diff options
| author | Jonas Smedegaard <dr@jones.dk> | 2003-01-01 23:21:55 +0000 |
|---|---|---|
| committer | Jonas Smedegaard <dr@jones.dk> | 2003-01-01 23:21:55 +0000 |
| commit | c572cd4c8bf75204716d28653ff3d35d9f3d6075 (patch) | |
| tree | 5209d2591fbcfd31d31e5c547dd51a62c160bf1c /logcheck/ignore.d.workstation | |
| parent | fc98c0ea9f42140461f28656db8f62ac3176110c (diff) | |
Stricten (and correct typo in) temporary SMB-related loglines.
Diffstat (limited to 'logcheck/ignore.d.workstation')
| -rw-r--r-- | logcheck/ignore.d.workstation/local | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/logcheck/ignore.d.workstation/local b/logcheck/ignore.d.workstation/local index 439c171..24819d6 100644 --- a/logcheck/ignore.d.workstation/local +++ b/logcheck/ignore.d.workstation/local @@ -339,12 +339,12 @@ portsentry\[[0-9]+\]: attackalert: .* ## pump pumpd\[[0-9]+\]: SO_BINDTODEVICE eth0 \(4\) failed: Invalid argument ## samba -smbd\[[0-9]+\]: read_socket_data: recv failure for 4. Error = (No route to host|Connection reset by peer) -smbd\[[0-9]+\]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User [[:alnum:]]+ ! -smbd\[[0-9]+\]: yield_connection: tdb_delete for name failed with error Record does not exist\. -smbd\[[0-9]+\]: \[[0-9/]+ [0-9:]+ [0-9]+\] (lib/util_sock.c:read_data|passdb/pampass.c:smb_pam_passcheck|smbd/(connection.c:yield_connection|service.c:find_service))\([0-9]+\) -sshd\[[0-9]+\]: Failed password for .* -sshd\[[0-9]+\]: packet_set_maxsize: setting to 4096 +smbd\[[0-9]+\]: read(_socket)?_data: recv failure for 4. Error = (No route to host|Connection reset by peer) $ +smbd\[[0-9]+\]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User [[:alnum:]]+ !$ +smbd\[[0-9]+\]: yield_connection: tdb_delete for name failed with error Record does not exist\.$ +smbd\[[0-9]+\]: \[[0-9/]+ [0-9:]+, [0-9]+\] (lib/util_sock.c:read_data|passdb/pampass.c:smb_pam_passcheck|smbd/(connection.c:yield_connection|service.c:find_service))\([0-9]+\) $ +sshd\[[0-9]+\]: Failed password for [[:alnum:]]+ $ +sshd\[[0-9]+\]: packet_set_maxsize: setting to 4096 $ ## postfix postfix.*\[[0-9]+\]: .* from=<groove@mailomat.grooveattack.com> postfix/smtpd\[[0-9]+\]: warning: Illegal address syntax from [\.[:alnum:]-]+\[[\.0-9]+\] in MAIL command: <C:\\Email\\Headers\\fresh froms 5-1\.txt> |