Re: Alternative logging destination for sshd

Hi Darren,

thank you, that's a good workaround.

Greetings Tobias

> --- Ursprüngliche Nachricht ---
> Von: Darren Tucker <dtucker@xxxxxxxxxx>
> An: Tob_Sch@xxxxxx
> Kopie: secureshell@xxxxxxxxxxxxxxxxx
> Betreff: Re: Alternative logging destination for sshd
> Datum: Fri, 20 Jan 2006 13:36:54 +1100
>
> On Thu, Jan 19, 2006 at 02:43:04PM +0100, Tob_Sch@xxxxxx wrote:
> > we are using OpenSSH 4.2p1.
> > Is it possible (with the help of documented or undocumented sshd_config
> > parameters, or by changing some header file entries in the source) to
> force
> > sshd to log to a named pipe instead to syslog?
>
> You would need to modify the code or provide replacements for
> openlog/syslog/closelog.
>
> Most syslogds will write to a named pipe if you configure them to do
> so, though. Would that serve your purpose?
>
> --
> Darren Tucker (dtucker at zip.com.au)
> GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
> Good judgement comes with experience. Unfortunately, the experience
> usually comes from bad judgement.
>

--
10 GB Mailbox, 100 FreeSMS/Monat http://www.gmx.net/de/go/topmail
+++ GMX - die erste Adresse für Mail, Message, More +++

Relevant Pages

  • Re: Alternative logging destination for sshd
    ... or by changing some header file entries in the source) to force ... > sshd to log to a named pipe instead to syslog? ... Most syslogds will write to a named pipe if you configure them to do ... Good judgement comes with experience. ...
    (SSH)
  • Re: deadlock also with 2.6.9 nosmp, and 2.6.10-rc1 nosmp, was Re: deadlock with 2.6.9
    ... I was able to 'killall -9 cron' and kill all of the cron tasks. ... unix_wait_for_peer (sshd), futex_wait, and do_exit (zombie ... > The system is a syslog collector for>100 devices that log everything at ... >> the mirrors had kicked a partition out. ...
    (Linux-Kernel)
  • Operation would block
    ... my rsync over ssh process aborts. ... In the sshd ... debug mode I receive: "Operation would block". ... In syslog it says: ...
    (SSH)
  • Re: how would openssh react face to an attack ?
    ... >but how would it react face to an attack? ... account after X password failures. ... if the OS doesn't support lockout then sshd doesn't either. ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: telnet tunnelling ssh
    ... >That host has ssh package installed and sshd up and running. ... >(All looks silly but it's the truth) ... >connection already established? ... Good judgement comes with experience. ...
    (comp.security.ssh)