Hi, On 11/10/2007, Daniel Cid <[EMAIL PROTECTED]> wrote: > We expect: > Oct 9 09:50:40 MACHINE sshd[229596]: Accepted password for USER from > 172.29.14.41 port 55839 ssh2 > > While you have: > Oct 9 09:50:40 MACHINE auth|security:info sshd[229596]: Accepted > password for USER from 172.29.14.41 port 55839 ssh2 > > > Is this something special to your AIX config? Can you change it to the > standard format? > Any other AIX user in here with more information on this?
Yep. AIX 5.3 that I am testing ossec on generates this: Oct 11 08:05:46 <machine> auth|security:info sshd[323808]: Accepted publickey for <user> from <host> port 37909 ssh2 -- http://nk99.org/
