[Logcheck-commits] r1406 - in logcheck/trunk: debian rulefiles/linux/ignore.d.server

madduck at users.alioth.debian.org madduck at users.alioth.debian.org
Thu Dec 28 12:11:26 CET 2006


Author: madduck
Date: 2006-12-28 12:11:26 +0100 (Thu, 28 Dec 2006)
New Revision: 1406

Modified:
   logcheck/trunk/debian/changelog
   logcheck/trunk/rulefiles/linux/ignore.d.server/ssh
Log:
* ignore.d.server/ssh: support filtering gssapi-keyex messages; thanks to
  Russ Allbery (closes: #400426).

Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2006-12-28 11:10:13 UTC (rev 1405)
+++ logcheck/trunk/debian/changelog	2006-12-28 11:11:26 UTC (rev 1406)
@@ -30,6 +30,8 @@
   * ignore.d.server/ssh: ignoring message about bad packet length.
   * ignore.d.server/ssh: ignoring message about bad protocol identification.
   * ignore.d.server/ssh: ignore messages about missing auth information.
+  * ignore.d.server/ssh: support filtering gssapi-keyex messages; thanks to
+    Russ Allbery (closes: #400426).
 
   * ignore.d.server/dcc: ignore message about which DCC servers are used.
 
@@ -47,7 +49,7 @@
     (closes: #402204).
   * Do not source debconf confmodule in preinst as it's not needed.
 
- -- martin f. krafft <madduck at debian.org>  Thu, 28 Dec 2006 12:09:38 +0100
+ -- martin f. krafft <madduck at debian.org>  Thu, 28 Dec 2006 12:10:47 +0100
 
 logcheck (1.2.51) unstable; urgency=medium
 

Modified: logcheck/trunk/rulefiles/linux/ignore.d.server/ssh
===================================================================
--- logcheck/trunk/rulefiles/linux/ignore.d.server/ssh	2006-12-28 11:10:13 UTC (rev 1405)
+++ logcheck/trunk/rulefiles/linux/ignore.d.server/ssh	2006-12-28 11:11:26 UTC (rev 1406)
@@ -1,4 +1,4 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Accepted (gssapi(-with-mic)?|rsa|dsa|password|publickey|keyboard-interactive/pam) for [^[:space:]]+ from [^[:space:]]+ port [0-9]+( (ssh|ssh2))?$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Accepted (gssapi(-with-mic|-keyex)?|rsa|dsa|password|publickey|keyboard-interactive/pam) for [^[:space:]]+ from [^[:space:]]+ port [0-9]+( (ssh|ssh2))?$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Postponed keyboard-interactive(/pam)? for [^[:space:]]+ from [^[:space:]]+ port [0-9]+( (ssh|ssh2))?$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: PAM pam_putenv: delete non-existent entry; [[:alnum:]]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Server listening on [:[:xdigit:].]+ port [[:digit:]]+\.$




More information about the Logcheck-commits mailing list