On Wed, 06 Jul 2011 10:22:21 +0200 Wojciech Nizinski <niz...@spox.org> wrote:
> Please add following ignore rule for arpwatch: > > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ arpwatch: short \(want 42\)$ It's a shame no-one replied since 2011, Is there still interest in adding this rule to logcheck-database? it looks like it needs updating, eg to add a PID after 'arpwatch', and we'd need an updated rule to add it