SSH fatal: Read from socket failed: Connection reset by peer

humbletech99 · 01-03-2007, 10:50 AM

I've got the following occurring in my logs:

Code:

sshd[8770]: fatal: Read from socket failed: Connection reset by peer

Is there a way that I can silence it to not log this?

chort · 01-03-2007, 12:41 PM

You can set the following in /etc/ssh/sshd_config:

Code:

LogLevel QUIET

and restart sshd.

I wouldn't really recommend it, though, since that basically turns off all logging for sshd. Are you really seeing that many entries on your log file?

humbletech99 · 01-03-2007, 02:09 PM

well it generates a fair amount, the problem is that it logs this to auth err which I have something that generates alerts based on this so it comes into my inbox which is rubbish.

I may just have to except this one thing if I can't make it play right

I'm not going to loglevel quiet since this may blind me to login attempts on my servers

chort · 01-03-2007, 06:41 PM

Why not change your log reading tool to exempt the above pattern from the alerts? If the alert is sent every time the files change at all (ignoring the specific changes) I would say that's a bad alerting mechanism...

You can make sshd log to another facility, though:

Code:

SyslogFacility DAEMON

or

Code:

SyslogFacility LOCAL0

etc... Check the man page for sshd_config for details.

If you choose one of the local facilities, make sure your syslog.conf is configured to send it somewhere.