On 23/04/2023 21:08, Philip Prindeville wrote:
Here's a PCAP of authentication failures: https://www.redfish-solutions.com/misc/kvm1.pcap
Although I see some instances 49 6e, and some of 76 61, I don't see any 49 6e 76 61. If it's in there, it must be encrypted.
I think it will be necessary to do as others have said: run sshd with debugging cranked up.
_______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev