Radek Antoniuk <[email protected]> wrote:
> Jul  7 12:54:12 frodo named[12633]: network unreachable resolving 
> 'validator.w3.org/A/IN': 2001:500:c::1#53
> Jul  7 12:54:12 frodo named[12633]: connection refused resolving 
> 'xklonos.cal.pl/A/IN': 87.98.162.72#53

Here are the two rules I just started using.  These messages are of no
use to me but I have no idea if they are unimportant enough to filter
out for everyone.

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: network unreachable 
resolving '[^[:space:]]+': [.:[:xdigit:]]+#[[:digit:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: connection refused 
resolving '[^[:space:]]+': [.:[:xdigit:]]+#[[:digit:]]+$

-dave




_______________________________________________
Logcheck-devel mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel

Reply via email to