From 93535344e428fc946754653d741ef85d813138ac Mon Sep 17 00:00:00 2001
From: Jonas Smedegaard <dr@jones.dk>
Date: Tue, 18 Sep 2001 10:02:39 +0000
Subject: Adding logcheck/* (2nd attempt)

---
 logcheck/ignore.d.server/local | 96 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 96 insertions(+)
 create mode 100644 logcheck/ignore.d.server/local

(limited to 'logcheck/ignore.d.server/local')

diff --git a/logcheck/ignore.d.server/local b/logcheck/ignore.d.server/local
new file mode 100644
index 0000000..21d8da9
--- /dev/null
+++ b/logcheck/ignore.d.server/local
@@ -0,0 +1,96 @@
+afpd\[.*\]: ((dhx|cleartext) )?login: [[:alnum:]]+
+afpd\[.*\]: (server_child\[[[:digit:]]+\] [[:digit:]]+ )?(done|exited 1)
+afpd\[.*\]: .* read, .* written
+afpd\[.*\]: .*: Broken pipe
+afpd\[.*\]: .*: Connection reset by peer
+afpd\[.*\]: .*: Connection timed out
+afpd\[.*\]: .*: No route to host
+afpd\[.*\]: .*: No such file or directory
+afpd\[.*\]: .*: child timed out
+afpd\[.*\]: ASIP session:[[:digit:]]+\([[:digit:]]+\) from .*\([[:digit:]]+\)
+afpd\[.*\]: Connection terminated
+afpd\[.*\]: getforkparms: (ad_refresh|of_find): Permission denied
+afpd\[.*\]: afp_getsrvrparms: stat .*: Permission denied
+afpd\[.*\]: afp_openfork: ad_opne: File Exists
+afpd\[.*\]: dsi_stream_read\([[:digit:]]+\): Permission denied
+afpd\[.*\]: login [[:alnum:]]+ \(uid [[:digit:]]+, gid [[:digit:]]+\)
+afpd\[.*\]: login noauth
+afpd\[.*\]: logout [[:alnum:]]+
+afpd\[.*\]: registering [[:alnum:]]+ \(uid [[:digit:]]+\) on [[:digit:]]+\.[[:digit:]]+ as /var/lib/netatalk/cap/net.*node[[:digit:]]+
+afpd\[.*\]: server_child\[[[:digit:]]+\] [[:digit:]]+ exited 1
+afpd\[.*\]: session from [[:digit:]]+\.[[:digit:]]+:[[:digit:]]+ on [[:digit:]]+\.[[:digit:]]+:[[:digit:]]+
+afpd\[.*\]: setdirowner: chown (-1|16777216)/(-1|0) \.(AppleDouble(/\.Parent)?)?: (Invalid argument|Operation not permitted)
+afpd\[.*\]: using codepage directory: /usr/lib/netatalk/nls/maccode.*
+atalkd\[.*\]: zip gnireply from .* \(.*\)
+atalkd\[.*\]: zip ignoring gnireply
+atalkd\[.*\]: .*: Network is unreachable
+named\[.*\]: .*: query\(.*\) NS points to CNAME \(.*\)
+dhcpd.*: Abandoning IP address .*: pinged before offer
+dhcpd.*: DHCPINFORM from [[:digit:]]+\.[[:digit:]]+\.[[:digit:]]+\.[[:digit:]]+( via eth.)?
+dhcpd.*: DHCPNACK on [\.[:digit:]]+ to [:[anum:]]+( via eth.)?
+dhcpd.*: DHCPRELEASE of .* from .* via
+dhcpd.*: Reclaiming( REQUESTed) abandoned IP address [[:digit:]]+\.[[:digit:]]+\.[[:digit:]]+\.[[:digit:]]+\.
+dhcpd.*: already acking lease
+dhcpd.*: send_packet: Connection refused
+dhcpd.*: fallback_discard: Connection refused
+dhcpd: DHCPREQUEST for .* from .* via
+dhcpd: DHCPNACK on .* to .* via
+dhcpd: DHCPACK on .* to .* via
+dhcpd: DHCPDISCOVER from .* via
+dhcpd: DHCPOFFER on .* to .* via
+dhclient-2.2.x: DHCPREQUEST on .* to .* port 67
+dhclient-2.2.x: DHCPDISCOVER on .* to .* port 67 interval [[:digit:]]+
+dhclient-2.2.x: No working leases in persistent database - sleeping\.
+dhclient-2.2.x: No DHCPOFFERS received\.
+dhclient-2.2.x: DHCPOFFER from [\.[:digit:]]+
+dhclient-2.2.x: DHCPACK from .*
+dhclient-2.2.x: bound to .* -- renewal in [[:digit:]]+ seconds\.
+FaxGetty\[.*\]: STATE CHANGE:( ->| LISTENING| ANSWERING| RUNNING| RECEIVING)+
+FaxGetty\[.*\]: MODEM ROCKWELL .*
+FaxGetty\[.*\]: RECV FAX \([[:digit:]]+\): from .*, page .* in [[:digit:]]+:[[:digit:]]+, INF, .* line/mm, 1-D MR, [[:digit:]]+ bit/s
+FaxGetty\[.*\]: RECV FAX \([[:digit:]]+\): recvq/fax[[:digit:]]+\.tif from .*, route to .*, [[:digit:]]+ pages in [[:digit:]]+:[[:digit:]]+
+FaxGetty\[.*\]: ANSWER: Ring detected without successful handshake
+FaxGetty\[.*\]: ANSWER: FAX CONNECTION
+gdm\[.*\]: run_pictures: Directory .* does not exist\.
+imapd\[.*\]: (port 143|imap|imaps SSL) service init from
+imapd\[.*\]: No route to host, while reading line user=.* host=.*
+i(map|pop3)d\[.*\]: Killed \(lost mailbox lock\) user=.* host=.*
+i(map|pop3)d\[.*\]: (Login|Auth|Authenticated|Logout|Autologout) user=.* host=.*
+i(map|pop3)d\[.*\]: Moved [[:digit:]]+ bytes of new mail to .* from .* host=.*
+i(map|pop[2|3])d\[.*\]: (Broken pipe|Command stream end of file|Connection (reset by peer|timed out))(,)? while reading (line|char) user=.* host=.*
+ipop[2|3]d\[.*\]: (connect|pop3 service init) from
+ipop3d\[.*\]: Trying to get mailbox lock from process [[:digit:]]+
+ipop3d\[.*\]: Error opening or locking INBOX user=.* host=.*
+ipop3d\[.*\]: Expunge ignored on readonly mailbox
+ipop3d\[.*\]: Mailbox is open by another process, access is readonly
+ipop3d\[.*\]: Moved .* bytes of new mail to .* from .* host=.*
+IMP\[.*\]: Login .* to .*:143 as .*
+kernel: Packet log: input DENY eth[[:digit:]]+ PROTO=17 .*:(137|138) .*:(137|138) L=[[:digit:]]+ S=0x00 I=[[:digit:]]+ F=0x0000 T=[[:digit:]]+ \(#[[:digit:]]+\)
+named\[.*\]: NSTATS [[:digit:]]+ [[:digit:]]+
+named\[.*\]: .* All possible .* lame
+ntpd\[.*\]: kern_enable is 1
+ntpd\[.*\]: ntpd 4\.0\..* \(1\)
+ntpd\[.*\]: precision = [[:digit:]]+ usec
+ntpd\[.*\]: signal_no_reset: signal 13 had flags [[:digit:]]+
+ntpd\[.*\]: using kernel phase-lock loop [[:digit:]]+
+postfix.* table has changed -- exiting
+postfix/smtp\[.*\]: .*: to=<.*>, relay=none, delay=[[:digit:]]+, status=deferred \(connect to .*\[.*\]: (Connection refused|server refused mail service)\)
+postfix/smtp\[.*\]: connect to .*\[.*\]: (Connection (refused|timed out)|read timeout|server (refused mail service|dropped connection)|No route to host) \(port 25\)
+postfix/smtp\[.*\]: warning: numeric domain name in resource data of MX record for .*: [\.[:digit:]]+
+postfix/smtpd\[.*\]: (lost connection|timeout) after [^ ]+ from .*\[.*\]
+postfix/smtpd\[.*\]: warning: .*: address not listed for hostname .*
+postfix/smtpd\[.*\]: warning: .*: hostname .* verification failed: Host (name has no address|not found)
+proftpd\[.*\]: .* \(.*\) - FTP session opened\.
+proftpd\[.*\]: .* \(.*\) - USER (anonymous|ftp) \(Login failed\): Can't find user\.
+smbd\[.*\]:   read_socket_data: recv failure for 4\. Error = Connection reset by peer
+smbd\[.*\]: \[.*\] lib/util_sock.c:read_socket_data\([[:digit:]]+\)
+squid\[.*\]:   Finished.  Wrote [[:digit:]]+ entries\.
+squid\[.*\]:   Took [[:digit:]]+ seconds \(.* entries/sec\)\.
+squid\[.*\]: (access|store)LogRotate: Rotating(\.)?
+squid\[.*\]: (Closing Pinger socket|Pinger socket opened) on FD [[:digit:]]+
+squid\[.*\]: NETDB state saved;
+squid\[.*\]: storeDirWriteCleanLogs: Starting\.\.\.
+sshd.*: syslogin_perform_logout: logout\(\) returned an error
+sshd.*: Could not reverse map address .*\.
+sshd.*: Connection closed by .*
+su\[.*\]: \+ pts/[[:digit:]]+ .*-root
-- 
cgit v1.2.3