Re: dhcp: Filtering unknown 'reuse_lease-'entries from dhcp

This is a multi-part message in MIME format.
--------------190489F45D684EFF3E3D03D7
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Matthias,

Try the attached patch.

For future reference, the use of this mailing list is deprecated.  It is
best to file bugs/patches/requests under:
	https://sourceforge.net/p/logwatch/_list/tickets

Bjorn


On 9/12/20 2:37 AM, Matthias Fischer wrote:
> Hi,
> 
> currently we're using 'logwatch 7.5.4' on IPFire firewall systems.
> 
> Considering the 'dhcp' entries, we're receiving bug reports about
> logwatch logs containing unknown messages like this:
> 
> [IPFire Bug List /
> #12242](https://bugzilla.ipfire.org/show_bug.cgi?id=12242):
> 
>     Unknown Entries:
>     reuse_lease: lease age 0 (secs) under 25% threshold, reply with
>     unaltered, existing lease for 10.0.0.21: 1 Time(s)
>     reuse_lease: lease age 3 (secs) under 25% threshold, reply with
>     unaltered, existing lease for 10.0.0.27: 1 Time(s)
> 
> Comment in https://community.ipfire.org/t/dhcp-server-unknown-entries/211:
> "This seems to be the case while the dhcp server logs if a client asks
> too early for a still existing lease. There is usally nothing wrong with
> the network."
> 
> Could this be fixed by altering 'logwatch-7.5.4\scripts\services\dhcpd'?
> 
> Best,
> Matthias Fischer
> 
> 
> _______________________________________________
> Logwatch-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/logwatch-devel
> 


--------------190489F45D684EFF3E3D03D7
Content-Type: text/x-patch; charset=UTF-8;
 name="dhcpd.patch"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
 filename="dhcpd.patch"

diff --git a/scripts/services/dhcpd b/scripts/services/dhcpd
index 87312f7..bb5cd4c 100644
--- a/scripts/services/dhcpd
+++ b/scripts/services/dhcpd
@@ -79,7 +79,9 @@ while (my $line = <STDIN>) {
       ($line =~ /^Solicit message from/) or
       ($line =~ /^Sending Advertise to/) or
       ($line =~ /^pool [0-9a-f]+ /) or
-      ($line =~ /^[^ ]* file: /)
+      ($line =~ /^[^ ]* file: /) or
+      ($line =~ /^reuse_lease: lease age \d+ \(secs\) under \d+\% threshold, reply with unaltered, existing lease for/) or
+      0 # noop, but makes diffs easier when appending ignore statements
       ) {
       # Ignore these lines
    } elsif ($line =~ s/Listening on\s+//) {

--------------190489F45D684EFF3E3D03D7
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--------------190489F45D684EFF3E3D03D7
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Logwatch-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/logwatch-devel

--------------190489F45D684EFF3E3D03D7--