From: Kevin Z. <kev...@gm...> - 2018-12-03 20:15:43
|
On 12/3/18 11:48 AM, @lbutlr wrote: > It’s possible that my rsyslog is causing this? > > *.err;kern.warning;auth.notice;mail.crit //var/log/console.log > *.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err /var/log/messages > security.* /var/log/security > auth.info;authpriv.info /var/log/auth.log > console.info /var/log/console.log It could be. Did you check the two log files you're monitoring using SSHGuard yourself for messages that appear in both logs? -- Kevin Zheng kev...@gm... | ke...@be... | PGP: 0xC22E1090 |