[Logcheck-devel] Bug#740203: Acknowledgement (logcheck-databse: proposed ignore rules for hostapd)

Gabriel Niebler gabriel.niebler at gmail.com
Tue Mar 4 20:56:41 UTC 2014


I have since added a few more filtering rules for harmless messages to
my local-hostapd:

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA
([0-9a-f]{2}:){5}[0-9a-f]{2} IEEE 802\.11: disassociated$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA
([0-9a-f]{2}:){5}[0-9a-f]{2} IEEE 802\.11: disassociated due to inactivity$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA
([0-9a-f]{2}:){5}[0-9a-f]{2} IEEE 802\.11: deauthenticated due to
inactivity$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA
([0-9a-f]{2}:){5}[0-9a-f]{2} WPA: received EAPOL-Key 2/4 Pairwise with
unexpected replay counter$

These might also come in handy for "/etc/logcheck/ignore.d.server/hostapd".

Cheers
- gabe



More information about the Logcheck-devel mailing list