Constant SSHD messages in syslog

From: Baillargeon, Sonny (Sonny.Baillargeon_at_bmonb.com)
Date: 08/24/04

  • Next message: Harry Hoffman: "SUMMARY: Solaris 9 RAID 1+0" 
    Date: Tue, 24 Aug 2004 15:45:50 -0400
To: <sunmanagers@sunmanagers.org>

    2004 Aug 24 15:43:14 server sshd[10258]: [ID 702911 auth.warning]
    Starting daemon in inetd mode.
    2004 Aug 24 15:43:14 server sshd[10258]: [ID 702911 auth.info]
    connection from "127.0.0.1"
    2004 Aug 24 15:43:14 server sshd[10258]: [ID 702911 auth.warning] Daemon
    is running.
    2004 Aug 24 15:43:14 server sshd[10258]: [ID 702911 auth.info] Local
    disconnected: Connection closed.
    2004 Aug 24 15:43:14 server sshd[10258]: [ID 702911 auth.info]
    connection lost: 'Connection closed.'

    I get these from every server I run sshd on. I am using version 3.2.9.1
    from ssh.com. We just installed syslog-ng so I just noticed this.
    After upgrading from an older version of ssh I still get these messages.

    Is this normal for ssh to try to connect to itself.

    Thanks,
    Sonny

    <FONT SIZE =
    1>***************************************************************************
    *
    This e-mail and any attachments may contain confidential and privileged
    information. If you are not the intended recipient, please notify the sender
    immediately by return e-mail, delete this e-mail and destroy any copies. Any
    dissemination or use of this information by a person other than the intended
    recipient is unauthorized and may be illegal. Unless otherwise stated,
    opinions expressed in this e-mail are those of the author and are not endorsed
    by the author's employer.</FONT>
    _______________________________________________
    sunmanagers mailing list
    sunmanagers@sunmanagers.org
    http://www.sunmanagers.org/mailman/listinfo/sunmanagers

  • Next message: Harry Hoffman: "SUMMARY: Solaris 9 RAID 1+0"

    Relevant Pages

    • Re: Specifying tunnel output interface?
      ... with any version of OpenSSH - it may even be a limitation of the SSH ... Specify the interface to transmit from on machines with multiple ... originated by sshd, i.e. the connection from the host where sshd runs to ...
      (comp.security.ssh)
    • Re: Remote GUI Login between Solaris machines?
      ... specific remote host, either as root or by impersonating my uid, can steal ... fake the SSH_* (by guessing? ... connection and do stuff with X windows on MY machine as ME. ... problem is on the remote machine, where the sshd is ...
      (comp.unix.solaris)
    • Re: Specifying tunnel output interface?
      ... with any version of OpenSSH - it may even be a limitation of the SSH ... protocol as such (i.e. it would be necessary for the client to pass the ... originated by sshd, i.e. the connection from the host where sshd runs to ...
      (comp.security.ssh)
    • Re: New SSH Daemon refusing to log any user on
      ... TS> post shows that you did make some kind of connection. ... it's sshd which is implementing the libwrap restriction. ... client-side symptom is a complaint that the initial SSH protocol version ...
      (comp.security.ssh)
    • Re: Selective SSH dictionary attack deterrent
      ... attacks on my SSH server: ... connection attempts from my wife's computer, ... sshd for this. ... stings periodically or whatever (and you may want to libwrap that too): ...
      (comp.os.linux.networking)