AEAAA==
| base64 -d | gzip -cd > "$1"/log' --chrooted-customize-hook='mailgraph
--logfile /log --cat' trixie /dev/null
[...]
WARNING: line not in syslog format: 2025-01-28T14:12:33.468866+01:00 email
imapd: LOGIN, user=, ip=[::ffff:], port=[61585], protocol=IMAP
WARNING: line not in syslog format: 2025-01-28T14:12:37.980934+01:00 email
imapd: Connection, ip=[::ffff:], port=[50131]
WARNING: line not in syslog format: 2025-01-28T14:12:38.404263+01:00 email
imapd: LOGIN, user=, ip=[::ffff:31.16.250.164], port=[50131], protocol=IMAP
WARNING: line not in syslog format: 2025-01-28T14:13:28.289022+01:00 email
postfix/smtpd[92141]: connect from unknown[]
WARNING: line not in syslog format: 2025-01-28T14:13:28.349994+01:00 email
postfix/smtpd[92141]: disconnect from unknown[] ehlo=1 auth=0/1 quit=1
What makes it work is if I add the following to the mailgraph invocation:
--logtype rsyslog
This is not necessary with the patch above which bumps the version of the
embedded Parse::Syslog.
Thanks!
cheers, josch
signature.asc
Description: signature
