SF.net SVN: logwatch:[237] scripts/services/sshd

[email protected] Mon, 15 Sep 2014 22:26:31 +0000
Newsgroups gmane.comp.log.logwatch.devel
Message-ID <[email protected]>
Revision: 237
          http://sourceforge.net/p/logwatch/code/237
Author:   bjorn1
Date:     2014-09-15 22:26:30 +0000 (Mon, 15 Sep 2014)
Log Message:
-----------
ignore expected disconnect by application

Modified Paths:
--------------
    scripts/services/sshd

Modified: scripts/services/sshd
===================================================================
--- scripts/services/sshd	2014-09-15 22:10:32 UTC (rev 236)
+++ scripts/services/sshd	2014-09-15 22:26:30 UTC (rev 237)
@@ -383,7 +383,8 @@
    } elsif ( my ($Reason) = ($ThisLine =~ /^Authentication refused: (.*)$/ ) ) {
       $RefusedAuthentication{$Reason}++;
    } elsif ( my ($Host,$Reason) = ($ThisLine =~ /^Received disconnect from ([^ ]*): (.*)$/)) {
-      $DisconnectReceived{$Reason}{$Host}++;
+      # Reason 11 (SSH_DISCONNECT_BY_APPLICATION) is expected, and logged at severity level INFO
+      if ($Reason != 11) {$DisconnectReceived{$Reason}{$Host}++;}
    } elsif ( my ($Host) = ($ThisLine =~ /^ROOT LOGIN REFUSED FROM ([^ ]*)$/)) {
       $RootLogin{$Host}++;
    } elsif ( my ($Error) = ($ThisLine =~ /^Cannot release PAM authentication\[\d\]: (.*)$/)) {

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.


------------------------------------------------------------------------------
Want excitement?
Manually upgrade your production database.
When you want reliability, choose Perforce
Perforce version control. Predictably reliable.
http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk