[Logcheck-commits] Hannes von Haugwitz: i.d.s/klogind: new (ignore "connect from" message)

Hannes von Haugwitz hvh-guest at alioth.debian.org
Mon Feb 1 08:45:08 UTC 2010


Module: logcheck
Branch: master
Commit: 19a7ed35e5e9a62c8cc0e013b0c1f8b734911982
URL:    http://git.debian.org/?p=logcheck/logcheck.git;a=commit;h=19a7ed35e5e9a62c8cc0e013b0c1f8b734911982

Author: Hannes von Haugwitz <hannes at vonhaugwitz.com>
Date:   Mon Feb  1 09:41:33 2010 +0100

i.d.s/klogind: new (ignore "connect from" message)

---

 debian/changelog                        |    2 ++
 rulefiles/linux/ignore.d.server/klogind |    1 +
 2 files changed, 3 insertions(+), 0 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 2f10047..7d82d36 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,8 @@
 logcheck (1.3.7) UNRELEASED; urgency=low
 
   [ Hannes von Haugwitz ]
+  * ignore.d.server/klogind: new
+    - added rule for "connect from" message
   * ignore.d.server/login:
     - added rule for root logins on pseudo terminals
   * ignore.d.server/bind:
diff --git a/rulefiles/linux/ignore.d.server/klogind b/rulefiles/linux/ignore.d.server/klogind
new file mode 100644
index 0000000..1f56f3e
--- /dev/null
+++ b/rulefiles/linux/ignore.d.server/klogind
@@ -0,0 +1 @@
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ klogind\[[0-9]+\]: connect from (([0-9]|([1-9]|1[0-9]|2[0-4])[0-9]|25[0-5])\.){3}([0-9]|([1-9]|1[0-9]|2[0-4])[0-9]|25[0-5]) \((([0-9]|([1-9]|1[0-9]|2[0-4])[0-9]|25[0-5])\.){3}([0-9]|([1-9]|1[0-9]|2[0-4])[0-9]|25[0-5])\)$




More information about the Logcheck-commits mailing list