Bug 146403

Summary:	sys-apps/logwatch ignores the iptables lines from /var/log/messages
Product:	Gentoo Linux	Reporter:	Dale Carstensen <dlc>
Component:	[OLD] Core system	Assignee:	Gentoo Kernel Bug Wranglers and Kernel Maintainers <kernel>
Status:	RESOLVED NEEDINFO
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Dale Carstensen 2006-09-05 08:23:10 UTC

The daily logwatch run ignores the iptables lines from /var/log/messages.
The "kernel" service of logwatch would find them, if the lines had the
string " kernel: " after the time and host of them, as my Red Hat 9 2.4.20
log has.

Comment 1 Daniel Drake (RETIRED) gentoo-dev

2006-09-08 06:03:48 UTC

This is an issue with your system logger, which one are you using?

The kernel does not prefix it's own messages with "kernel: " -- this is handled by whatever logger reads kmsg and puts it in /var/log/messages. So this is either a bug in logwatch or a bug in your system logger.

Comment 2 Daniel Drake (RETIRED) gentoo-dev

2006-09-16 20:12:17 UTC

See comment #1