Skip to content

v9.8 doesn't log connects, disconnects, and failed attempts #2292

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
3 tasks done
user8446 opened this issue Oct 24, 2024 · 2 comments
Closed
3 tasks done

v9.8 doesn't log connects, disconnects, and failed attempts #2292

user8446 opened this issue Oct 24, 2024 · 2 comments
Assignees
Labels
Area-Logging/Diagnostics Waiting on Author Need more information to diagnose

Comments

@user8446
Copy link

Prerequisites

  • Write a descriptive title.
  • Make sure you are able to repro it on the latest version
  • Search the existing issues.

Steps to reproduce

After upgrading to v9.8, the ssh longs no longer shows connections, disconnects, and failed attempts. This is a security issue as admins are now blind to ssh activity. Only server listening is logged:

4400 2024-10-17 10:53:56.221 Server listening on 0.0.0.0 port #####.

Expected behavior

Connects and disconnects should be logged.

Actual behavior

Connects and disconnects are not logged.

Error details

No response

Environment data

Name                           Value
----                           -----
PSVersion                      7.4.6
PSEdition                      Core
GitCommitId                    7.4.6
OS                             Microsoft Windows 10.0.19045
Platform                       Win32NT
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
WSManStackVersion              3.0

Version

9.8

Visuals

No response

@tgauth
Copy link
Collaborator

tgauth commented Oct 28, 2024

Are you referring to file-based logging or event viewer? For file-based logging in v9.8, connection info should be in sshd-session.log

@tgauth tgauth added Waiting on Author Need more information to diagnose and removed Issue-Bug Investigate labels Oct 28, 2024
@user8446
Copy link
Author

Ok I see now, sessions are now broken out into sshd-session.log and not combined with sshd.log anymore. Thank you for pointing that out!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Area-Logging/Diagnostics Waiting on Author Need more information to diagnose
Projects
None yet
Development

No branches or pull requests

3 participants