package logcheck-database tags 312729 pending thanks On Thu, 2005-06-09 at 22:30 +0100, Lee Maguire wrote: > Everytime a sucessful ssh login occurs a line such as the following is > sent: <snip>
I've modified the rule in CVS, it now matches the messages you supplied:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Accepted (gssapi|rsa|
dsa|password|publickey|keyboard-interactive/pam) for [^[:space:]]+ from
[^[:space:]]+ port [0-9]+( (ssh|ssh2))?$
Thanks for your bug report,
-j
signature.asc
Description: This is a digitally signed message part
