From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 42375138359 for ; Tue, 7 Jul 2020 12:49:04 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 8A10FE086D; Tue, 7 Jul 2020 12:48:57 +0000 (UTC) Received: from mail01.spamex.com (mail01.spamex.com [107.23.136.169]) by pigeon.gentoo.org (Postfix) with ESMTP id 36AFBE0864 for ; Tue, 7 Jul 2020 12:48:57 +0000 (UTC) Received: from 10.0.0.143 (web01.local.clicvu.com [10.0.0.202]) by mail01.spamex.com (Postfix) with ESMTP id A004C5A59 for ; Tue, 7 Jul 2020 12:48:56 +0000 (UTC) Content-type: text/plain Date: Tue, 07 Jul 2020 08:48:33 -0400 From: elu6-u259@spamex.com Subject: [gentoo-user] logcheck fallback detection message To: gentoo-user@lists.gentoo.org Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply Message-Id: <20200707124857.8A10FE086D@pigeon.gentoo.org> X-Archives-Salt: 4417eec4-5c00-4a6c-bbe5-62ae9c593cd7 X-Archives-Hash: 9cccd5b2d2dbaa23dfb30f60cba2d1d5 I've setup logcheck on my gentoo system, mostly following: https://wiki.gentoo.org/wiki/Logcheck It is working fairly well. A typical logcheck email I receive looks like: Security Events for su =-=-=-=-=-=-=-=-=-=-=- Using fallback detection... please install python-magic for better gzip detection. 0 Lines skipped (already processed) 0 Patterns to ignore 0 Ignored lines 1 sempron su: pam_unix(su:session): session opened for user man(uid=13) by (uid=0) 1 sempron su: pam_unix(su:session): session opened for user root(uid=0) by tom(uid=1000) 1 sempron su: pam_unix(su:session): session opened for user logcheck(uid=997) by (uid=0) Noticed the line "Using fallback detection... please install python-magic for better gzip detection." I installed python-magic, but that makes no difference. The line is always there, and it appears in both the "Security Events" and "System Events" part of the email. Anybody have any idea how to get rid of it? Tom Naujokas (elu6-u259 at spamex.com)