Bug#336079: [Logcheck-devel] Bug#336079: PATCH: rules for ntp over IPv6

[Jamie L. Penman-Smithson]

tags 336079 pending
thanks!

On 27 Oct 2005, at 18:51, Beat Bolli wrote:
> My logcheck mail have started to show entries like
>
> Oct 26 22:08:22 gw ntpd[15646]: synchronized to  
> 2001:660:5001:100::6, stratum 2
>
> so here's a patch to the ntp rule file to filter IPv6 addresses as  
> well:
<snip>

I've modified the rules to look like so..

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronized to  
([0-9.]{7,15}|[0-9a-fA-F:.]{4,39}), stratum [0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: peer ([.0-9]{7,15}| 
[0-9a-fA-F:.]{4,39}) now (in)?valid$

They now match the entries you gave.

Thanks for your bug report,

-- 
-Jamie L. Penman-Smithson <jamie at silverdream.org>
  t: +44 1273 424795; f: +44 1273 424795
  PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8
  never send mail to: oubliette.z at gmail.com


-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20060212/eddb7700/attachment.pgp