[Logcheck-devel] [PATCH] Added files to ignore non-anomalous vtund log lines

Harrison Metzger harrisonmetz at gmail.com
Fri Apr 11 22:07:51 UTC 2014


Signed-off-by: Harrison Metzger <harrisonmetz at gmail.com>
---
 rulefiles/linux/ignore.d.server/vtund | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 rulefiles/linux/ignore.d.server/vtund

diff --git a/rulefiles/linux/ignore.d.server/vtund b/rulefiles/linux/ignore.d.server/vtund
new file mode 100644
index 0000000..b1fa0c4
--- /dev/null
+++ b/rulefiles/linux/ignore.d.server/vtund
@@ -0,0 +1,4 @@
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ vtund\[[[:digit:]]+\]: Use SSL-aware challenge/response$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ vtund\[[[:digit:]]+\]: Session [_[:alnum:]]+\[[[:digit:]]+(.[[:digit:]]+){3}:[[:digit:]]{1,5}\] opened$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ vtund\[[[:digit:]]+\]: Connection reset by peer \([[:digit:]]+\)
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ vtund\[[[:digit:]]+\]: Session [_[:alnum:]]+ closed$
-- 
1.9.1




More information about the Logcheck-devel mailing list