[Logcheck-devel] Bug#277636: logcheck-database: support for dnsmasq

[Wouter Leonard de Vries]

Jamie L. Penman-Smithson wrote:

>
>
>  
>
>>^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: using
>>nameserver .*$
>>    
>>
>
>This rule is a little too broad, could you post some log messages so we
>can tailor this a bit more?
>
>
>  
>
it is of this form:

Oct 21 09:24:58 phoenix dnsmasq[468]: using nameserver 212.29.160.1#53

so maybe the expression should read:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: using nameserver [#\.0-9]$




-- 
Wouter de Vries <w.l.devries at student.tudelft.nl>