Package: logcheck-database
Version: 1.2.39
Severity: normal
I use dhcp3-server and a dhcp client which is Sony HDD video recorder
CoCoon. The client not return client host name.
In this case, dhcpd server assumed the client host name is (none).
Therefor dhcpd output log described below.
> Jan 7 10:49:24 on-o dhcpd: DHCPDISCOVER from 08:00:46:33:55:77 ((none)) via
> eth0
> Jan 7 10:49:25 on-o dhcpd: DHCPOFFER on 192.168.1.4 to 08:00:46:33:55:77
> ((none)) via eth0
> Jan 7 10:49:25 on-o dhcpd: DHCPREQUEST for 192.168.1.4 (192.168.1.1) from
> 08:00:46:33:55:77 ((none)) via eth0
> Jan 7 10:49:25 on-o dhcpd: DHCPACK on 192.168.1.4 to 08:00:46:33:55:77
> ((none)) via eth0
But /etc/ignore.d.server/dhcp file is
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): DHCPACK on [.0-9]+ to
> [:[:alnum:]]+ (\([._[:alnum:]-]+\) |)via [.[:alnum:]]+$
the client host name do not include ().
Logcheck do not ignore the dhcp client log line.
My request is following lines add to /etc/ignore.d.server/dhcp.
It ignore (none) client host name.
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd: DHCPDISCOVER from
[:[:alnum:]]+ \([:._[:alnum:]-()]+\) via [.[:alnum:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd: DHCPOFFER on [.0-9]+ to
[:[:alnum:]]+ \([._[:alnum:]-()]+\) via [.[:alnum:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd: DHCPREQUEST for [.0-9]+
(\([.0-9]+\) |)from [:._[:alnum:]-]+ \([[:alnum:]()]+\) via [.[:alnum:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd: DHCPACK on [.0-9]+ to
[:[:alnum:]]+ \([._[:alnum:]-()]+\) via [.[:alnum:]]+$
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-686
Locale: LANG=ja_JP.UTF-8, LC_CTYPE=ja_JP.UTF-8 (charmap=UTF-8)
Versions of packages logcheck-database depends on:
ii debconf [debconf-2.0] 1.4.30.13 Debian configuration
management sy
-- debconf information:
* logcheck-database/rules-directories-note:
* logcheck-database/standard-rename-note:
* logcheck-database/conffile-cleanup: true
* logcheck-database/security_level: server
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
