Bug#301175: [Logcheck-devel] Bug#301175: logcheck-databas: SSH rules for debug level

[Jari Aalto]

| Hi Jari,
| 
| On Thu, Mar 24, 2005 at 10:17:39AM +0200, Jari Aalto wrote:
| > If it were possible, please add rules to ignore SSH debug level messages
| > like these:
| > 
| >   Mar 22 18:59:29 cante sshd[5673]: debug2: channel 4: rcvd adjust 66020
| >   Mar 22 18:59:34 cante sshd[5673]: debug2: channel 4: window 32736 sent adjust 32800
| > 
| > Sometimes the SSH need to be run with DEBUG in order to pinpoint
| > connection troubles and the logcheck messages tend to be rather long
| > if these messages are included.
| 
| I think we probably don't want to have debug filters in place by default, but
| this has given me an idea.
| 
| We get a lot of requests for start/stop messages and debug messages.  I'm not
| really up for supporting debug messages, but if people want to write patches,
| I will include a new "optional" rule directory (perhaps there is a better
| name for this) that will be disabled by default, but allow for submission of
| start/stop messages and debug messages.
| 
| Sound good?

Sure, please include the directory and I'm sure people contribute
patches. Some debug messages are more important than the others, so
the fileter will work equally well for those cases too.

Jari