From: Hendrik Jäger Date: Wed, 14 Feb 2024 09:32:53 +0000 (+0100) Subject: update rules X-Git-Url: https://git.netwichtig.de/gitweb/?a=commitdiff_plain;h=eaa3ce256b4cc038d3ed5d257eab2e0b2fddcb87;p=user%2Fhenk%2Fcode%2Fpuppet%2Fmodules%2Flogcheck.git update rules --- diff --git a/files/etc/logcheck/ignore.d.server/local-chrony b/files/etc/logcheck/ignore.d.server/local-chrony index dd9a313..ffa3ffa 100644 --- a/files/etc/logcheck/ignore.d.server/local-chrony +++ b/files/etc/logcheck/ignore.d.server/local-chrony @@ -1,7 +1,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: chronyd exiting$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: chronyd version 4\.0 starting \(\+CMDMON \+NTP \+REFCLOCK \+RTC \+PRIVDROP \+SCFILTER \+SIGND \+ASYNCDNS \+NTS \+SECHASH \+IPV6 -DEBUG\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: chronyd version [[:digit:]]+\.[[:digit:]]+ starting \(\+CMDMON \+NTP \+REFCLOCK \+RTC \+PRIVDROP \+SCFILTER \+SIGND \+ASYNCDNS \+NTS \+SECHASH \+IPV6 -DEBUG\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Frequency -[[:digit:].]+ \+/- [[:digit:].]+ ppm read from /var/lib/chrony/chrony\.drift$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Loaded seccomp filter$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Loaded seccomp filter \(level 1\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Selected source [[:xdigit:]:.]+( \([[:alnum:].:]+\))?$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Source [[:xdigit:]:.]+ (online|offline)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ chronyd\[[[:digit:]]+\]: Source [[:xdigit:]:.]+ replaced with [[:xdigit:]:.]+ \([[:alnum:]._-]+\)$ diff --git a/files/etc/logcheck/ignore.d.server/local-exim b/files/etc/logcheck/ignore.d.server/local-exim index d9364e4..d737fdd 100644 --- a/files/etc/logcheck/ignore.d.server/local-exim +++ b/files/etc/logcheck/ignore.d.server/local-exim @@ -85,6 +85,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ exim\[[[:digit:]]+\]:( \[1[\\/][[:digit:]]+\])?( [[:digit:]]{4}-[[:digit:]]{2}-[[:digit:]]{2} [[:digit:]:.]+ \[[[:digit:]]+\])? (dovecot_login|dovecot_plain) authenticator failed for ([^[:space:]]+|\([^[:space:]]+\)|[^[:space:]]+ \([^[:space:]]+\)) \[[[:xdigit:].:]+\]:[[:digit:]]+ I=\[[[:xdigit:].:]+\]:[[:digit:]]+: 535 Incorrect authentication data( \(set_id=[[:alnum:]_@.-]+\))?$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ exim\[[[:digit:]]+\]:( \[1[\\/][[:digit:]]+\])?( [[:digit:]]{4}-[[:digit:]]{2}-[[:digit:]]{2} [[:digit:]:.]+ \[[[:digit:]]+\])? End queue run: pid=[[:digit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ exim\[[[:digit:]]+\]:( \[1[\\/][[:digit:]]+\])?( [[:digit:]]{4}-[[:digit:]]{2}-[[:digit:]]{2} [[:digit:]:.]+ \[[[:digit:]]+\])? exim [[:digit:].]+ daemon started: pid=[[:digit:].]+, -q30m, listening for SMTP on port 25 \(IPv6 and IPv4\)( port 587 \(IPv6 and IPv4\))?( and for SMTPS on port 465 \(IPv6 and IPv4\))?$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ exim\[[[:digit:]]+\]:( \[1[\\/][[:digit:]]+\])?( [[:digit:]]{4}-[[:digit:]]{2}-[[:digit:]]{2} [[:digit:]:.]+ \[[[:digit:]]+\])? exim [[:digit:].]+ daemon started: pid=[[:digit:].]+, -q30m, listening for SMTP on \[127.0.0.1\]:25 \[::1\]:25$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ exim\[[[:digit:]]+\]:( \[1[\\/][[:digit:]]+\])?( [[:digit:]]{4}-[[:digit:]]{2}-[[:digit:]]{2} [[:digit:]:.]+ \[[[:digit:]]+\])? H=([^[:space:]]+|\([^[:space:]]+\)|[^[:space:]]+ \([^[:space:]]+\)) \[[[:xdigit:].:]+\]:[[:digit:]]+ I=\[[[:xdigit:].:]+\]:[[:digit:]]+ incomplete transaction \(connection lost\) from <[^[:space:]]+>( for .*)?$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ exim\[[[:digit:]]+\]:( \[1[\\/][[:digit:]]+\])?( [[:digit:]]{4}-[[:digit:]]{2}-[[:digit:]]{2} [[:digit:]:.]+ \[[[:digit:]]+\])? H=([^[:space:]]+|\([^[:space:]]+\)|[^[:space:]]+ \([^[:space:]]+\)) \[[[:xdigit:].:]+\]:[[:digit:]]+ I=\[[[:xdigit:].:]+\]:[[:digit:]]+ incomplete transaction \(QUIT\) from <[^[:space:]]*>$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ exim\[[[:digit:]]+\]:( \[1[\\/][[:digit:]]+\])?( [[:digit:]]{4}-[[:digit:]]{2}-[[:digit:]]{2} [[:digit:]:.]+ \[[[:digit:]]+\])? H=([^[:space:]]+|\([^[:space:]]+\)|[^[:space:]]+ \([^[:space:]]+\)) \[[[:xdigit:].:]+\]:[[:digit:]]+ I=\[[[:xdigit:].:]+\]:[[:digit:]]+ incomplete transaction \(RSET\) from <[^[:space:]]*>( for [^[:space:]]+)?$ diff --git a/files/etc/logcheck/ignore.d.server/local-kernel b/files/etc/logcheck/ignore.d.server/local-kernel index b6482ab..ed7a77a 100644 --- a/files/etc/logcheck/ignore.d.server/local-kernel +++ b/files/etc/logcheck/ignore.d.server/local-kernel @@ -5,9 +5,9 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: (APIC|DBG2|DBGP|DMAR|DSDT|FACP|FACS|FIDT|FPDT|HEST|HPET|IVRS|LPIT|MCFG|OEMB|RSDP|RSDT|SSDT|TPM2|UEFI|XSDT)( 0x[[:xdigit:]]+ [[:xdigit:]]+( \(v[[:digit:]]+ .*\))?)?$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: bus type PCI registered$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: bus type USB registered$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI:( button)? Power Button \[PWRB\]$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI:( button)? Power Button \[PWRF\]$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI:( button)? Sleep Button \[SLPB\]$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI:( button:)? Power Button \[PWRB\]$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI:( button:)? Power Button \[PWRF\]$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI:( button:)? Sleep Button \[SLPB\]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Core revision [[:digit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] acpi_cpufreq: overriding BIOS provided _PSD data$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: [[:digit:]] ACPI AML tables successfully acquired and loaded$ @@ -26,6 +26,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: LAPIC_NMI \(acpi_id\[0x[[:xdigit:]]+\] high edge lint\[0x1\]\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Local APIC address 0x[[:xdigit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Low-level resume complete$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: PCI: Interrupt link INT[A-Z] configured for IRQ [[:digit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: PCI Interrupt Link \[(INT|LNK)[[:alpha:]]\] \(IRQs [[:digit:][:space:]*]+\)( [[:digit:]*]+)?(, disabled\.)?$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: PCI: Interrupt link (LNKA|LNKB|LNKC|LNKD|LNKS) configured for IRQ [[:digit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: PCI Root Bridge \[PCI0\] \(domain 0000 \[bus 00-[[:xdigit:]]+\]\)$ @@ -345,6 +346,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] input: Video Bus as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/LNXVIDEO:00/input/input[[:digit:]]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] In-situ OAM \(IOAM\) with IPv6$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Installing knfsd \(copyright \(C\) 1996 okir@monad\.swb\.de\)\.$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] integrity: (Platform|Machine) keyring initialized$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] integrity: (Platform|Machine) Keyring initialized$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] intel_idle: Local APIC timer is reliable in all C-states$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] intel_idle: MWAIT substates: 0x[[:xdigit:]]+$ @@ -363,7 +365,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] io scheduler mq-deadline registered$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] IP idents hash table entries: [[:digit:]]+ \(order: [[:digit:]]+, [[:digit:]]+ bytes, linear\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] IPI shorthand broadcast: enabled$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] IPv6: ADDRCONF\(NETDEV_CHANGE\): [[:alnum:]]+: link becomes ready$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] IPv6: ADDRCONF\(NETDEV_CHANGE\): [[:alnum:].]+: link becomes ready$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] IRQ [[:digit:]]+: no longer affine to CPU[[:digit:]]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] iTCO_vendor_support: vendor-support=0$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] iTCO_wdt: Found a Intel PCH TCO device \(Version=4, TCOBASE=0x0400\)$ @@ -424,7 +426,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mousedev: PS/2 mouse device common for all mice$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Movable zone start for each node$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mpls_gso: MPLS GSO support$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] MPTCP token hash table entries: 2048 \(order: 3, 49152 bytes, linear\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] MPTCP token hash table entries: [[:digit:]]+ \(order: [[:digit:]], [[:digit:]]+ bytes, linear\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mtrr: corrected configuration.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] MTRR default type: uncachable$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] MTRR default type: write-back$ @@ -604,8 +606,9 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] RAPL PMU: hw unit of domain pp0-core 2\^-14 Joules$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] RAPL PMU: hw unit of domain pp1-gpu 2\^-14 Joules$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=[[:digit:]]$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: Hierarchical (SRCU|RCU) implementation\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: Max phase no-delay instances is 1000\.$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu:( Preemptible)? Hierarchical (SRCU|RCU) implementation\.$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: Preemptible hierarchical (SRCU|RCU) implementation\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=[[:digit:]]\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: srcu_init: Setting srcu_struct sizes based on contention\.$ @@ -668,6 +671,8 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SSE version of gcm_enc/dec engaged.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SVM: kvm: Nested Paging disabled$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SVM: kvm: Nested Paging enabled$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SVM: LBR virtualization supported$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SVM: TSC scaling supported$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Switched APIC routing to cluster x2apic.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Switched APIC routing to physical x2apic.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] system 00:[[:digit:]]+: \[io 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] has been reserved$ @@ -676,6 +681,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] system 00:[[:digit:]]+: \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] has been reserved$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] system 00:[[:digit:]]+: Plug and Play ACPI device, IDs INT[[:xdigit:]]+ PNP[[:xdigit:]]+ \(active\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] system 00:[[:digit:]]+: Plug and Play ACPI device, IDs PNP[[:xdigit:]]+ \(active\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Table-perturb token hash table entries: [[:digit:]]+ \(order: [[:digit:]], [[:digit:]]+ bytes, linear\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] TCP (bind|established) hash table entries: [[:digit:]]+ \(order: [[:digit:]], [[:digit:]]+ bytes, linear\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] TCP: Hash tables configured \(established [[:digit:]]+ bind [[:digit:]]+\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] tcp_listen_portaddr_hash hash table entries: [[:digit:]]+ \(order: [[:digit:]]+, [[:digit:]]+ bytes, linear\)$