From 5579bed4780421fe87d3e6a7e4855f59e36b4e2d Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Wed, 2 Dec 2015 02:49:30 +0000 Subject: [PATCH] Add some more sshd weeds to the logs. --- roles/epylog/files/merged/weed_local.cf | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/roles/epylog/files/merged/weed_local.cf b/roles/epylog/files/merged/weed_local.cf index 1a285e93bb..714dcc2aa4 100644 --- a/roles/epylog/files/merged/weed_local.cf +++ b/roles/epylog/files/merged/weed_local.cf @@ -293,6 +293,10 @@ sshd.*: pam_succeed_if\(sshd:auth\): requirement.* sshd.*: pam_unix\(sshd:auth\): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=.* sshd.*: PAM .* more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=.* sshd.*: pam_unix\(sshd:auth\): check pass; user unknown +sshd.*: error: maximum authentication attempts exceeded for.*from.*port.*ssh2 [preauth] +sshd.*: Disconnecting: Too many authentication failures [preauth] +sshd.*: Disconnected from.* +sshd.*: Read error from remote host.* stunnel:.*connected remote.* stunnel:.*SSL_read.* stunnel:.*Connection reset.*