[Logcheck-devel] tinydns-cache

Klaus Ita deb.ian at worstofall.com
Wed Nov 17 16:42:07 UTC 2004


hi.
added these to my ignore.d.server in order to ba able to include the
djbdns-cache log.

^@[a-fA-F0-9]{24} nxdomain [[:alnum:]]+ [[:digit:]]+ [._[:alnum:]-]+.$
^@[a-fA-F0-9]{24} cached (cname|ns) [._[:alnum:]-]+. [._[:alnum:]-]+.$
^@[a-fA-F0-9]{24} cached nxdomain [._[:alnum:]-]+.$
^@[a-fA-F0-9]{24} nodata [[:alnum:]]+ [[:digit:]]+ [[:digit:]]+ [._[:alnum:]-]+.$
^@[a-fA-F0-9]{24} stats [[:digit:]]+ [[:digit:]]+ [[:digit:]] 0$
^@[a-fA-F0-9]{24} rr [[:alnum:]]+ [[:digit:]]+ (cname|ns|ptr) [._[:alnum:]-]+(in-addr.arpa)?. [._[:alnum:]-]+.$
^@[a-fA-F0-9]{24} rr [[:alnum:]]+ [[:digit:]]+ soa [._[:alnum:]-]+(in-addr.arpa)?. [._[:alnum:]-]+. [._[:alnum:]-]+.  [[:digit:]]+ [[:digit:]]+ [[:digit:]]+ [[:digit:]]+ [[:digit:]]+$
^@[a-fA-F0-9]{24} rr [[:alnum:]]+ [[:digit:]]+ [[:digit:]]+ [._[:alnum:]-]+. [[:alnum:]-]+$
^@[a-fA-F0-9]{24} tx [[:digit:]]+ [[:digit:]]+ [._[:alnum:]-]+.  [._[:alnum:]-]*.[[:space:][:alnum:]]+$

... still examining them for exceptions. but works well so far.

regs,
klaus




More information about the Logcheck-devel mailing list