From 1dbe2953294e07e7f47f42362e56483175c5abb3 Mon Sep 17 00:00:00 2001 From: Jonas Smedegaard Date: Tue, 14 Jan 2003 13:26:21 +0000 Subject: Various corecctions and improvements. --- logcheck/ignore.d.workstation/local | 13 +++++++++---- logcheck/ignore.d.workstation/misc | 4 ++++ 2 files changed, 13 insertions(+), 4 deletions(-) (limited to 'logcheck/ignore.d.workstation') diff --git a/logcheck/ignore.d.workstation/local b/logcheck/ignore.d.workstation/local index 28d293b..0ffbcd5 100644 --- a/logcheck/ignore.d.workstation/local +++ b/logcheck/ignore.d.workstation/local @@ -87,7 +87,7 @@ dhcpd: DHCP(ACK|NAK|OFFER) on [\.0-9]+ to [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+ dhcpd: DHCPACK to [\.0-9]+$ dhcpd: DHCPDISCOVER from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+$ dhcpd: DHCPINFORM from [\.0-9]+$ -dhcpd: DHCPRELEASE of [\.0-9]+$ +dhcpd: DHCPRELEASE of [\.0-9]+( of [\.0-9]+( \([\.0-9]+\))? from [0-9a-f:]+( \([^\)]+\)+ via eth[0-9]+( \(found\))?)?$ dhcpd: DHCPREQUEST for [\.0-9]+( \([\.0-9]+\))? from [0-9a-f:]+( \([^\)]+\))? via eth[0-9]+$ dhcpd: ICMP Echo reply while lease [\.0-9]+ valid.$ dhcpd: Wrote [0-9]+ (leases|deleted host decls|new dynamic host decls) to leases file\.$ @@ -220,11 +220,11 @@ postfix/smtp\[[0-9]+\]: setting up TLS connection to [^[:space:]]+$ postfix/smtp\[[0-9]+\]: warning: bad size limit "truncates" in EHLO reply from [^[:space:]]+$ postfix/smtp\[[0-9]+\]: warning: host [^[:space:]]+\[[\.0-9]+\] (greeted me|replied to HELO/EHLO) with my own hostname [^[:space:]]+$ postfix/smtp\[[0-9]+\]: warning: no MX host for [^[:space:]]+ has a valid A record$ -postfix/smtpd?\[[0-9]+\]: (Unv|V)erified: subject_CN=[^,]+, issuer=[^,]+$ +postfix/smtpd?\[[0-9]+\]: (Unv|V)erified: subject_CN=[^,]+, issuer=.*$ postfix/smtpd?\[[0-9]+\]: TLS connection established (from|to) [^[:space:]]+: (SSL|TLS)v[123] with cipher [^[:space:]]+ \([0-9/]+ bits\)$ postfix/smtpd?\[[0-9]+\]: fingerprint=[0-9A-F:]+$ postfix/smtpd?\[[0-9]+\]: setting up TLS connection (from|to) [^[:space:]]+\[[\.0-9]+\]$ -postfix/smtpd?\[[0-9]+\]: verify error:num=18:self signed certificate$ +postfix/smtpd?\[[0-9]+\]: verify error:num=(18:self signed certificate|20:unable to get local issuer certificate|21:unable to verify the first certificate|26:unsupported certificate purpose|27:certificate not trusted)$ postfix/smtpd?\[[0-9]+\]: warning: (numeric|malformed) domain name in resource data of MX record for [^[:space:]]+: [^[:space:]]*$ postfix/smtpd?\[[0-9]+\]: warning: valid_hostname: (empty hostname|invalid character [0-9]+\(decimal\): [^[:space:]]+)$ postfix/smtpd\[[0-9]+\]: ((dis)?connect|setting up TLS connection|lost connection after AUTH) from [^[:space:]]+\[[\.0-9]+\]$ @@ -232,8 +232,9 @@ postfix/smtpd\[[0-9]+\]: (lost connection|timeout) after [^ ]+ from [^[:space:]] postfix/smtpd\[[0-9]+\]: [A-Z0-9]+: [^[:space:]]+\[[\.0-9]+\], sasl_method=PLAIN, sasl_username=[[:alnum:]]+$ postfix/smtpd\[[0-9]+\]: warning: Illegal address syntax from [^[:space:]\[]+\[[\.0-9]+\] in (MAIL command: <[^>]+>|RCPT command: )$ postfix/smtpd\[[0-9]+\]: warning: [\.0-9]+: address not listed for hostname [^[:space:]]+$ +postfix/smtpd\[[0-9]+\]: warning: [\.0-9]+: hostname [^[:space:]]+ verification failed: Host name has no address$ postfix/smtpd\[[0-9]+\]: warning: [^[:space:]]+\[[\.0-9]+\] sent ([^[:space:]]+ header|mail content) instead of SMTP command: .* -postfix/smtpd\[[0-9]+\]: warning: [^[:space:]]+\[[\.0-9]+\]: hostname [^[:space:]]+ verification failed: Host (name has no address|not found)$ +postfix/smtpd\[[0-9]+\]: warning: [^[:space:]]+\[[\.0-9]+\]: hostname [^[:space:]]+ verification failed: Host not found$ # These are only for postfix >= 2.0: postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+\[[\.0-9]+\]: server dropped connection without sending the initial greeting \(port 25\)$ ### ignore.d.server/postgresql @@ -443,6 +444,10 @@ gnome-name-server\[[0-9]+\]: server_is_alive: .* syslogd started: BusyBox v[\.0-9]+ \([^[:space:]]+\)$ init: Entering runlevel: 2 rpc.mountd: authenticated mount request from 192\.168\..* for /home/opt/ltsp/i386 \(/home/opt/ltsp/i386\) +# Laptop sleep +kernel: usb-ohci.c: USB suspend: usb-10:[0-9\.]+$ +kernel: eth[0-9]: suspending, WakeOnLan disabled$ +kernel: eth[0-9]: resuming$ ### ignore.d.workstation/ntpdate ntpdate\[[0-9]+\]: can't find host$ ntpdate\[[0-9]+\]: no servers can be used, exiting$ diff --git a/logcheck/ignore.d.workstation/misc b/logcheck/ignore.d.workstation/misc index 6fe017a..ff5b6cb 100644 --- a/logcheck/ignore.d.workstation/misc +++ b/logcheck/ignore.d.workstation/misc @@ -2,3 +2,7 @@ syslogd started: BusyBox v[\.0-9]+ \([^[:space:]]+\)$ init: Entering runlevel: 2 rpc.mountd: authenticated mount request from 192\.168\..* for /home/opt/ltsp/i386 \(/home/opt/ltsp/i386\) +# Laptop sleep +kernel: usb-ohci.c: USB suspend: usb-10:[0-9\.]+$ +kernel: eth[0-9]: suspending, WakeOnLan disabled$ +kernel: eth[0-9]: resuming$ -- cgit v1.2.3