[Logcheck-commits] r1441 - in logcheck/trunk: debian rulefiles/linux/ignore.d.server

madduck at users.alioth.debian.org madduck at users.alioth.debian.org
Fri Jan 12 11:41:58 CET 2007


Author: madduck
Date: 2007-01-12 11:41:57 +0100 (Fri, 12 Jan 2007)
New Revision: 1441

Modified:
   logcheck/trunk/debian/changelog
   logcheck/trunk/rulefiles/linux/ignore.d.server/kernel
Log:
* ignore.d.server/kernel: ignore messages from bridge subsystem.

Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2007-01-12 10:31:58 UTC (rev 1440)
+++ logcheck/trunk/debian/changelog	2007-01-12 10:41:57 UTC (rev 1441)
@@ -24,6 +24,7 @@
   * ignore.d.server/kernel: ignore several meesages related to hard disks.
   * ignore.d.{server,workstation}/kernel: ignore more messages related to
     removable disks and their filesystems.
+  * ignore.d.server/kernel: ignore messages from bridge subsystem.
 
   * ignore.d.server/pdns: ignore message about . zone refreshes.
 
@@ -47,7 +48,7 @@
 
   * ignore.d.server/dhclient: updated to new style for informational messages.
 
- -- martin f. krafft <madduck at debian.org>  Fri, 12 Jan 2007 11:31:18 +0100
+ -- martin f. krafft <madduck at debian.org>  Fri, 12 Jan 2007 11:41:22 +0100
 
 logcheck (1.2.52) unstable; urgency=low
 

Modified: logcheck/trunk/rulefiles/linux/ignore.d.server/kernel
===================================================================
--- logcheck/trunk/rulefiles/linux/ignore.d.server/kernel	2007-01-12 10:31:58 UTC (rev 1440)
+++ logcheck/trunk/rulefiles/linux/ignore.d.server/kernel	2007-01-12 10:41:57 UTC (rev 1441)
@@ -54,3 +54,6 @@
 # this is stuff related to the webmin bandwidth module, also in use by shorewall it seems
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: BANDWIDTH_OUT:IN= OUT=[[:alnum:]]+ SRC=[.0-9]{7,15} DST=[.0-9]{7,15} LEN=[0-9]+ TOS=0x[[:xdigit:]]+ PREC=0x[[:xdigit:]]+ TTL=[0-9]+ ID=[0-9]+ (DF )?PROTO=TCP SPT=[0-9]+ DPT=[0-9]+ WINDOW=[0-9]+ RES=0x[[:xdigit:]]+ ACK PSH URGP=[0-9]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: BANDWIDTH_IN:IN=[[:alnum:]]+ OUT= MAC=[:[:xdigit:]]+ SRC=[.0-9]{7,15} DST=[.0-9]{7,15} LEN=[0-9]+ TOS=0x[[:xdigit:]]+ PREC=0x[[:xdigit:]]+ TTL=[0-9]+ ID=[0-9]+ (DF )?PROTO=TCP SPT=[0-9]+ DPT=[0-9]+ WINDOW=[0-9]+ RES=0x[[:xdigit:]]+ ACK (PSH )?URGP=[0-9]+$
+# bridging
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: Bridge firewalling registered$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: [[:alnum:]]+: port [[:digit:]]+\([[:alnum:].]+\) entering disabled state$




More information about the Logcheck-commits mailing list