Logcheck devel - Apr 2011 - avahi-daemon rule

Hi,

I created a rule to clean up some cruft avahi-daemon was leaving in my
server logcheck.
Create the file avahi-daemon in  /etc/logcheck/ignore.d.server/ and add the
following....


\w{3} [ :0-9]{11} [._[:alnum:]-]+ avahi-daemon\[[0-9]+\]: Invalid query
packet.$
\w{3} [ :0-9]{11} [._[:alnum:]-]+ avahi-daemon\[[0-9]+\]: last message
repeated [[:digit:]] times$

Just wanted to share that with others as I had to create it.  I also posted
on my blog at www.geeksedition.com

Cheers,
//Ian\\



-- 
____________________________________________________
Ian Langdon,  Linux Systems Administrator - Trapeze
www.trapeze.com  -  416.601.1999 x327
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20110406/7f6b0077/attachment.htm>

Ian Langdon <ilangdon at trapeze.com> wrote:
> \w{3} [ :0-9]{11} [._[:alnum:]-]+ avahi-daemon\[[0-9]+\]: Invalid query
> packet.$
> \w{3} [ :0-9]{11} [._[:alnum:]-]+ avahi-daemon\[[0-9]+\]: last message
> repeated [[:digit:]] times$
Second rule should probably be "[[:digit:]]+":

"last message repeated 9 times" would match, but "last message
repeated
10 times" wouldn't.

Thanks Ian,
-j

-- 
Jeremy L. Gaddis