Assuming that you are trying to write regexps for every message routinely output by dnsmasq, then you need to add ones of the form dnsmasq[1721]: DHCPACK(eth2) 192.168.1.136 00:20:e0:5e:1d:d8 toffee too, for people using the DHCP server part. The first part is DHCPDISCOVER|DHCPOFFER|DHCPREQUEST|DHCPACK|DHCPRELEASE|DHCPINFO|BOOTP|DHCPNAK|DHCPDECLINE The last two indicate potential problems, and might be left out depending on what your policy is. The part in braces is an interface name and the last section (in this case machine name "toffee") can also be a short message which includes spaces. Cheers, Simon.
Hi Simon,> Assuming that you are trying to write regexps for every message > routinely output by dnsmasq, then you need to add ones of the form > dnsmasq[1721]: DHCPACK(eth2) 192.168.1.136 00:20:e0:5e:1d:d8 toffee > too, for people using the DHCP server part. > > The first part is > DHCPDISCOVER|DHCPOFFER|DHCPREQUEST|DHCPACK|DHCPRELEASE| > DHCPINFO|BOOTP|DHCPNAK|DHCPDECLINE > > The last two indicate potential problems, and might be left out > depending on what your policy is.I've left out DHCPNAK and DHCPDECLINE on the basis that I think you'd want to be warned if something was going wrong with your DHCP server. This has been fixed in the CVS version of logcheck. Thanks for the descriptive bug report! -j