+ * dsa-check-zone-rrsig-expiration: Do not ask for RRSIG directly, instead
+ ask for SOA with dnssec data. Apparently some nameservers do give you the
+ RRSIG on the DS record instead of a referral (rcode0's for instance).
+ * dsa-check-hpasm: Support supplying a list of things for which failures are
+ ignored.
+ * dsa-check-soas: do some queries without RD set.
+ * dsa-check-running-kernel: in cat_vmlinux(), only consider the first 5 hits
+ for the magic start sequence. This makes running times bearable on our
+ new octeons.
+
+ [ Hendrik Köhler ]
+ * Extend dsa-check-entropy output so Icinga2 can process performance
+ data (e.g. used by Graphite).
+
+ -- Peter Palfrader <weasel@debian.org> Wed, 05 Nov 2014 14:57:51 +0100