I have setup the syslog-ng daemon using Cygwin in Windows 7. What I want to do is to log all of the ssh failed passwords, etc to /var/log/sshd.log. I tried to do this by adding the following line: ...
I'm currently working on setting up some secure syslog connections between a few Fedora servers. This is my currently setup 192.168.56.110 (syslog-server) <----> 192.168.57.110 (syslog-agent) ...
The gist of our problem is that we lose ssh access to our VPN and our logfiles get all mixed up. Doing a hard reboot through our hosting provider's web console seems to fix things, but the problem ...
I'm just wondering about the best way to filter my sshd logs. The problem is that I monitor my boxes over SSH using Nagios and Cacti. They both connect every 5 mins and this clogs up my log files with ...
Does anyone maintain lists of the most frequently guessed account names that are used by attackers brute-forcing ssh? For your amusement, from my main server's logs over the last month (43 313 failed ...
I have noticed that my syslog reports incorrect time for some authentication entries. The typical behaviour looks like this: Feb 16 13:32:20 dev sshd: Invalid user oracle from 126.96.36.199 ...