[Logcheck-commits] CVS logcheck/rulefiles/linux/ignore.d.server

CVS User jlps-guest logcheck-devel at lists.alioth.debian.org
Sat Oct 15 14:06:13 UTC 2005


Update of /cvsroot/logcheck/logcheck/rulefiles/linux/ignore.d.server
In directory haydn:/tmp/cvs-serv23966

Modified Files:
	ssh 
Log Message:
Fix rule to match all possible ipv6 addresses


--- /cvsroot/logcheck/logcheck/rulefiles/linux/ignore.d.server/ssh	2005/09/01 18:57:56	1.13
+++ /cvsroot/logcheck/logcheck/rulefiles/linux/ignore.d.server/ssh	2005/10/15 14:06:13	1.14
@@ -9,5 +9,5 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: refused connect from [:[:alnum:].]+ \([:[:alnum:].]+\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: fatal: Timeout before authentication for [:[:alnum:].]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: nss_ldap: reconnect(ing|ed) to LDAP server(\.\.\.| after [0-9]+ attempt\(s\))$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Did not receive identification string from ::ffff:[0-9.]{7,15}$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Did not receive identification string from (::ffff:)?[:0-9a-f.]{7,15}$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Authorized to [^[:space:]]+, krb5 principal [^[:space:]]+ \(krb5_kuserok\)$



More information about the Logcheck-commits mailing list