[Logcheck-devel] Bug#270019: logcheck-database: update and extend ppp/serial/parallel rules

[Ross Boylan]

Package: logcheck-database
Version: 1.2.25
Severity: wishlist

I get a fair amount of chatter related to the serial and parallel
ports in my logs.  In some cases, the logcheck ppp files attempt to
screen out some of these items, but the messages seem to have drifted.

Here are the rules I use.  Obviously, they would need adjustment.
chat\[[[:digit:]]+\]: 
kernel: lp0 off-line
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: parport[[:digit:]]: Printer,
kernel: parport0: PC-style at 0x378 \[PCSPP\]
wheat kernel: lp0: using parport0 \(polling\)\.
# I get lots of PPP BSD Compression module registered
# and Deflate Compression module registered
# This rule obviously ignores all module registration,
# which might or might not be a good thing.
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel:.* module registered

# for CSLIP: code copyright 1989 Regents of the University of California
# existing files attempt to screen this out
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: +CSLIP: code copyright

pppd\[[[:digit:]]+\]: +Connect time [[:graph:]]+ minutes\.$
pppd\[[[:digit:]]+\]: +Connect: +ppp0
pppd\[[[:digit:]]+\]: +local  IP address
pppd\[[[:digit:]]+\]: +primary   DNS address
pppd\[[[:digit:]]+\]: +secondary +DNS address
pppd\[[[:digit:]]+\]: +Cannot determine ethernet address for proxy ARP
pppd\[[[:digit:]]+\]: +using channel
pppd\[[[:digit:]]+\]: +(sent|rcvd) \[
pppd\[[[:digit:]]+\]: +Script /etc/ppp/ip-(up|down) (started|finished)
pppd\[[[:digit:]]+\]: +script /etc/ppp/ip-(up|down), pid [[:digit:]]+
pppd\[[[:digit:]]+\]: +Waiting for
pppd\[[[:digit:]]+\]: +PAP authentication succeeded
pppd\[[[:digit:]]+\]: Perms of /dev/ttyS[[:digit:]] are ok, no 'mesg n' neccesary.
pppd\[[[:digit:]]+\]: +Modem hangup$


-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (990, 'testing'), (50, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.26advncdfs
Locale: LANG=en_US, LC_CTYPE=en_US

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.4.30.2   Debian configuration management sy

-- debconf information:
* logcheck-database/rules-directories-note:
* logcheck-database/standard-rename-note:
* logcheck-database/conffile-cleanup: true
* logcheck-database/security_level: workstation