Technische Dokumentation zum Unix-Verbund ... - Dr. Hubert Feyrer

B.32 Monitoring/filterrules.pl 334
|;
return 1 if m|Xsession:.*logout|;
return 1 if m|Xsgi0.*mgrasReadPixels: pool_build ioctl failed|;
return 1 if m|autofsd.*:.*do_unmount no address for|;
return 1 if m|sshd.*:.*Disconnecting: Too many authentication failures for|;
return 1 if m|syslog:.*midi entered|;
return 1 if m|rfhsi.* INFO: The system is shutting down|;
return 1 if m|rfhsi.* INFO: Please wait|;
return 1 if m|inetd.*:.*inetd received SIGTERM; terminating|;
return 1 if m|syslogd: going down on signal|;
return 1 if m|amd.*:.*Unknown host: .directory|;
return 1 if m|rpc.lockd: Starting|;
return 1 if m|rpc.statd: Starting|;
return 1 if m|rfhpc83.. telnetd.*:.*ttloop: read: Connection reset by peer|;
return 1 if m|sshd.*: WARNING: /etc/primes does not exist, using old prime|;
return 1 if m|fsr.*: / startino=|;
return 1 if m|fsr.*: Completed all .* passes|;
return 1 if m|sendmail.*:.*Relaying denied|; # IDS?
return 1 if m|sendmail.*:.*did not issue MAIL/EXPN/VRFY/ETRN during connection to
MTA|;
return 1 if m|sendmail.*:.*Domain of sender address .* does not exist|;
return 1 if m|ipop3d.*:.*Auth user=.*host=.*nmsgs=|;
return 1 if m|sshd.*: Failed rsa for illegal user .* from|;
return 1 if m|ftpd.*: FTP LOGIN FROM .* as |;
return 1 if m|imapd.*:.*Autologout user=|;
return 1 if m|identd.*: ka_lookup: hash miss|;
return 1 if m|rfhsi.* login.*:.* as |;
return 1 if m|su: .*roles pam_sm_authenticate, service = |;
return 1 if m|kdm.*:.*setting process grp for daemon failed, errno = 1|;
return 1 if m|scsi: .ID 193665 kern.info. sd. at ata.: target . lun .|;
return 1 if m|kdm.*:.* Cannot open server authorization file /usr/openwin/lib/X11/
xdm/authdir|;
return 1 if m|printer: powered up|;
return 1 if m|printer: offline or intervention needed|;
return 1 if m|sshd.*:.*Server listening on :: port 22|;
return 1 if m|sshd.*:.*Server listening on 0.0.0.0 port 22|;
return 1 if m|rfhsi.*Xsession: .*UX:sh.*ERROR|;
return 1 if m|rfhsi.*Xsession: .*mkdir: cannot create directory|;
return 1 if m|rfhs8012 ufs:.*quota_ufs: over disk and time limit|;
return 1 if m|rfhs8012 ufs:.*quota_ufs: over hard disk limit|;
return 1 if m|rfhs8012 ufs:.*quota_ufs: Warning: over disk|;
return 1 if m|rfhsi.*Xsession: .* fatal IO error 131.*Connection reset by peer|;
return 1 if m|xdm.*Rereading servers file /var/X11/xdm/Xservers|;
return 1 if m|Server for display :0 terminated unexpectedly: 2304|;
return 1 if m|/netbsd: NetBSD 1.5.*(.*) #[0-9]*:|;
return 1 if m|/netbsd: .*@.*:.*sys/arch/.*/compile|;
return 1 if m|/netbsd: pchb0: Intel product 0x2501 .rev. 0x04\)|;
return 1 if m|/netbsd: ukphy0: OUI 0x001018, model 0x0017, rev. 7|;
return 1 if m|/netbsd: ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX,
auto|;
return 1 if m|/netbsd: pcib0: Intel 82801AA LPC Interface Bridge \(rev. 0x02\)|;
return 1 if m|/netbsd: wd0: drive supports PIO mode .*, DMA mode .*, Ultra-DMA mode
.*|;
return 1 if m|/netbsd: wd0\(pciide0:0:0\): using PIO mode .*, Ultra-DMA mode .*|;
return 1 if m|/netbsd: sd0: drive offline|;
return 1 if m|/netbsd: sd0: 32-bit data port|;
return 1 if m|/netbsd: sd0: drive supports PIO mode 3|;
return 1 if m|/netbsd: sd0\(pciide0:1:1\): using PIO mode 3|;
return 1 if m|ip: .ID 976445 kern.notice.*ip_option_process: bad opt 0x5|;
return 1 if m|/netbsd: Intel 82801AA SMBus Controller.*at pci0 dev 31 function 3 not
configured|;
return 1 if m|/netbsd: Intel 82801AA AC-97 Audio Controller \(audio multimedia,
revision 0x02\) at pci0 dev 31 function 5 not configured|;
return 1 if m|/netbsd: isapnp0: no ISA Plug 'n Play devices found|;
return 1 if m|pcschuster /netbsd: pciide0:1:1: pio setting rejected, falling back to
PIO mode 0|;
return 1 if m|lpd.*: restarted|;
return 1 if m|rsh.*: pam_authenticate: error Authentication failed|;
return 1 if m|Xsession: .*: mv: cannot stat .*: No such file or directory
return 1 if m|su: .ID 366847.*'su [a-z][a-z][a-z]\d\d\d\d\d' succeeded for [a-z][a-
(c) 1996-2003 Hubert Feyrer Stand: 21. Oktober 2003