#
# Swatch configuration file for constant monitoring
#
# Please read /usr/share/doc/swatch-*/README-mandrake for more information
#

# Bad login attempts
watchfor   /INVALID|REPEATED|INCOMPLETE|[Ff]ail /
	echo bold
	bell 3
	mail addresses=pager\@danen.net,subject=Bad_login_attempt

# Machine room temperature
watchfor   /WizMON/
	echo inverse
	bell

# System crashes and halts
watchfor   /(panic|halt)/
	echo blink red
	bell 3
	mail addresses=pager\@danen.net,subject=System_crash_or_halt

# System reboots
watchfor   /Linux  version/
	echo red
	bell
	mail addresses=pager\@danen.net,subject=System_reboot

# Logins, password changes and such
watchfor   /LOGIN/
	echo yellow
	bell 3
watchfor   /passwd/
	echo yellow
	bell 3
watchfor   /ruserok/
	echo yellow
	bell 3

# Ignore this stuff
ignore   /sendmail/,/nntp/,/xntp|ntpd/,/faxspooler/,/named/

# Report unusual tftp info
ignore   /tftpd.*(ncd|kfps|normal exit)/
watchfor   /tftpd/
	echo
	bell 3

# Kernel problems
watchfor   /file system full/
	echo green
	bell 3

watchfor   /fingerd.*(root|[Tt]ip|guest)/
	echo
	bell 3

watchfor   /su:/
	echo bold

watchfor   /sudo:/
	echo bold

