Harrison Metzger
2014-Apr-11 22:07 UTC
[Logcheck-devel] [PATCH] Added files to ignore non-anomalous vtund log lines
Signed-off-by: Harrison Metzger <harrisonmetz at gmail.com> --- rulefiles/linux/ignore.d.server/vtund | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 rulefiles/linux/ignore.d.server/vtund diff --git a/rulefiles/linux/ignore.d.server/vtund b/rulefiles/linux/ignore.d.server/vtund new file mode 100644 index 0000000..b1fa0c4 --- /dev/null +++ b/rulefiles/linux/ignore.d.server/vtund @@ -0,0 +1,4 @@ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ vtund\[[[:digit:]]+\]: Use SSL-aware challenge/response$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ vtund\[[[:digit:]]+\]: Session [_[:alnum:]]+\[[[:digit:]]+(.[[:digit:]]+){3}:[[:digit:]]{1,5}\] opened$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ vtund\[[[:digit:]]+\]: Connection reset by peer \([[:digit:]]+\) +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ vtund\[[[:digit:]]+\]: Session [_[:alnum:]]+ closed$ -- 1.9.1