summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--logcheck/ignore.d.server/dhcp3-common10
-rw-r--r--logcheck/ignore.d.server/tmp1
2 files changed, 6 insertions, 5 deletions
diff --git a/logcheck/ignore.d.server/dhcp3-common b/logcheck/ignore.d.server/dhcp3-common
index f10152e..a4b5075 100644
--- a/logcheck/ignore.d.server/dhcp3-common
+++ b/logcheck/ignore.d.server/dhcp3-common
@@ -1,8 +1,8 @@
dhcpd: Abandoning IP address [\.0-9]+: pinged before offer
-dhcpd: DHCPACK on [\.0-9]+ to [\:a-e0-9]+ via
-dhcpd: DHCPDISCOVER from [\:a-e0-9]+ via
-dhcpd: DHCPNACK on [\.0-9]+ to [\:a-e0-9]+ via
-dhcpd: DHCPOFFER on [\.0-9]+ to [\:a-e0-9]+ via
-dhcpd: DHCPREQUEST for [\.0-9]+ from [\:a-e0-9]+ via
+dhcpd: DHCPACK on [\.0-9]+ to .* via
+dhcpd: DHCPDISCOVER from *. via
+dhcpd: DHCPNACK on [\.0-9]+ to .* via
+dhcpd: DHCPOFFER on [\.0-9]+ to .* via
+dhcpd: DHCPREQUEST for [\.0-9]+ from .* via
dhcpd: ICMP Echo reply while lease [\.0-9]+ valid.
dhcpd: Wrote [[:digit:]]+ (leases|deleted host decls|new dynamic host decls) to leases file\.
diff --git a/logcheck/ignore.d.server/tmp b/logcheck/ignore.d.server/tmp
index a410aa0..9724d76 100644
--- a/logcheck/ignore.d.server/tmp
+++ b/logcheck/ignore.d.server/tmp
@@ -35,6 +35,7 @@ sshd\[.*\]: packet_set_maxsize: setting to 4096
dhcpd-2.2.x: BOOTREQUEST from (00:20:6b:18:20:35|08:00:86:11:2b:71)
dhcpd-2.2.x: No applicable record for BOOTP host (00:20:6b:18:20:35|08:00:86:11:2b:71)
postfix.*\[.*\]: .* from=<groove@mailomat.grooveattack.com>
+rpc.mountd: authenticated mount request from .* for .*
snort: .*FrontPage
snort: IDS015 - RPC - portmap-request-status:
snort: IDS029 - SCAN-Possible Queso Fingerprint attempt: