diff options
| author | Jonas Smedegaard <dr@jones.dk> | 2002-12-26 14:34:18 +0000 |
|---|---|---|
| committer | Jonas Smedegaard <dr@jones.dk> | 2002-12-26 14:34:18 +0000 |
| commit | a56cd9aff095c31a59213ab99995adac60921326 (patch) | |
| tree | 001c30938dc2f10ffba238af618c69f0d576321b /logcheck/ignore.d.workstation | |
| parent | 4d5e01691573bcf0893fd5afef126eab6742a092 (diff) | |
Merging some dhcp lines. Adding a temporary line specific to tulle.haakansson.com.
Diffstat (limited to 'logcheck/ignore.d.workstation')
| -rw-r--r-- | logcheck/ignore.d.workstation/local | 11 |
1 files changed, 5 insertions, 6 deletions
diff --git a/logcheck/ignore.d.workstation/local b/logcheck/ignore.d.workstation/local index d37a673..e25e235 100644 --- a/logcheck/ignore.d.workstation/local +++ b/logcheck/ignore.d.workstation/local @@ -74,14 +74,12 @@ dhclient(-2.2.x)?: irda0: unknown hardware address type 783$ ### ignore.d.server/dhcp.changes # NB: dhcp3 entries are in dhcp3-common dhcpd-2.2.x: Abandoning IP address [\.0-9]+: (declined\.|pinged before offer) $ +dhcpd-2.2.x: BOOT(DISCOVER|REQUEST) from [0-9a-f:]+ via eth[0-9]+ $ dhcpd-2.2.x: BOOTREPLY for [\.0-9]+ to [^[:space:]]+ ([0-9a-f:]+) via eth[0-9]+ $ -dhcpd-2.2.x: BOOTREQUEST from [0-9a-f:]+ via eth[0-9]+ $ dhcpd-2.2.x: DHCP(ACK|NAK|OFFER) on [\.0-9]+ to [0-9a-f:]+ via eth[0-9]+ $ -dhcpd-2.2.x: DHCPDISCOVER from .* via eth[0-9]+ $ +dhcpd-2.2.x: DHCP(DECLINE on|RELEASE of|REQUEST for) [\.0-9]+ from [0-9a-f:]+( \([^[:space:]]+\))? via eth[0-9]+ \((not )?found\) $ dhcpd-2.2.x: DHCPINFORM from [\.0-9]+ $ -dhcpd-2.2.x: DHCPDECLINE on [\.0-9]+ from [0-9a-f:]+ via eth[0-9]+ $ -dhcpd-2.2.x: DHCPRELEASE of [\.0-9]+ from [0-9a-f:]+ via eth[0-9]+ \((not )?found\) $ -dhcpd-2.2.x: DHCPREQUEST for [\.0-9]+ from [0-9a-f:]+( \([^[:space:]]+\))? via eth[0-9]+ $ +dhcpd-2.2.x: DHCPREQUEST for [\.0-9]+ from [0-9a-f:]+( \([^[:space:]]+\))? via eth[0-9]+: wrong network\.$ ### ignore.d.server/dhcp3-common dhcpd: Abandoning IP address [\.0-9]+: pinged before offer$ dhcpd: BOOTREQUEST from [0-9a-f:]+$ @@ -349,7 +347,8 @@ sshd\[[0-9]+\]: packet_set_maxsize: setting to 4096 ## postfix postfix.*\[[0-9]+\]: .* from=<groove@mailomat.grooveattack.com> postfix/smtpd\[[0-9]+\]: warning: Illegal address syntax from [\.[:alnum:]-]+\[[\.0-9]+\] in MAIL command: <C:\\Email\\Headers\\fresh froms 5-1\.txt> - +## Tulle getting spammed +tulle postfix/smtpd\[[0-9]+\]: too many errors after RCPT from unknown\[\.0-9]+[\] rpc.mountd: authenticated mount request from .* for .* ## snort snort: .*FrontPage |