46 lines
1.3 KiB
Text
46 lines
1.3 KiB
Text
#
|
|
# from http://sixshooter.v6.thrupoint.net/SEC-examples/article.html
|
|
#
|
|
# PHYSMOD.conf - Events concerning physical modifications
|
|
# to the system.
|
|
#
|
|
#
|
|
#Logs involving physical modifications (PHYSMOD)
|
|
#------------------------------------------------
|
|
#Nov 14 21:11:19 foohost /kernel: pccard: card inserted, slot 0
|
|
#Nov 14 22:28:09 foohost /kernel: pccard: card removed, slot 0
|
|
#Nov 12 19:46:31 foohost /kernel: de0: link down: cable problem?
|
|
#Nov 12 19:46:42 foohost /kernel: de0: autosense failed: cable problem?
|
|
#Oct 18 06:26:37 foohost pccardd[49]: ep0: 3Com Corporation (/3C589/) inserted.
|
|
#Oct 18 06:26:42 foohost pccardd[49]: pccardd started
|
|
#
|
|
|
|
#
|
|
# PCMCIA Card Insertion, Removal
|
|
# --------------------------------
|
|
#
|
|
type=Single
|
|
ptype=RegExp
|
|
pattern=\S+\s+\d+\s+\S+\s+(\S+)\s+/kernel: pccard: card (\S+), slot (\d+)
|
|
desc=$0
|
|
action=write - PHYSMOD: $1 pccard: card $2 in slot $3 at %t
|
|
|
|
#
|
|
# PCMCIA Card Daemon
|
|
# --------------------------------
|
|
#
|
|
type=Single
|
|
ptype=RegExp
|
|
pattern=\S+\s+\d+\s+\S+\s+(\S+)\s+pccardd\[\d+\]: (.*)
|
|
desc=$0
|
|
action=write - PHYSMOD: $1 pccardd: $2 at %t
|
|
|
|
#
|
|
# Cabling Problem
|
|
# ----------------
|
|
#
|
|
type=Single
|
|
ptype=RegExp
|
|
pattern=\S+\s+\d+\s+\S+\s+(\S+)\s+/kernel: (\S+)\s+(.*?:) cable problem
|
|
desc=$0
|
|
action=write - PHYSMOD: $1 cable problem on $2, text: $3 at %t
|