Hi Peter,
thank you for your response. Servers are running Linux. SSH logs in /var/log/secure, using syslogd, I guess? Gratefully, Lyle ----- Original Message ---- From: Peter M. Abraham <[EMAIL PROTECTED]> To: ossec-list <[email protected]> Sent: Wednesday, 12 December, 2007 8:46:25 PM Subject: [ossec-list] Re: IPs behind a router Greetings Lyle: Without knowing the software doing the logging in the first place, I cannot make meaningful suggestions (not that I would as most of my experience is on Unix in any event). That stated, it may pay to contact the vendor of the logging software to find out if the logs can be adjusted to include the desktop or replace the router IP with the actual IP. Thank you. __________________________________________________________ Sent from Yahoo! Mail - a smarter inbox http://uk.mail.yahoo.com
