I want the sshd log to be explicit!

fisherking · Tux's lil' helper Joined: 12 Nov 2003 Posts: 111

I am writing a small utility to monitor my /var/log/sshd/current log!

I have a problem thou. If the log message is repeated, the logger removes the repeated lines and puts a message that tells me that the

kamikaze04 · Posted: Sat Nov 26, 2005 11:12 am Post subject:

Which logger are you using?
_________________
Todo lo que quisiste saber sobre google en: www.noticiasgoogle.es

mordredP

fisherking · Tux's lil' helper Joined: 12 Nov 2003 Posts: 111

I know there are simpler solutions to this problem than my solution, but this is more fun!

I have a lot of bashing on my ssh port, and I am writing a utility (in C) that denies a certain IP to connect after three 'invalid user' connections

It works ok now (not finished yet) , but there is a problem with the log, as I am describing above.

It is not a logger, it just monitors a log.

(my systemlogger is metalog)

mordredP · Posted: Sat Nov 26, 2005 11:43 am Post subject:

edit: i had not read your post carefully.. i don't know about this metalog issue..
_________________
People fall into 10 groups: those who know binary and those who don't
dosmary.netsons.org
01010110

magic919 · Posted: Sat Nov 26, 2005 1:01 pm Post subject:

Try upping logging level of sshd in sshd_config to verbose.

fisherking · Tux's lil' helper Joined: 12 Nov 2003 Posts: 111

aah, thanks!

Logging is perfect!