RE: Error messages from syslogd

 
> Regular expressions, experience, and research are priceless 
> (w/ an emphasis on 
> regular expressions). Along with some luck and intuition,  
> you will (or the 
> individual analzing will) be good to go.  Honestly, simple as that.

uh, d00d. the problem is that in my 10+ years of looking at UNIX log data,
i've only ever seen 4 messages generated *by* syslogd (as opposed to
received by):

stopping
restarting
host unreachable
last message repeated N times

the mere *location* of messages created by syslogd hardly requires a regular
expression. you only have to grep for syslogd!

so my "research" consists of asking this group of experienced people whether
they've ever *seen* other messages (and, of course, reviewing the source
code to get some idea of the range of error messages that are theoretically
possible).

i'm a bit bemused by the thought that lack of experience is my problem
here...

tbird