logcheck: Lots of small changes and splitting out into single files for each package (preparing for passing it to Maintainers).

1 files changed, 6 insertions, 9 deletions

diff --git a/logcheck/ignore.d.server/local b/logcheck/ignore.d.server/local
index 40a3c41..afa7ead 100644
--- a/logcheck/ignore.d.server/local
+++ b/logcheck/ignore.d.server/local
@@ -11,9 +11,9 @@ dhcpd: DHCPNACK on .* to .* via
 dhcpd: DHCPACK on .* to .* via
 dhcpd: DHCPDISCOVER from .* via
 dhcpd: DHCPOFFER on .* to .* via
-Fax(Getty|Send)\[.*\]: STATE CHANGE:( ->| BASE| LOCKWAIT| LISTENING| RUNNING| ANSWERING| RECEIVING)+
+Fax(Getty|Send)\[.*\]: STATE CHANGE:( ->| BASE| LOCKWAIT| LISTENING| RUNNING| ANSWERING| RECEIVING| MODEMWAIT)+
 Fax(Getty|Send)\[.*\]: MODEM (ROCKWELL|ZYXEL) .*
-FaxGetty\[.*\]: RECV FAX \([[:digit:]]+\): from .*, page .* in [[:digit:]]+:[[:digit:]]+, INF, .* line/mm, 1-D MR(, [[:digit:]]+ bit/s)?
+FaxGetty\[.*\]: RECV FAX \([[:digit:]]+\): from .*, page .* in [[:digit:]]+:[[:digit:]]+, INF, .* line/mm, (1|2)-D MR(, [[:digit:]]+ bit/s)?
 FaxGetty\[.*\]: RECV FAX \([[:digit:]]+\): recvq/fax[[:digit:]]+\.tif from .*, route to .*, [[:digit:]]+ pages in [[:digit:]]+:[[:digit:]]+
 FaxGetty\[.*\]: RECV FAX: bin/faxrcvd "recvq/fax[[:digit:]]+\.tif" "ttyS[012]" "[[:digit:]]+" ""
 FaxGetty\[.*\]: ANSWER: Ring detected without successful handshake
@@ -31,8 +31,8 @@ imapd\[.*\]: No route to host, while reading line user=.* host=.*
 i(map|pop3)d\[.*\]: Killed \(lost mailbox lock\) user=.* host=.*
 i(map|pop3)d\[.*\]: (Login|Auth|Authenticated|Logout|Autologout) user=.* host=.*
 i(map|pop3)d\[.*\]: Moved [[:digit:]]+ bytes of new mail to .* from .* host=.*
-i(map|pop[2|3])d\[.*\]: (Broken pipe|Command stream end of file|Connection (reset by peer|timed out))(,)? while reading (line|char) user=.* host=.*
-ipop[2|3]d\[.*\]: (connect|pop3 service init) from
+i(map|pop[2|3])d\[.*\]: (Broken pipe|Command stream end of file|Connection (reset by peer|timed out))(,)? while (reading (authentication|line|char)|writing text) user=[[:alnum:]] host=.*
+ipop[2|3]d\[.*\]: (connect|pop3(s SSL)? service init) from [\.[:digit]]+
 ipop3d\[.*\]: Trying to get mailbox lock from process [[:digit:]]+
 ipop3d\[.*\]: Error opening or locking INBOX user=.* host=.*
 ipop3d\[.*\]: Expunge ignored on readonly mailbox
@@ -56,13 +56,10 @@ pop-before-smtp\[.*\]: (opening|closing) relay for [\.[:digit:]]+( --- not in my
 smbd\[.*\]:   read_socket_data: recv failure for 4\. Error = Connection reset by peer
 smbd\[.*\]: \[.*\] lib/util_sock.c:read_socket_data\([[:digit:]]+\)
 squid\[.*\]:   Finished.  Wrote [[:digit:]]+ entries\.
-squid\[.*\]:   Took [[:digit:]]+ seconds \(.* entries/sec\)\.
+squid\[.*\]:   Took [\.[:digit:]]+ seconds \(.* entries/sec\)\.
 squid\[.*\]: (access|store)LogRotate: Rotating(\.)?
+squid\[.*\]: LogfileRotate: /var/log/squid/(access|store).log
 squid\[.*\]: (Closing Pinger socket|Pinger socket opened) on FD [[:digit:]]+
 squid\[.*\]: NETDB state saved;
 squid\[.*\]: storeDirWriteCleanLogs: Starting\.\.\.
-sshd.*: syslogin_perform_logout: logout\(\) returned an error
-sshd.*: Could not reverse map address .*\.
-sshd.*: Connection closed by .*
-sshd.*: Did not receive ident string from [\.[:digit:]]+
 su\[.*\]: \+ pts/[[:digit:]]+ .*-root