Message-ID:

"Never ascribe to malice that which is caused by greed and ignorance." -- Cal Keegan

computers / news.software.nntp / Re: checking INN logs

checking INN logs

<ss45pc$b5r$2@dont-email.me>

https://www.novabbs.com/computers/article-flat.php?id=535&group=news.software.nntp#535

copy link Newsgroups: news.software.nntp

Path: i2pn2.org!i2pn.org!aioe.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: jdd...@dodin.org (jdanield)
Newsgroups: news.software.nntp
Subject: checking INN logs
Date: Mon, 17 Jan 2022 17:33:48 +0100
Organization: A noiseless patient Spider
Lines: 7
Message-ID: <ss45pc$b5r$2@dont-email.me>
Reply-To: jdd@dodin.org
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Mon, 17 Jan 2022 16:33:48 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="7801bcdfa8c5e12c2261373de73b47c3";
logging-data="11451"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18tnBIqnrgv0wh09/EtxvQ3KkeJAunhhl4="
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
Thunderbird/91.4.1
Cancel-Lock: sha1:ps0r3obiqfrFTHTdZ60ic+P/KVM=
Content-Language: en-US

by: jdanield - Mon, 17 Jan 2022 16:33 UTC

Hello :-)

I receive INN logs on my mailbox. Is there some warning I could check to
make me aware of a problem?

thanks
jdd

Re: checking INN logs

<ssbqvn$29c4e$1@news.trigofacile.com>

copy mid

https://www.novabbs.com/computers/article-flat.php?id=547&group=news.software.nntp#547

copy link Newsgroups: news.software.nntp

Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!news.trigofacile.com!.POSTED.san13-h02-176-143-2-105.dsl.sta.abo.bbox.fr!not-for-mail
From: iul...@nom-de-mon-site.com.invalid (Julien ÉLIE)
Newsgroups: news.software.nntp
Subject: Re: checking INN logs
Date: Thu, 20 Jan 2022 15:18:31 +0100
Organization: Groupes francophones par TrigoFACILE
Message-ID: <ssbqvn$29c4e$1@news.trigofacile.com>
References: <ss45pc$b5r$2@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Thu, 20 Jan 2022 14:18:31 -0000 (UTC)
Injection-Info: news.trigofacile.com; posting-account="julien"; posting-host="san13-h02-176-143-2-105.dsl.sta.abo.bbox.fr:176.143.2.105";
logging-data="2404494"; mail-complaints-to="abuse@trigofacile.com"
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0)
Gecko/20100101 Thunderbird/91.5.0
Cancel-Lock: sha1:ayNnHAoiEjXLliBsm3u8Mk6EfIU= sha256:GQxZPzhwqRIV+InaSoxHU/Qgt0cn7nwKbE8qWt/Tovw=
sha1:fDP3aZgjrtZ5cAklcPjjqs0U1PI= sha256:EF06V9JYSEHYB8Lr1g0I/qqjJ9K7RAqtUY46GNW8b44=
Content-Language: fr
In-Reply-To: <ss45pc$b5r$2@dont-email.me>

by: Julien ÉLIE - Thu, 20 Jan 2022 14:18 UTC

Bonjour Jean-Daniel,

> I receive INN logs on my mailbox. Is there some warning I could check to
> make me aware of a problem?

Critical issues, logged in the news.crit file, will be mailed by innwatch every 10 minutes (parameter innwatchsleeptime in inn.conf).

In your daily Usenet report, you might want to have a look at the beginning of the file. There may be "Unknown entries from news log file" and "Error log" Sections that could be worth investigating if present.

It would appear this way in the mail (or HTML report):

Daily Usenet report from xxx to yyy

Unknown entries from news log file:
First 2 / 2 lines (100.0%)
Jan 10 22:49:07 news innd[1843773]: SERVER peer can't contain peer in /home/news/etc/incoming.conf line 9
Jan 10 22:49:07 news innd[1843773]: SERVER Syntax error in /home/news/etc/incoming.conf at or before line 9

Log entries by program:
Program name Lines %Lines Size %Size
nnrpd 30827 64.4% 3.1 MB 54.7%
[...]

--
Julien ÉLIE

« Love is blind but marriage is an eye-opener. »

Re: checking INN logs

<ssbtf9$h2$1@dont-email.me>

copy mid

https://www.novabbs.com/computers/article-flat.php?id=548&group=news.software.nntp#548

copy link Newsgroups: news.software.nntp

Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: jdd...@dodin.org (jdanield)
Newsgroups: news.software.nntp
Subject: Re: checking INN logs
Date: Thu, 20 Jan 2022 16:00:56 +0100
Organization: A noiseless patient Spider
Lines: 36
Message-ID: <ssbtf9$h2$1@dont-email.me>
References: <ss45pc$b5r$2@dont-email.me> <ssbqvn$29c4e$1@news.trigofacile.com>
Reply-To: jdd@dodin.org
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Thu, 20 Jan 2022 15:00:57 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="854c5f40b6784358928556cd26e918dd";
logging-data="546"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX190WN2EoQW/S0qzIoLV7FZ7KvWV8RRGJho="
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
Thunderbird/91.4.1
Cancel-Lock: sha1:UCsppdHqmknvTVGr+t5iG+LEhNI=
In-Reply-To: <ssbqvn$29c4e$1@news.trigofacile.com>
Content-Language: en-US

by: jdanield - Thu, 20 Jan 2022 15:00 UTC

Le 20/01/2022 à 15:18, Julien ÉLIE a écrit :
> Bonjour Jean-Daniel,

bonjour :-)

> Unknown entries from news log file:
> First 2 / 2 lines (100.0%)
> Jan 10 22:49:07 news innd[1843773]: SERVER peer can't contain peer in /home/news/etc/incoming.conf line 9
> Jan 10 22:49:07 news innd[1843773]: SERVER Syntax error in /home/news/etc/incoming.conf at or before line 9

I don't have these ones but some:

2022-01-19T03:00:01.574081+01:00 ns507557 innd: SERVER servermode paused
or
2022-01-20T03:00:33.349821+01:00 ns507557 innd: SERVER paused Expiring
process 5389

and nothing in logs/news.err or crit

>
> Log entries by program:
> Program name Lines %Lines Size %Size
> nnrpd 30827 64.4% 3.1 MB 54.7%
> [...]
>

nothing for nnrpd

but if I filter for crit or error, I'm pretty sure to get the most
important things?

thanks
jdd

Re: checking INN logs

<ssc1u5$29f94$1@news.trigofacile.com>

copy mid

https://www.novabbs.com/computers/article-flat.php?id=549&group=news.software.nntp#549

copy link Newsgroups: news.software.nntp

Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!news.trigofacile.com!.POSTED.176-143-2-105.abo.bbox.fr!not-for-mail
From: iul...@nom-de-mon-site.com.invalid (Julien ÉLIE)
Newsgroups: news.software.nntp
Subject: Re: checking INN logs
Date: Thu, 20 Jan 2022 17:17:09 +0100
Organization: Groupes francophones par TrigoFACILE
Message-ID: <ssc1u5$29f94$1@news.trigofacile.com>
References: <ss45pc$b5r$2@dont-email.me> <ssbqvn$29c4e$1@news.trigofacile.com>
<ssbtf9$h2$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Thu, 20 Jan 2022 16:17:09 -0000 (UTC)
Injection-Info: news.trigofacile.com; posting-account="julien"; posting-host="176-143-2-105.abo.bbox.fr:176.143.2.105";
logging-data="2407716"; mail-complaints-to="abuse@trigofacile.com"
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0)
Gecko/20100101 Thunderbird/91.5.0
Cancel-Lock: sha1:Skq3gaytWRSF/ScoopG11+26HaY= sha256:SnkkILCpKDtOUQWOTWOroU3n5EXo4N6s9SGYrEJ3YVk=
sha1:RwK8cqItfpnfnAq/Vc9f3Z6l9QA= sha256:bSOpnL7EWwZSbiikWI8yEIpcUxzo3YCcqVpKhwpbI6w=
Content-Language: fr
In-Reply-To: <ssbtf9$h2$1@dont-email.me>

by: Julien ÉLIE - Thu, 20 Jan 2022 16:17 UTC

Bonjour Jean-Daniel,

>> Unknown entries from news log file:
>> First 2 / 2 lines (100.0%)
>> Jan 10 22:49:07 news innd[1843773]: SERVER peer can't contain peer in
>> /home/news/etc/incoming.conf line 9
>> Jan 10 22:49:07 news innd[1843773]: SERVER Syntax error in
>> /home/news/etc/incoming.conf at or before line 9
>
> I don't have these ones but some:
>
> 2022-01-19T03:00:01.574081+01:00 ns507557 innd: SERVER servermode paused
> or
> 2022-01-20T03:00:33.349821+01:00 ns507557 innd: SERVER paused Expiring
> process 5389

I indeed hope you do not have such "Syntax error" lines in your daily
Usenet reports :)
Do the "paused" and "Expiring process" lines appear in your daily
reports in the "Unknown entries from news log file section"? They
should not.

When you said you were receiving INN logs on your mailbox, weren't you
speaking of logs sent by news.daily? (the subject of these mails
contains "Daily Usenet report")
Were you speaking of simply sending you by mail the entire news logs?

> and nothing in logs/news.err or crit
>
>>
>> Log entries by program:
>> Program name Lines %Lines
>> Size %Size
>> nnrpd 30827 64.4% 3.1
>> MB 54.7%
>> [...]
>
> nothing for nnrpd
>
> but if I filter for crit or error, I'm pretty sure to get the most
> important things?

The most important things are already handled by innwatch and news.daily
(notably calling scanlogs and innreport). You don't have to rewrite a
log processor.

--
Julien ÉLIE

« Love is blind but marriage is an eye-opener. »

Re: checking INN logs

<ssc3el$fr9$1@dont-email.me>

copy mid

https://www.novabbs.com/computers/article-flat.php?id=550&group=news.software.nntp#550

copy link Newsgroups: news.software.nntp

Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: jdd...@dodin.org (jdanield)
Newsgroups: news.software.nntp
Subject: Re: checking INN logs
Date: Thu, 20 Jan 2022 17:43:00 +0100
Organization: A noiseless patient Spider
Lines: 26
Message-ID: <ssc3el$fr9$1@dont-email.me>
References: <ss45pc$b5r$2@dont-email.me> <ssbqvn$29c4e$1@news.trigofacile.com>
<ssbtf9$h2$1@dont-email.me> <ssc1u5$29f94$1@news.trigofacile.com>
Reply-To: jdd@dodin.org
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Thu, 20 Jan 2022 16:43:01 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="854c5f40b6784358928556cd26e918dd";
logging-data="16233"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/3DO1pLsUKElpVOAujfqGSCPR3pTJL3zA="
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
Thunderbird/91.4.1
Cancel-Lock: sha1:ERVo4bv9pdSa+/71ZMHkRpeLuYo=
In-Reply-To: <ssc1u5$29f94$1@news.trigofacile.com>
Content-Language: fr

by: jdanield - Thu, 20 Jan 2022 16:43 UTC

Le 20/01/2022 à 17:17, Julien ÉLIE a écrit :

> I indeed hope you do not have such "Syntax error" lines in your daily
> Usenet reports :)

no, none such

> Do the "paused" and "Expiring process" lines appear in your daily
> reports in the "Unknown entries from news log file section"? They
> should not.

yes, they do
>
> When you said you were receiving INN logs on your mailbox, weren't you
> speaking of logs sent by news.daily?

yes, dayly report, end also somewhere

"innwatch is not running"

and I have lot of unkwnon entries and this is not very clear:

http://www.mibsoftware.com/userkt/inn/faq7/0042.htm

thanks
jdd

Re: checking INN logs

<sscctb$29l9g$1@news.trigofacile.com>

copy mid

https://www.novabbs.com/computers/article-flat.php?id=552&group=news.software.nntp#552

copy link Newsgroups: news.software.nntp

Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!news.trigofacile.com!.POSTED.san13-h02-176-143-2-105.dsl.sta.abo.bbox.fr!not-for-mail
From: iul...@nom-de-mon-site.com.invalid (Julien ÉLIE)
Newsgroups: news.software.nntp
Subject: Re: checking INN logs
Date: Thu, 20 Jan 2022 20:24:26 +0100
Organization: Groupes francophones par TrigoFACILE
Message-ID: <sscctb$29l9g$1@news.trigofacile.com>
References: <ss45pc$b5r$2@dont-email.me> <ssbqvn$29c4e$1@news.trigofacile.com>
<ssbtf9$h2$1@dont-email.me> <ssc1u5$29f94$1@news.trigofacile.com>
<ssc3el$fr9$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Thu, 20 Jan 2022 19:24:27 -0000 (UTC)
Injection-Info: news.trigofacile.com; posting-account="julien"; posting-host="san13-h02-176-143-2-105.dsl.sta.abo.bbox.fr:176.143.2.105";
logging-data="2413872"; mail-complaints-to="abuse@trigofacile.com"
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0)
Gecko/20100101 Thunderbird/91.5.0
Cancel-Lock: sha1:bPNpobwXZJQmLfwikrc8g2d4lts= sha256:mJR6H63BS6x0P6dc2K0oYdJjq1/QJlncuuXTZhGCN78=
sha1:EQMVt9mMZnZ+/oa8F6pFMlzMG5M= sha256:9XM9f78RBySDgloOWZLlDnawrTxMGaAbb6PS3fRVaTM=
Content-Language: fr
In-Reply-To: <ssc3el$fr9$1@dont-email.me>

by: Julien ÉLIE - Thu, 20 Jan 2022 19:24 UTC

Bonjour Jean-Daniel,

>> Do the "paused" and "Expiring process" lines appear in your daily
>> reports in the "Unknown entries from news log file section"? They
>> should not.
>
> yes, they do

Yet, these lines are well-known by innreport.

In your <pathlog>/news.notice file, do dates really look like:

2022-01-19T03:00:01.574081+01:00 ns507557 innd: SERVER servermode paused

and not:

Jan 20 04:15:01 news innd[1998322]: SERVER servermode paused

>> When you said you were receiving INN logs on your mailbox, weren't you
>> speaking of logs sent by news.daily?
>
> yes, dayly report, end also somewhere
>
> "innwatch is not running"

There's something wrong in your setup then.
innwatch is started at the same time all other parts of INN start (by
the rc.news script).

> and I have lot of unkwnon entries and this is not very clear

.... you should not have such unknown entries.

--
Julien ÉLIE

« Love is blind but marriage is an eye-opener. »

Re: checking INN logs

<sscn8b$u82$2@dont-email.me>

copy mid

https://www.novabbs.com/computers/article-flat.php?id=553&group=news.software.nntp#553

copy link Newsgroups: news.software.nntp

Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: jdd...@dodin.org (jdanield)
Newsgroups: news.software.nntp
Subject: Re: checking INN logs
Date: Thu, 20 Jan 2022 23:20:59 +0100
Organization: A noiseless patient Spider
Lines: 48
Message-ID: <sscn8b$u82$2@dont-email.me>
References: <ss45pc$b5r$2@dont-email.me> <ssbqvn$29c4e$1@news.trigofacile.com>
<ssbtf9$h2$1@dont-email.me> <ssc1u5$29f94$1@news.trigofacile.com>
<ssc3el$fr9$1@dont-email.me> <sscctb$29l9g$1@news.trigofacile.com>
Reply-To: jdd@dodin.org
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Thu, 20 Jan 2022 22:20:59 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="854c5f40b6784358928556cd26e918dd";
logging-data="30978"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX197/0WjqpESfgepzZxXhoOYiId2HTS8miQ="
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
Thunderbird/91.4.1
Cancel-Lock: sha1:zHTaKTuAegP+uB79HnNf4qu7fe4=
In-Reply-To: <sscctb$29l9g$1@news.trigofacile.com>
Content-Language: fr

by: jdanield - Thu, 20 Jan 2022 22:20 UTC

Le 20/01/2022 à 20:24, Julien ÉLIE a écrit :
> Bonjour Jean-Daniel,
>
>>> Do the "paused" and "Expiring process" lines appear in your daily
>>> reports in the "Unknown entries from news log file section"? They
>>> should not.
>>
>> yes, they do
>
> Yet, these lines are well-known by innreport.
>
> In your <pathlog>/news.notice file, do dates really look like:
>
> 2022-01-19T03:00:01.574081+01:00 ns507557 innd: SERVER servermode paused
>
> and not:
>
> Jan 20 04:15:01 news innd[1998322]: SERVER servermode paused
>
>
>
>>> When you said you were receiving INN logs on your mailbox, weren't you
>>> speaking of logs sent by news.daily?
>>
>> yes, dayly report, end also somewhere
>>
>> "innwatch is not running"
>
> There's something wrong in your setup then.
> innwatch is started at the same time all other parts of INN start (by
> the rc.news script).
>
>
>
>> and I have lot of unkwnon entries and this is not very clear
>
> ... you should not have such unknown entries.
>

logs> grep paused news.notice
2022-01-20T03:00:01.746770+01:00 ns507557 innd: SERVER servermode paused
2022-01-20T03:00:33.349821+01:00 ns507557 innd: SERVER paused Expiring
process 5389

only two lines

thanks
jdd

Subject	Author
checking INN logs	jdanield
Re: checking INN logs	Julien ÉLIE
Re: checking INN logs	jdanield
Re: checking INN logs	Julien ÉLIE
Re: checking INN logs	jdanield
Re: checking INN logs	Julien ÉLIE
Re: checking INN logs	jdanield