On Sun, 14 Mar 2021 at 07:43, Claus Assmann <ca+openbsd_m...@esmtp.org> wrote:
>
> My authlog file contains entries like this:
> sshd[89023]: error: kex_exchange_identification: banner line contains invalid
> characters
> but I can't find the IP address of the host which triggered this
> by looking for more log entries of sshd with the same pid.
What version are you using? at least -current has some additional
standardized logging that should include the source address and port:
kex_exchange_identification: banner line contains invalid characters
banner exchange: Connection from 127.0.0.1 port 21285: invalid format
--
Darren Tucker (dtucker at dtucker.net)
GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860 37F4 9357 ECEF 11EA A6FA (new)
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
