[Logcheck-devel] Bug#459875: logcheck-database: new rules for ignore.server.d/dhcp

Thomas Mueller thomas at chaschperli.ch
Wed Jan 9 08:42:02 UTC 2008


Package: logcheck-database
Version: 1.2.54
Severity: normal


I'm using the dhcp server from Debian Etch. These syslog entries arent filtered out and in the changelog of unstable i can't find hints that it is included now.

Sample syslog entries
Jan  9 06:43:05 server dhcpd: if hostname.domain.name IN TXT "31925177e0a832520e651878ee7a93d247" rrset exists and hostname.domain.name IN A 192.168.1.188 rrset exists delete hostname.domain.name IN A 192.168.1.188: success.
Jan  9 06:43:05 server dhcpd: if hostname.domain.name IN A rrset doesn't exist delete hostname.domain.name IN TXT "31925177e0a832520e651878ee7a93d247": success.
Jan  9 06:43:05 server dhcpd: removed reverse map on 188.1.168.192.in-addr.arpa.

New rules for ignore.server.d/dhcp:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd: removed reverse map on [[:alnum:]\.\-]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd: if [[:alnum:]\.\-_]+ IN TXT \"[[:alnum:]]+\" rrset exists and [[:alnum:]\.\-_]+ IN A [0-9\.]{7,16} rrset exists delete [[:alnum:]\.\-_]+ IN A [0-9\.]{7,16}: success.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd: if [[:alnum:]\.\-_]+ IN A rrset doesn't exist delete [[:alnum:]\.\-_]+ IN TXT \"[[:alnum:]]+\": success\.$

- Thomas


-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable'), (100, 'testing')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.22-3-amd64
Locale: LANG=de_CH.UTF-8, LC_CTYPE=de_CH.UTF-8 (charmap=UTF-8)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]        1.5.11etch1 Debian configuration management sy

logcheck-database recommends no packages.

-- debconf information excluded






More information about the Logcheck-devel mailing list