Re: [Sshguard-users] sshguard-1.5-r1 on gentoo: log entries missed

[Mij <mi...@ss...>]

Hey Robert,

thanks for your perseverance. I found a subtle regression there.
Please check out r199 and let me know.


On May 12, 2010, at 11:36 , Robert S wrote:

> Sadly this problem still seems to occur in the latest svn version :(
> 
> May 12 16:49:20 hostname sshd[8739]: Invalid user desktop from 67.218.16.28
> May 12 16:49:20 hostname sshguard[31623]: Ignore attack as pid '8739'
> has been forged for service 100.
> May 12 16:49:22 hostname sshd[8742]: Invalid user workshop from 67.218.16.28
> May 12 16:49:22 hostname sshguard[31623]: Ignore attack as pid '8742'
> has been forged for service 100.
> May 12 16:49:24 hostname sshd[8745]: Invalid user mailnull from 67.218.16.28
> May 12 16:49:24 hostname sshguard[31623]: Ignore attack as pid '8745'
> has been forged for service 100.
> 
> # ps ax |grep sshguard
> 31623 ?        Sl     0:00 /usr/local/sbin/sshguard -l
> /var/log/sshguard.fifo -b /usr/local/var/sshguard/blacklist.db -w
> /etc/sshguard.whitelist -f 100:/var/run/sshd.pid