From 10623b4ee271378cd6869f12880bd14c9f34f7ed Mon Sep 17 00:00:00 2001 From: =?utf8?q?Hendrik=20J=C3=A4ger?= Date: Thu, 1 Dec 2022 14:05:58 +0100 Subject: [PATCH] update rules --- files/etc/logcheck/ignore.d.server/local-hostapd | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/files/etc/logcheck/ignore.d.server/local-hostapd b/files/etc/logcheck/ignore.d.server/local-hostapd index 95902c8..5f631b7 100644 --- a/files/etc/logcheck/ignore.d.server/local-hostapd +++ b/files/etc/logcheck/ignore.d.server/local-hostapd @@ -1,12 +1,13 @@ -^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ WPA: group key handshake completed \(RSN\)$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: associated \(aid [[:digit:]]\)$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: authenticated$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: deauthenticated due to inactivity \(timer DEAUTH/REMOVE\)$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802.11: did not acknowledge authentication response$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: disassociated$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: disassociated due to inactivity$ -^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: deauthenticated due to inactivity \(timer DEAUTH/REMOVE\)$ -^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: authenticated$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.1X: authenticated - EAP type: 25 \(PEAP\)$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.1X: authenticated - EAP type: 25 \(PEAP\) \(PMKSA cache\)$ -^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802\.11: associated \(aid [[:digit:]]\)$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ RADIUS: starting accounting session [[:xdigit:]]+$ -^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ WPA: pairwise key handshake completed \(RSN\)$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ RADIUS: stopped accounting session [[:xdigit:]]+$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ RADIUS: VLAN ID [[:digit:]]+$ -^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ IEEE 802.11: did not acknowledge authentication response$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ WPA: group key handshake completed \(RSN\)$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA [[:xdigit:]:]+ WPA: pairwise key handshake completed \(RSN\)$ -- 2.39.2