[Logcheck-devel] Re: [Logcheck-commits] r1172 - in logcheck/trunk: debian rulefiles/linux/ignore.d.server

Todd Troxell ttroxell at debian.org
Wed Jul 26 02:58:51 UTC 2006


On Sun, Jul 16, 2006 at 07:07:34AM +0000, madduck at users.alioth.debian.org wrote:
> Author: madduck
> Date: 2006-07-16 07:07:32 +0000 (Sun, 16 Jul 2006)
> New Revision: 1172
> 
> Modified:
>    logcheck/trunk/debian/changelog
>    logcheck/trunk/rulefiles/linux/ignore.d.server/kernel
> Log:
> * ignore.d.server/kernel: ignore interface link status changes. If they are
>   important, we would not be able to get mail about them anyway.

I'm not completely convinced that this is a good idea.  This kind of activity
could indicate tampering or equipment failure.  Are you getting this message
regularly?

-- 
Todd Troxell
http://rapidpacket.com/~xtat




More information about the Logcheck-devel mailing list