[Logcheck-commits] Hannes von Haugwitz: i.d.w/wpasupplicant: added rules for wpa_action

Hannes von Haugwitz hvh-guest at alioth.debian.org
Tue Mar 9 16:10:53 UTC 2010


Module: logcheck
Branch: master
Commit: aea9ae07654f73bce2640e678148da83f9689ea7
URL:    http://git.debian.org/?p=logcheck/logcheck.git;a=commit;h=aea9ae07654f73bce2640e678148da83f9689ea7

Author: Hannes von Haugwitz <hannes at vonhaugwitz.com>
Date:   Tue Mar  9 17:01:10 2010 +0100

i.d.w/wpasupplicant: added rules for wpa_action

---

 debian/changelog                                   |    1 +
 rulefiles/linux/ignore.d.workstation/wpasupplicant |    7 +++++++
 2 files changed, 8 insertions(+), 0 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 1b75538..4f7576b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -5,6 +5,7 @@ logcheck (1.3.8) UNRELEASED; urgency=low
     - removed useless trap signal 16
   * ignore.d.workstation/wpasupplicant:
     - allow '_' in id_str of CTRL-EVENT-CONNECTED message
+    - added rules for wpa_action messages
   * ignore.d.workstation/kernel:
     - "Mode Sense" is hexadecimal, not just decimal
     - ignore "usb-storage" message
diff --git a/rulefiles/linux/ignore.d.workstation/wpasupplicant b/rulefiles/linux/ignore.d.workstation/wpasupplicant
index 1f6208e..bd48eb0 100644
--- a/rulefiles/linux/ignore.d.workstation/wpasupplicant
+++ b/rulefiles/linux/ignore.d.workstation/wpasupplicant
@@ -8,3 +8,10 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ wpa_supplicant\[[0-9]+\]: EAP-MSCHAPV2: Authentication succeeded$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ wpa_supplicant\[[0-9]+\]: EAP-TLV: TLV Result - Success - EAP-TLV/Phase2 Completed$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ wpa_supplicant\[[0-9]+\]: WPS-AP-AVAILABLE$
+^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]-]+ wpa_action: (bssid=([0-9a-f]{2}:){5}[0-9a-f]{2}|ssid=[[:alnum:]-]+|id=[0-9]+|id_str=[_[:alnum:]]*)$
+^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]-]+ wpa_action: (WPA_IFACE=wlan[0-9] WPA_ACTION=CONNECTED|WPA_ID=[0-9]+ WPA_ID_STR=[_[:alnum:]]* WPA_CTRL_DIR=/var/run/wpa_supplicant)$
+^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]-]+ wpa_action: (pairwise_cipher=(TKIP|CCMP)|group_cipher=(TKIP|CCMP)|key_mgmt=WPA2(-PSK|/IEEE 802.1X/EAP)|wpa_state=COMPLETED)$
+^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]-]+ wpa_action: ifup wlan[0-9]=[_[:alnum:]]*$
+^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]-]+ wpa_action: creating sendsigs omission pidfile: /lib/init/rw/sendsigs\.omit\.d/wpasupplicant\.wpa_supplicant\.wlan[0-9]\.pid$
+^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]-]+ wpa_action: (Supplicant PAE state=AUTHENTICATED|suppPortStatus=Authorized|EAP state=SUCCESS|selectedMethod=25 \(EAP-PEAP\)|EAP TLS cipher=DHE-RSA-AES256-SHA|EAP-PEAPv0 Phase2 method=MSCHAPV2)$
+^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]-]+ wpa_action: ip_address=(([0-9]|([1-9]|1[0-9]|2[0-4])[0-9]|25[0-5])\.){3}([0-9]|([1-9]|1[0-9]|2[0-4])[0-9]|25[0-5])$




More information about the Logcheck-commits mailing list