update rules

diff --git a/files/etc/logcheck/ignore.d.server/local-hostapd b/files/etc/logcheck/ignore.d.server/local-hostapd
index 95902c8677676901887b4f03c65ac69efc548145..5f631b7a5dbf62b25beba72dc5a341ab48d4c07a 100644 (file)
--- a/files/etc/logcheck/ignore.d.server/local-hostapd
+++ b/files/etc/logcheck/ignore.d.server/local-hostapd
@@ -1,12 +1,13 @@
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ WPA: group key handshake completed \(RSN\)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: associated \(aid [[:digit:]]\)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: authenticated$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: deauthenticated due to inactivity \(timer DEAUTH/REMOVE\)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802.11: did not acknowledge authentication response$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: disassociated$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: disassociated due to inactivity$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: deauthenticated due to inactivity \(timer DEAUTH/REMOVE\)$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: authenticated$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.1X: authenticated - EAP type: 25 \(PEAP\)$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.1X: authenticated - EAP type: 25 \(PEAP\) \(PMKSA cache\)$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: associated \(aid [[:digit:]]\)$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ RADIUS: starting accounting session [[:xdigit:]]+$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ WPA: pairwise key handshake completed \(RSN\)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ RADIUS: stopped accounting session [[:xdigit:]]+$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ RADIUS: VLAN ID [[:digit:]]+$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802.11: did not acknowledge authentication response$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ WPA: group key handshake completed \(RSN\)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ WPA: pairwise key handshake completed \(RSN\)$