Hi, I'd like to suggest some rules for dhcpcd (see attachments). I've tested them on my Gentoo system with egrep, and also running them for a few days with real logcheck package (I maintain it for Gentoo).
Please review the suggestions, and point out any problems you see. I'd then fix them and submit a git patch. I think these should live in ignore.d.workstation. Is that right? Paweł Hajdan, Jr.
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpcd\[[0-9]+\]: \w+[0-9]+: received
SIGTERM, stopping$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpcd\[[0-9]+\]: \w+[0-9]+: dhcpcd [.0-9]+
starting$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpcd\[[0-9]+\]: \w+[0-9]+: broadcasting
for a lease$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpcd\[[0-9]+\]: \w+[0-9]+:
(acknowledged|offered) [.0-9]+ from [.0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpcd\[[0-9]+\]: \w+[0-9]+: checking
[.0-9]+ is available on attached networks$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpcd\[[0-9]+\]: \w+[0-9]+: renewing lease
of [.0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpcd\[[0-9]+\]: \w+[0-9]+: leased [.0-9]+
for [0-9]+ seconds$
Dec 28 18:23:00 localhost dhcpcd[24945]: eth0: leased 172.16.97.128 for 1800 seconds Dec 28 18:34:44 localhost dhcpcd[24945]: eth0: received SIGTERM, stopping Dec 29 09:57:37 localhost dhcpcd[22981]: eth0: dhcpcd 4.0.15 starting Dec 29 09:57:37 localhost dhcpcd[22981]: eth0: broadcasting for a lease Dec 29 09:57:38 localhost dhcpcd[22981]: eth0: offered 172.16.97.128 from 172.16.97.254 Dec 29 09:57:39 localhost dhcpcd[22981]: eth0: acknowledged 172.16.97.128 from 172.16.97.254 Dec 29 09:57:39 localhost dhcpcd[22981]: eth0: checking 172.16.97.128 is available on attached networks Dec 29 09:57:45 localhost dhcpcd[22981]: eth0: leased 172.16.97.128 for 1800 seconds Dec 29 10:12:45 localhost dhcpcd[23007]: eth0: renewing lease of 172.16.97.128 Dec 29 10:12:45 localhost dhcpcd[23007]: eth0: acknowledged 172.16.97.128 from 172.16.97.254 Dec 29 10:12:45 localhost dhcpcd[23007]: eth0: leased 172.16.97.128 for 1800 seconds Dec 29 10:27:45 localhost dhcpcd[23007]: eth0: renewing lease of 172.16.97.128 Dec 29 10:27:45 localhost dhcpcd[23007]: eth0: acknowledged 172.16.97.128 from 172.16.97.254 Dec 29 10:27:45 localhost dhcpcd[23007]: eth0: leased 172.16.97.128 for 1800 seconds Dec 29 10:42:45 localhost dhcpcd[23007]: eth0: renewing lease of 172.16.97.128 Dec 29 10:42:46 localhost dhcpcd[23007]: eth0: acknowledged 172.16.97.128 from 172.16.97.254 Dec 29 10:42:46 localhost dhcpcd[23007]: eth0: leased 172.16.97.128 for 1800 seconds Dec 29 10:57:46 localhost dhcpcd[23007]: eth0: renewing lease of 172.16.97.128 Dec 29 10:57:46 localhost dhcpcd[23007]: eth0: acknowledged 172.16.97.128 from 172.16.97.254 Dec 29 10:57:46 localhost dhcpcd[23007]: eth0: leased 172.16.97.128 for 1800 seconds Dec 29 11:12:46 localhost dhcpcd[23007]: eth0: renewing lease of 172.16.97.128 Dec 29 11:12:46 localhost dhcpcd[23007]: eth0: acknowledged 172.16.97.128 from 172.16.97.254 Dec 29 11:12:46 localhost dhcpcd[23007]: eth0: leased 172.16.97.128 for 1800 seconds
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Logcheck-devel mailing list [email protected] http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
