Package: rsyslog
Version: 4.4.0-1
Severity: important
Hi,
On a client-server configuration, since my upgrading to the last unstable
version (on the client, the server is from stable),
i started to get warnings with logcheck like this :
Aug 25 15:09:01 <86>>Aug 25 15:09:01 media CRON[15799]: pam_unix(cron:session):
session opened for user root by (uid=0)
^^^^^ priority level appears in the message
Tcpdump between the hosts reveals the priority level is doubly angled bracketed
in contradiction to the rfc :
14:37:53.148300 IP media.xmon.net.34356 > monit.xmon.net.shell: P
2921736728:2921736841(113) ack 2924583695 win 257 <nop,nop,timestamp 1705521342
1705518585>
e.....@.@..t
8...@c
8...@..4...&*..Q.......Z.....
e.0.e.%.<<85>>Aug 25 14:37:53 media sudo: uroot : TTY=pts/7 ;
PWD=/tmp/rsyslog-4.4.0 ; USER=root ; COMMAND=/bin/ls -l
My configuration is mostly default except this :
#$ModLoad imklog # provides kernel logging support (previously done by
rklogd)
$ModLoad immark # provides --MARK-- message capability
*.* @@monit.xmon.net
Thx,
+++
tonio
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (700, 'unstable')
Architecture: i386 (x86_64)
Kernel: Linux 2.6.26-2-vserver-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages rsyslog depends on:
ii libc6 2.9-25 GNU C Library: Shared libraries
ii lsb-base 3.2-23 Linux Standard Base 3.2 init scrip
ii zlib1g 1:1.2.3.3.dfsg-15 compression library - runtime
Versions of packages rsyslog recommends:
ii logrotate 3.7.8-4 Log rotation utility
Versions of packages rsyslog suggests:
pn rsyslog-doc <none> (no description available)
pn rsyslog-gnutls <none> (no description available)
pn rsyslog-gssapi <none> (no description available)
pn rsyslog-mysql | rsyslog-pgsql <none> (no description available)
pn rsyslog-relp <none> (no description available)
-- no debconf information
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
