1970

[Francis J. Lacoste]

On jeu, 2002-12-05 at 05:14, Gerhard Venter wrote:
> I have more information to add to this question.  The Lire Autoresponder 
> does exactly the same thing.   So I looked at the Postfix log format
> 
> The log format looks like below, which seems the same as usual, except the 
> hostname is removed after the date/time.  The box that created the logs is 
> one of these black box type Linux firewalls that can also route email, and 
> gives you no access to the inner workings.  It is not a destination mail 
> server, it only routes emails between networks.
> 
> Dec  3 04:02:57  postfix/qmgr[8869]: 8B0C910782E: 
> from=<bounce-cc-ccna-7028368 at list.cramsession.com>, size=10811, nrcpt=1 
> (queue active)
> Dec  3 04:02:57  postfix/smtpd[9027]: disconnect from unknown[63.146.189.62]
> Dec  3 04:02:57  postfix/pickup[8870]: A9ECE107848: uid=27 
> from=<bounce-cc-ccna-7028368 at list.cramsession.com>
> 
> I would ask the company that made the Linux firewall to correct the log 
> format if someone on the list can assure me that this is the problem.
> 

Yes, this is surely the problem because our syslog parser isn't going to
recognize this as a supported syslog format. 

The "1970 problem" is related to the fact that no data could be
extracted from the log. This is kind of a display bug, since there is no
data, the date isn't set and when printed it is treated like a 0 which
gives you the epoch.

What I don't understand, is that Lire didn't give you error message
about that. You should have get a message containing:

'$line' wasn't recognized as a valid syslog format. 
If this indeed comes from a syslog variant, please contact
bugs\@logreport.org
with your version of syslog so that support can be added for it.

If you want to confirm the error, you may set LR_DEBUG=1 in
$HOME/.lire/etc/defaults (or $syscondif/lire/defaults.local) and you'll
get a lot of information on your terminal when you run Lire.

Kind regards,

Francis J. Lacoste

-- 
Francis J. Lacoste              . .           http://www.logreport.org
/^LogReport$/               . .               flacoste at logreport.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.logreport.org/pipermail/questions/attachments/20021205/17b946e3/attachment.bin