Re: sshd timestamp logging

["Andrew Louie" <louiea at gmail dot com>]

thanks,

I successfully installed syslog-ng, but the installtion neglected to
install a syslog-ng.conf file. any idea how i can get/generate that
file?
also can you point me in the right direction of some kind of tutorial
on how to use this syslog-ng? the man pages are alittle esoteric.
or can you post the commands you used to get your logging setup like you have?

On 2/26/07, DePriest, Jason R.  wrote:
> On 2/26/07, Andrew Louie  wrote:
> > I am able to to get sshd to output logs to /var/logs/sshd.log but all
> > the entires do not have time stamps. A search of google yields no
> > useful information on how to enable timestamps, i guess timestamps are
> > just supposed to be attached by default, but that does not seem to be
> > the case here.
> >
> > Anyone have any idea how I can get sshd log entires with time stamps?
> >
> > i am running sshd like so under cygrunsrv:
> >
> > sshd -De
> >
> > thanks
> >
> >
> > --
> > -Andrew Louie
> >
>
> I installed syslog-ng as a service with cygrunsrv and I have sshd log to that.
> It keeps time stamps.
> Liek this:
> Feb 26 12:13:31 srvc sshd: PID 1552: Connection from 172.21.128.39 port 5248
> Feb 26 12:13:38 srvc sshd: PID 1552: Failed none for USER from
> 172.21.128.39 port 5248 ssh2
> Feb 26 12:13:45 srvc sshd: PID 1552: Failed password for USER from
> 172.21.128.39 port 5248 ssh2
> Feb 26 12:13:48 srvc sshd: PID 1552: Accepted password for USER from
> 172.21.128.39 port 5248 ssh2
>
> --
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> Problem reports:       http://cygwin.com/problems.html
> Documentation:         http://cygwin.com/docs.html
> FAQ:                   http://cygwin.com/faq/


--
-Andrew Louie

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/