Thanks for the info Brandon. The problem is, I'm not getting the same info with syslog as I used to with /var/log/secure.log in Mac 10.6.
Doing "syslog | less", doesn't show any logins, either successful or not, from ssh. Doing "less /var/log/appfirewall.log" shows when the Mac firewall let in an ssh connection, which is helpful, but I would also like to know the IP address of the connecting machine. Is there anyway I can log the IP address of connecting machines, regardless of whether the ssh login is successful or not, with syslog? Thanks for your help. On Mon, Jun 30, 2014 at 10:45 AM, Brandon Allbery <[email protected]> wrote: > On Mon, Jun 30, 2014 at 2:25 AM, Alan <[email protected]> wrote: > >> I'm not sure where macports' sshd writes its logging info. (e.g. for >> ubuntu, sshd writes it to /var/log/auth.log.) >> >> Is there a similar file for macports? >> > > sshd logs via the system syslog facility. On most Linuxes, this means > files under /var/log as specified by some variant of /etc/syslog.conf --- > but there are a number of syslogd variants. In my Fedora 19 VM it's > rsyslogd and the primary control file is /etc/rsyslogd.conf. I don't recall > what Ubuntu uses off the top of my head. > > Apple replaced syslog with the Apple System Log facility, and you use > /Applications/Utilities/Console.app to view them from the GUI or the syslog > command to view from terminal. `man syslog` for details, including pointers > to config files that will tell you how it emulates traditional syslogd and > where it routes messages with facility AUTH and severity INFO or higher. > > -- > brandon s allbery kf8nh sine nomine > associates > [email protected] > [email protected] > unix, openafs, kerberos, infrastructure, xmonad > http://sinenomine.net >
_______________________________________________ macports-users mailing list [email protected] https://lists.macosforge.org/mailman/listinfo/macports-users
