Sshguard stops analyzing auth.log after logrotate. I use syslog-ng on Linux.
How to reproduce:
start sshd
start sshguard
#force a log rotate:
logrotate -f /var/log/auth.log /etc/logrotate.conf
ssh my.ssh.server
Result:
Sshguard won't react to failed sshd auth attempts
Expected results:
Sshguard should analyze the log even after the logrotate.
Possible solution:
I found...
2009-11-02 00:01:57 UTC in sshguard
