[Logcheck-commits] Hannes von Haugwitz: i.d.s/bind: ignore "success resolving" messages

[Gerfried Fuchs]

Module: logcheck
Branch: lenny-backports
Commit: 6ae7ccf48ea21707251ca0bb86acb5be0b6df322
URL:    http://git.debian.org/?p=logcheck/logcheck.git;a=commit;h=6ae7ccf48ea21707251ca0bb86acb5be0b6df322

Author: Hannes von Haugwitz <hannes at vonhaugwitz.com>
Date:   Sat Mar 27 07:36:36 2010 +0100

i.d.s/bind: ignore "success resolving" messages

---

 debian/changelog                     |    4 +++-
 rulefiles/linux/ignore.d.server/bind |    1 +
 2 files changed, 4 insertions(+), 1 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index f5c2171..069716f 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -12,6 +12,8 @@ logcheck (1.3.8) UNRELEASED; urgency=low
   * ignore.d.server/kernel:
     - ignore "using internal journal" message
     - adjusted rule to match EXT3-fs and writeback data mode
+  * ignore.d.server/bind:
+    - added rule to ignore "success resolving" messages
 
   [ Gerfried Fuchs ]
   * debian/logcheck.NEWS, debian/logtail.NEWS:
@@ -26,7 +28,7 @@ logcheck (1.3.8) UNRELEASED; urgency=low
     - ignore discarded vacation responses (bulk, auto-submited, duplicates)
     - ignore duplicate forwards 
 
- -- Hanspeter Kunz <hp at edelkunz.ch>  Sat, 27 Mar 2010 00:08:40 +0100
+ -- Hannes von Haugwitz <hannes at vonhaugwitz.com>  Sat, 27 Mar 2010 07:35:52 +0100
 
 logcheck (1.3.7) unstable; urgency=low
 
diff --git a/rulefiles/linux/ignore.d.server/bind b/rulefiles/linux/ignore.d.server/bind
index 38e0c79..1ce2a17 100644
--- a/rulefiles/linux/ignore.d.server/bind
+++ b/rulefiles/linux/ignore.d.server/bind
@@ -9,3 +9,4 @@
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ named\[[[:digit:]]+\]: zone [._[:alnum:]-]+/IN: refresh: failure trying master [._[:alnum:]-]+#53: .*$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ named\[[[:digit:]]+\]: client [.:[:xdigit:]]+#[[:digit:]]+: received notify for zone '[-._[:alnum:]]+': TSIG '[-_[:alnum:]]+'$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ named\[[[:digit:]]+\]: zone [-._[:alnum:]]+/IN: notify from [.:[:xdigit:]]+#[[:digit:]]+: zone is up to date$
+^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]-]+ named\[[0-9]+\]: success resolving '[^[:space:]]+' \(in '[.[:alnum:]-]+'\?\) after (disabling EDNS|reducing the advertised EDNS UDP packet size to 512 octets)$