Gabriel Niebler
2014-Mar-04 20:56 UTC
[Logcheck-devel] Bug#740203: Acknowledgement (logcheck-databse: proposed ignore rules for hostapd)
I have since added a few more filtering rules for harmless messages to
my local-hostapd:
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA
([0-9a-f]{2}:){5}[0-9a-f]{2} IEEE 802\.11: disassociated$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA
([0-9a-f]{2}:){5}[0-9a-f]{2} IEEE 802\.11: disassociated due to inactivity$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA
([0-9a-f]{2}:){5}[0-9a-f]{2} IEEE 802\.11: deauthenticated due to
inactivity$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA
([0-9a-f]{2}:){5}[0-9a-f]{2} WPA: received EAPOL-Key 2/4 Pairwise with
unexpected replay counter$
These might also come in handy for
"/etc/logcheck/ignore.d.server/hostapd".
Cheers
- gabe