Technische Dokumentation zum Unix-Verbund ... - Dr. Hubert Feyrer

B.32 Monitoring/filterrules.pl 332
return 1 if m|/netbsd: boot device: wd0|;
return 1 if m|/netbsd: cd0 at atapibus drive 0|;
return 1 if m|/netbsd: cd0.*using .* mode|;
return 1 if m|/netbsd: cd0: .*port|;
return 1 if m|/netbsd: ex0: interrupting at irq|;
return 1 if m|/netbsd: ex0L: MAC address|;
return 1 if m|/netbsd: isa0 at pcib0|;
return 1 if m|/netbsd: isapnp0: read port|;
return 1 if m|/netbsd: joy0 at isapnp0|;
return 1 if m|/netbsd: joy0: OPL3-SA3 Snd System|;
return 1 if m|/netbsd: joy0: joystick not connected|;
return 1 if m|amd.*:.*Operation not supported by device|;
return 1 if m|sshd.*:.*Closing connection to|;
return 1 if m|sshd.*:.*RSA authentication for|;
return 1 if m|sshd.*:.*User .* for .* not found|;
return 1 if m|sshd.*:.*connect from |;
return 1 if m|sshd.*:.*Accepted .* for .* from |;
return 1 if m|sshd.*:.*Connection from|;
return 1 if m|sshd.*:.* authentication not available for|;
return 1 if m|sshd.*:.* authentication not available for|;
return 1 if m|sshd.*:.*Failed password for|;
return 1 if m|sshd.*:.*Unknown message during authentication|;
return 1 if m|sshd.*:.*packet_set_maxsize: setting to|;
return 1 if m|sshd.*:.*lastlog_get_entry: Error reading|;
return 1 if m|ipop3d.*:.*pop3 service init from|;
return 1 if m|ipop3d.*:.*Login user=.*|;
return 1 if m|sshd.*:.*subsystem request for sftp|;
return 1 if m|userenv: timed out. Environment not propagated|;
return 1 if m|amd.*:.*mount: Input/output error|;
return 1 if m|amd.*:.*mount_cdfs: Input/output error|;
return 1 if m|sshd.*:.*executing remote command as root:.*foreach-host.pl|;
return 1 if m|sshd.*:.*executing remote command as root:.*/tmp/sysmon|;
return 1 if m|/sbin/dhcpagent.*:.*received SIGTERM, shutting down|;
return 1 if m|/sbin/dhcpagent.*:.*dropping interface|;
return 1 if m|genunix: \[ID 936769 kern.info\]|;
return 1 if m|genunix: \[ID 454863 kern.info\]|;
return 1 if m|genunix: \[ID 540533 kern.notice\]|;
return 1 if m|genunix: \[ID 672855 kern.notice\]|;
return 1 if m|genunix: \[ID 678236 kern.info\]|;
return 1 if m|genunix: \[ID 904073 kern.notice\]|;
return 1 if m|genunix: \[ID 913631 kern.notice\]|;
return 1 if m|unix: WARNING: ARP: got MAC address on .* for BCAST IP address
0.0.0.0|;
return 1 if m|unix: \[ID 168242 kern.info\]|;
return 1 if m|unix: \[ID 832595 kern.info\]|;
return 1 if m|unix: \[ID 930857 kern.info\]|;
return 1 if m|syslogd: exiting on signal|;
return 1 if m|sendmail.*: Authentication-Warning: .* set sender to .* using -f|;
return 1 if m|identd.*: Connection from|;
return 1 if m|identd.*: Successful lookup|;
return 1 if m|from: .*for:|;
return 1 if m|sshd.*:.*Connection closed by|;
return 1 if m|/netbsd: .*fvdl\@sushi:/work/trees/netbsd-1-5/sys/arch/i386/compile/
GENERIC|;
return 1 if m|/netbsd: cpu0: Intel Pentium|;
return 1 if m|/netbsd: ex0: 10baseT, 10baseT-FDX, 10base5, 10base2, default
10baseT|;
return 1 if m|/netbsd: ex0: MAC address ..:..:..:..:..:..|;
return 1 if m|/netbsd: mainbus0 \(root\)|;
return 1 if m|/netbsd: pchb0: Intel 82443LX PCI AGP Controller \(PAC\)|;
return 1 if m|/netbsd: pci.: i/o space, memory space enabled|;
return 1 if m|/netbsd: pcib0: Intel 82371AB PCI-to-ISA Bridge \(PIIX4\)|;
return 1 if m|/netbsd: pciide0: bus-master DMA support present|;
return 1 if m|/netbsd: pciide0: .* channel interrupting at irq .*|;
return 1 if m|/netbsd: pciide0: .* channel wired to compatibility mode|;
return 1 if m|/netbsd: pckbc0: using irq 1 for kbd slot|;
return 1 if m|/netbsd: pckbc0: using irq 12 for aux slot|;
return 1 if m|/netbsd: root file system type: ffs|;
return 1 if m|/netbsd: root on wd0a dumps on wd0b|;
return 1 if m|/netbsd: total memory = .* MB|;
(c) 1996-2003 Hubert Feyrer Stand: 21. Oktober 2003