[Logcheck-commits] r1370 - in logcheck/trunk: debian rulefiles/linux/ignore.d.server

madduck at users.alioth.debian.org madduck at users.alioth.debian.org
Fri Nov 17 11:24:32 CET 2006


Author: madduck
Date: 2006-11-17 11:24:32 +0100 (Fri, 17 Nov 2006)
New Revision: 1370

Modified:
   logcheck/trunk/debian/changelog
   logcheck/trunk/rulefiles/linux/ignore.d.server/squid
Log:
more filters for warnings on invalid requests

Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2006-11-17 09:54:01 UTC (rev 1369)
+++ logcheck/trunk/debian/changelog	2006-11-17 10:24:32 UTC (rev 1370)
@@ -117,7 +117,7 @@
 
   * Added README.backports.
 
- -- martin f. krafft <madduck at debian.org>  Fri, 17 Nov 2006 10:53:35 +0100
+ -- martin f. krafft <madduck at debian.org>  Fri, 17 Nov 2006 11:24:05 +0100
 
 logcheck (1.2.50) unstable; urgency=low
 

Modified: logcheck/trunk/rulefiles/linux/ignore.d.server/squid
===================================================================
--- logcheck/trunk/rulefiles/linux/ignore.d.server/squid	2006-11-17 09:54:01 UTC (rev 1369)
+++ logcheck/trunk/rulefiles/linux/ignore.d.server/squid	2006-11-17 10:24:32 UTC (rev 1370)
@@ -56,8 +56,9 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: aioSync: flushing pending I/O operations$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: aioSync: done$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: urlParse: URL too large \([[:digit:]]+ bytes\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: parseHttpRequest: Unsupported method '[[:upper:]]+'$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: clientReadRequest: FD [[:digit:]]+ Invalid Request$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: parseHttpRequest: Unsupported method '.*'$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: parseHttpRequest: Requestheader contains NULL characters$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: clientReadRequest: FD [[:digit:]]+ (\([.[:digit:]]{7,15}:[[:digit:]]{1,5}\) )?Invalid Request$
 # squidguard
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: CACHEMGR: <unknown>@127.0.0.1 requesting 'storedir'$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ squid\[[0-9]+\]: CACHEMGR: <unknown>@127.0.0.1 requesting 'counters'$




More information about the Logcheck-commits mailing list