Date: 26 Nov 2005 10:12:50 -0500 From: Lowell Gilbert <freebsd-questions-local@be-well.ilk.org> To: James Long <list@museum.rain.com> Cc: freebsd-questions@freebsd.org Subject: Re: How to have sshd log IP numbers instead of reverse lookups Message-ID: <44y83bphn1.fsf@be-well.ilk.org> In-Reply-To: <20051125035711.GA58357@ns.museum.rain.com> References: <20051125035711.GA58357@ns.museum.rain.com>
next in thread | previous in thread | raw e-mail | index | archive | help
James Long <list@museum.rain.com> writes: > I was looking at /var/log/auth.log and saw an entry of the form: > > Nov 24 18:41:37 ns sshd[58083]: error: PAM: authentication error for username from example.com > > I wish to have an IP number logged where sshd has instead logged > 'example.com' > > Reading sshd's man page and sshd_config's man page, I don't find any > way to control this. > > Since 'example.com' could have multiple IP numbers, how can I change > sshd's configuration to log the IP number from whence the > authentication error originated? If I recall correctly, those messages should be associated with other messages about the host connecting, which would include the IP address.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44y83bphn1.fsf>