From: Hendrik Jäger <gitcommit@henk.geekmail.org>
Date: Thu, 1 Dec 2022 13:05:58 +0000 (+0100)
Subject: update rules
X-Git-Url: https://git.netwichtig.de/gitweb/?a=commitdiff_plain;h=10623b4ee271378cd6869f12880bd14c9f34f7ed;p=user%2Fhenk%2Fcode%2Fpuppet%2Fmodules%2Flogcheck.git

update rules
---

diff --git a/files/etc/logcheck/ignore.d.server/local-hostapd b/files/etc/logcheck/ignore.d.server/local-hostapd
index 95902c8..5f631b7 100644
--- a/files/etc/logcheck/ignore.d.server/local-hostapd
+++ b/files/etc/logcheck/ignore.d.server/local-hostapd
@@ -1,12 +1,13 @@
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ WPA: group key handshake completed \(RSN\)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: associated \(aid [[:digit:]]\)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: authenticated$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: deauthenticated due to inactivity \(timer DEAUTH/REMOVE\)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802.11: did not acknowledge authentication response$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: disassociated$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: disassociated due to inactivity$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: deauthenticated due to inactivity \(timer DEAUTH/REMOVE\)$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: authenticated$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.1X: authenticated - EAP type: 25 \(PEAP\)$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.1X: authenticated - EAP type: 25 \(PEAP\) \(PMKSA cache\)$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: associated \(aid [[:digit:]]\)$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ RADIUS: starting accounting session [[:xdigit:]]+$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ WPA: pairwise key handshake completed \(RSN\)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ RADIUS: stopped accounting session [[:xdigit:]]+$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ RADIUS: VLAN ID [[:digit:]]+$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802.11: did not acknowledge authentication response$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ WPA: group key handshake completed \(RSN\)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ WPA: pairwise key handshake completed \(RSN\)$