[Logcheck-devel] Bug#277644: logcheck-database: ignore rules for removable media

[Lee Maguire]

Package: logcheck-database
Version: 1.2.29
Severity: wishlist

These are some kernel ignore rules I use in the workstation setting
relating to removable media (usb, zip, cdr).


^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: Initializing USB Mass Storage driver\.\.\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usbcore: registered new driver usb-storage$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: USB Mass Storage support registered.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: scsi[0-9]+ : SCSI emulation for USB Mass Storage devices$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: SCSI device sd[a-z]: [0-9]+ 512-byte hdwr sectors \([0-9]+ MB\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: sd[a-z]: Write Protect is off$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: Mode Sense: [ 0-9]{11}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: assuming drive cache: write through$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: Attached scsi removable disk sd[a-z] at scsi[0-9], channel [0-9], id [0-9], lun [0-9]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: ISOFS: changing to secondary root$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: ide-floppy driver .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: hd[a-z]: tray open$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ usb\.agent\[[0-9]+\]:[[:space:]]+usb-storage: loaded successfully$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ scsi\.agent\[[0-9]+\]: disk at /devices/.*