From 87218fb829d3f802ec9ba1b24bb3fabbce8f351f Mon Sep 17 00:00:00 2001 From: Jonas Smedegaard Date: Sat, 1 Mar 2003 23:54:50 +0000 Subject: Loosen up a bit on dhcpd entries. Add temp. SMB strings. --- logcheck/ignore.d.workstation/local | 28 +++++++++++++++------------- 1 file changed, 15 insertions(+), 13 deletions(-) (limited to 'logcheck/ignore.d.workstation/local') diff --git a/logcheck/ignore.d.workstation/local b/logcheck/ignore.d.workstation/local index 128e6e3..f94241f 100644 --- a/logcheck/ignore.d.workstation/local +++ b/logcheck/ignore.d.workstation/local @@ -81,18 +81,18 @@ dhcpd-2.2.x: DHCP(DECLINE on|RELEASE of|REQUEST for) [\.0-9]+ from [0-9a-f:]+( \ dhcpd-2.2.x: DHCPINFORM from [\.0-9]+ ?$ dhcpd-2.2.x: DHCPREQUEST for [\.0-9]+ from [0-9a-f:]+( \([^[:space:]]+\))? via eth[0-9]+: wrong network\. ?$ ### ignore.d.server/dhcp3-common -dhcpd: Abandoning IP address [\.0-9]+: pinged before offer$ -dhcpd: BOOTREQUEST from [0-9a-f:]+$ -dhcpd: DHCP(ACK|NAK|OFFER) on [\.0-9]+ to [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+$ -dhcpd: DHCPACK to [\.0-9]+$ -dhcpd: DHCPDISCOVER from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+$ -dhcpd: DHCPINFORM from [\.0-9]+( via eth[0-9]+)?$ -dhcpd: DHCPRELEASE of [\.0-9]+( from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+( \(found\))?)?$ -dhcpd: DHCPREQUEST for [\.0-9]+( \([\.0-9]+\))? from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+$ -dhcpd: ICMP Echo reply while lease [\.0-9]+ valid.$ -dhcpd: Wrote [0-9]+ (leases|deleted host decls|new dynamic host decls) to leases file\.$ -dhcpd: accepting packet with data after udp payload.$ -dhcpd: ip length 576 disagrees with bytes received 590.$ +dhcpd: Abandoning IP address [\.0-9]+: pinged before offer ?$ +dhcpd: BOOTREQUEST from [0-9a-f:]+ ?$ +dhcpd: DHCP(ACK|NAK|OFFER) on [\.0-9]+ to [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+ ?$ +dhcpd: DHCPACK to [\.0-9]+ ?$ +dhcpd: DHCPDISCOVER from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+ ?$ +dhcpd: DHCPINFORM from [\.0-9]+( via eth[0-9]+)? ?$ +dhcpd: DHCPRELEASE of [\.0-9]+( from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+( \(found\))?)? ?$ +dhcpd: DHCPREQUEST for [\.0-9]+( \([\.0-9]+\))? from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+ ?$ +dhcpd: ICMP Echo reply while lease [\.0-9]+ valid. ?$ +dhcpd: Wrote [0-9]+ (leases|deleted host decls|new dynamic host decls) to leases file\. ?$ +dhcpd: accepting packet with data after udp payload. ?$ +dhcpd: ip length 576 disagrees with bytes received 590. ?$ ### ignore.d.server/gdm gdm\[[0-9]+\]: run_pictures: Directory [^[:space:]] does not exist\.$ ### ignore.d.server/gdm.da_DK @@ -362,7 +362,9 @@ smbd\[[0-9]+\]: process_local_message: unknown UDP message command code \([0-9 smbd\[[0-9]+\]: read(_socket)?_data: (read|recv) failure for 4. Error = (No route to host|Connection reset by peer) $ smbd\[[0-9]+\]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User [[:alnum:]]+ ! $ smbd\[[0-9]+\]: yield_connection: tdb_delete for name failed with error Record does not exist\. $ -smbd\[[0-9]+\]: \[[0-9/]+ [0-9:]+, [0-9]+\] (lib/util_sock.c:read_data|passdb/pampass.c:smb_pam_passcheck|smbd/(connection.c:yield_connection|oplock.c:process_local_message|service.c:find_service))\([0-9]+\) $ +smbd\[[0-9]+\]: api_srv_net_share_add: Failed to unmarshall SRV_Q_NET_SHARE_ADD. $ +smbd\[[0-9]+\]: prs_mem_get: reading data of size 4 would overrun buffer. $ +smbd\[[0-9]+\]: \[[0-9/]+ [0-9:]+, [0-9]+\] (lib/util_sock.c:read_data|passdb/pampass.c:smb_pam_passcheck|rpc_parse/parse_prs.c:prs_mem_get|rpc_server/srv_pipe.c:api_rpcTNP|rpc_server/srv_srvsvc.c:api_srv_net_share_add|smbd/(connection.c:yield_connection|oplock.c:process_local_message|service.c:find_service))\([0-9]+\) $ ## ssh sshd\[[0-9]+\]: Failed password for [[:alnum:]]+ from [0-9\.]+ port [0-9]+ ssh2$ sshd\[[0-9]+\]: packet_set_maxsize: setting to 4096 $ -- cgit v1.2.3