On Fri, May 24, 2024 at 12:07 AM Damien Miller <djm@xxxxxxxxxxx> wrote:
> On Thu, 23 May 2024, Opty wrote:
> > [...]
>
> This includes the message:
>
> > Connection closed by 127.0.0.1 port 55157
>
> This is logged by sshd at syslog(3) level LOG_INFO. It's possible
> something in your system logging configuration is dropping this
> message.
That seems highly unprobable unless sshd logs using LOG_NEWS facility:
opty@qeporkak:~$ grep -Ev '^(#|$)' /etc/syslog.conf
*.info;*.!warn;\
authpriv.none;cron.none;mail.none;news.none
-/var/log/messages ;RFC5424
*.warn;\
authpriv.none;cron.none;mail.none;news.none
-/var/log/syslog ;RFC5424
*.=debug
-/var/log/debug ;RFC5424
authpriv.*
-/var/log/secure ;RFC5424
cron.* -/var/log/cron
;RFC5424
mail.*
-/var/log/maillog ;RFC5424
*.emerg *
;RFC5424
include /etc/syslog.d/*.conf
opty@qeporkak:~$ ls /etc/syslog.d
opty@qeporkak:~$
opty@qeporkak:~$ sudo logger -p daemon.info -s test
Password:
<30>May 24 18:49:09 root: test
opty@qeporkak:~$ sudo tail -1 /var/log/messages
2024-05-24T18:49:09.982715+02:00 qeporkak root - - - test
Regards,
Opty
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
