On Sun, Aug 28, 2005 at 04:08:55PM -0500, David D. Kilzer wrote:
> Attached is a patch against logcheck-database-1.2.41 from unstable to
> add "NS" to the list of reported variables on the NSTATS line to ignore.
It helps if I attach the patch!
Dave
diff -u logcheck/ignore.d.paranoid/bind.orig logcheck/ignore.d.paranoid/bind
--- logcheck/ignore.d.paranoid/bind.orig 2004-07-08 22:03:11.000000000
-0500
+++ logcheck/ignore.d.paranoid/bind 2005-08-28 15:43:37.000000000 -0500
@@ -8,7 +8,7 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: zone transfer \(AXFR\) of
[^[:space:]]+ to [^[:space:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: suppressing duplicate
notify$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: USAGE [0-9]+ [0-9]+
CPU=[\.0-9]+u/[\.0-9]+s CHILDCPU=[\.0-9]+u/[\.0-9]+s$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: NSTATS [0-9]+ [0-9]+(
(A|CNAME|SOA|PTR|MX|TXT|AAAA|38|IXFR|AXFR|ANY)=[0-9]+)+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: NSTATS [0-9]+ [0-9]+(
(A|CNAME|SOA|NS|PTR|MX|TXT|AAAA|38|IXFR|AXFR|ANY)=[0-9]+)+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: XSTATS [0-9]+ [0-9]+(
(RR|RNXD|RFwdR|RDupR|RFail|RFErr|RErr|RAXFR|RLame|ROpts|SSysQ|SAns|SFwdQ|SDupQ|SErr|RQ|RIQ|RFwdQ|RDupQ|RTCP|SFwdR|SFail|SFErr|SNaAns|SNXD|RUQ|RURQ|RUXFR|RUUpd)=[0-9]+)+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: lame server resolving
'[^[:space:]]+' \(in '[^[:space:]]+'\?\): [\.0-9.]+#[0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: Received NOTIFY answer$
