Bug#324751: [Logcheck-devel] Bug#324751: bind NSTATS output still being reported

[maximilian attems]

tags 324751 pending
thanks

On Mon, 29 Aug 2005, David D. Kilzer wrote:

> Not only does the patch need to add "NS", but it also needs to add
> "SRV".  Updated patch attached.
> 
> Dave

indeed and alos NAPTR ;)
belows rule works for me on the posted message:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: NSTATS [0-9]+ [0-9]+(
(A|CNAME|SOA|NS|PTR|MX|TXT|AAAA|SRV|38|IXFR|AXFR|ANY|NAPTR)=[0-9]+)+$

thanks a lot for uncovering the duplicate rule
ignore.d.{server,paranoid}/bind

updated the second one and deleted the first.

--
maks