From a56cd9aff095c31a59213ab99995adac60921326 Mon Sep 17 00:00:00 2001 From: Jonas Smedegaard Date: Thu, 26 Dec 2002 14:34:18 +0000 Subject: Merging some dhcp lines. Adding a temporary line specific to tulle.haakansson.com. --- logcheck/ignore.d.workstation/local | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) (limited to 'logcheck/ignore.d.workstation') diff --git a/logcheck/ignore.d.workstation/local b/logcheck/ignore.d.workstation/local index d37a673..e25e235 100644 --- a/logcheck/ignore.d.workstation/local +++ b/logcheck/ignore.d.workstation/local @@ -74,14 +74,12 @@ dhclient(-2.2.x)?: irda0: unknown hardware address type 783$ ### ignore.d.server/dhcp.changes # NB: dhcp3 entries are in dhcp3-common dhcpd-2.2.x: Abandoning IP address [\.0-9]+: (declined\.|pinged before offer) $ +dhcpd-2.2.x: BOOT(DISCOVER|REQUEST) from [0-9a-f:]+ via eth[0-9]+ $ dhcpd-2.2.x: BOOTREPLY for [\.0-9]+ to [^[:space:]]+ ([0-9a-f:]+) via eth[0-9]+ $ -dhcpd-2.2.x: BOOTREQUEST from [0-9a-f:]+ via eth[0-9]+ $ dhcpd-2.2.x: DHCP(ACK|NAK|OFFER) on [\.0-9]+ to [0-9a-f:]+ via eth[0-9]+ $ -dhcpd-2.2.x: DHCPDISCOVER from .* via eth[0-9]+ $ +dhcpd-2.2.x: DHCP(DECLINE on|RELEASE of|REQUEST for) [\.0-9]+ from [0-9a-f:]+( \([^[:space:]]+\))? via eth[0-9]+ \((not )?found\) $ dhcpd-2.2.x: DHCPINFORM from [\.0-9]+ $ -dhcpd-2.2.x: DHCPDECLINE on [\.0-9]+ from [0-9a-f:]+ via eth[0-9]+ $ -dhcpd-2.2.x: DHCPRELEASE of [\.0-9]+ from [0-9a-f:]+ via eth[0-9]+ \((not )?found\) $ -dhcpd-2.2.x: DHCPREQUEST for [\.0-9]+ from [0-9a-f:]+( \([^[:space:]]+\))? via eth[0-9]+ $ +dhcpd-2.2.x: DHCPREQUEST for [\.0-9]+ from [0-9a-f:]+( \([^[:space:]]+\))? via eth[0-9]+: wrong network\.$ ### ignore.d.server/dhcp3-common dhcpd: Abandoning IP address [\.0-9]+: pinged before offer$ dhcpd: BOOTREQUEST from [0-9a-f:]+$ @@ -349,7 +347,8 @@ sshd\[[0-9]+\]: packet_set_maxsize: setting to 4096 ## postfix postfix.*\[[0-9]+\]: .* from= postfix/smtpd\[[0-9]+\]: warning: Illegal address syntax from [\.[:alnum:]-]+\[[\.0-9]+\] in MAIL command: - +## Tulle getting spammed +tulle postfix/smtpd\[[0-9]+\]: too many errors after RCPT from unknown\[\.0-9]+[\] rpc.mountd: authenticated mount request from .* for .* ## snort snort: .*FrontPage -- cgit v1.2.3