Re: sshd logs and possible security violation

On Fri, Feb 15, 2002 at 01:17:15PM -, Chris Evans wrote: > What I see in auth.log is (consecutive lines): > Feb 14 23:19:29 www sshd[438]: Did not receive ident string from >xxx.yy.zzz.uu (actual number removed in case!) >I think that's an usuccessful attempt to log in, am I right?

Re: sshd logs and possible security violation

Hi Chris! On Fri, 15 Feb 2002, Chris Evans wrote: > I think this belongs on d.-user not the security or ssh lists. > > Thanks to people who helped point me to logcheck, I saw my first > attempted login from outside today. At least, I'm pretty sure that's > what I saw but I am seeking some i

sshd logs and possible security violation

I think this belongs on d.-user not the security or ssh lists. Thanks to people who helped point me to logcheck, I saw my first attempted login from outside today. At least, I'm pretty sure that's what I saw but I am seeking some information about what gets logged by sshd. What I see in aut