LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
Reload this Page how to transfer ssh login attempts to linux machine
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
LinkBack Search this Thread
Old 07-20-2008, 10:12 AM   #1
junust
Member
 
Registered: Jul 2008
Location: Israel Ramat Gan
Distribution: CentOs 5.3, SuSe 11.1, Solaris 9, Slackware 13
Posts: 78

Rep: Reputation: 15
how to transfer ssh login attempts to linux machine

Hi,
I have two linux machine (ubuntu), and I want to force login login attempts(LOGS)from ssh authentication on first machine (open-SSHD) move to second one any time it happend, in other words, instead writing to /var/log/auth on local machine it alert me on second one

thx
 
Old 07-20-2008, 02:17 PM   #2
jschiwal
Moderator
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,263

Rep: Reputation: 562Reputation: 562Reputation: 562Reputation: 562Reputation: 562Reputation: 562
You can have syslog-ng configured to log to a logging server, and to use a socket as a source at the destination. There is a syslog-ng.conf manpage. You may find examples on the net searching on google.
 
Old 07-20-2008, 04:37 PM   #3
junust
Member
 
Registered: Jul 2008
Location: Israel Ramat Gan
Distribution: CentOs 5.3, SuSe 11.1, Solaris 9, Slackware 13
Posts: 78

Original Poster
Rep: Reputation: 15
Quote:
use a socket as a source at the destination
something like udp("destination ip+port514");to destination on source
and file("/var/log/auth.log");on source to destination
Dosn't work

Quote:
There is a syslog-ng.conf manpage.
great idea(do you ever see the man you talking about?)realy helpful!



Quote:
You may find examples on the net searching on google.
tryed, did't find!!, therefore Im here.. and ask!
Last edited by junust; 07-20-2008 at 04:42 PM.
 
Old 07-20-2008, 05:41 PM   #4
jschiwal
Moderator
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,263

Rep: Reputation: 562Reputation: 562Reputation: 562Reputation: 562Reputation: 562Reputation: 562
http://www.campin.net/newlogcheck.html
This has an example of securing the log traffic through stunnel

Here is a syslog-ng mailing list archive:
https://lists.balabit.hu/pipermail/syslog-ng/

There is a particular example here:
http://sial.org/howto/logging/syslog-ng/
 
Old 07-22-2008, 09:12 AM   #5
junust
Member
 
Registered: Jul 2008
Location: Israel Ramat Gan
Distribution: CentOs 5.3, SuSe 11.1, Solaris 9, Slackware 13
Posts: 78

Original Poster
Rep: Reputation: 15
Quote:
http://www.campin.net/newlogcheck.html
This has an example of securing the log traffic through stunnel

Here is a syslog-ng mailing list archive:
https://lists.balabit.hu/pipermail/syslog-ng/

There is a particular example here:
http://sial.org/howto/logging/syslog-ng/
DID IT !!!
Thanks to jschiwal
 
Old 07-22-2008, 09:13 AM   #6
junust
Member
 
Registered: Jul 2008
Location: Israel Ramat Gan
Distribution: CentOs 5.3, SuSe 11.1, Solaris 9, Slackware 13
Posts: 78

Original Poster
Rep: Reputation: 15
DID IT !!!
Thanks to jschiwal
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
SSH login attempts Capt_Caveman Linux - Security 225 11-07-2009 09:55 AM
SSH Login Attempts - Can passwords be captured? SlowCoder Linux - Server 6 10-07-2007 07:16 PM
Failed SSH login attempts Capt_Caveman Linux - Security 38 01-03-2006 03:22 PM
ssh login attempts from localhost?! sovietpower Linux - Security 2 05-29-2005 01:19 AM
Limit the amount of login attempts to machine jester_69 Linux - Security 4 10-14-2003 02:35 PM


All times are GMT -5. The time now is 12:33 PM.

Contact Us - Advertising Info - Rules - LQ Merchandise - Donations - Contributing Member - LQ Sitemap -
Main Menu
 
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: @linuxquestions
Open Source Consulting | Domain Registration