From f451ea49cfc6185b0cfeb3361a5c8a09ce08cfe5 Mon Sep 17 00:00:00 2001 From: Russ Allbery <rra@stanford.edu> Date: Tue, 14 May 2013 11:00:25 -0700 Subject: [PATCH] Ignore another sshd error message error: ssh_msg_send: write appears to be from a network connection error. It was logged on git.stanford.edu. I don't think we care about it. --- files/ssh/etc/filter-syslog/ssh | 1 + 1 file changed, 1 insertion(+) diff --git a/files/ssh/etc/filter-syslog/ssh b/files/ssh/etc/filter-syslog/ssh index 4d92f3e..e886bdd 100644 --- a/files/ssh/etc/filter-syslog/ssh +++ b/files/ssh/etc/filter-syslog/ssh @@ -21,6 +21,7 @@ sshd: /^Bad protocol version identification '' from UNKOWN$/ sshd: /^Disconnecting: Bad packet length \d+\.$/ sshd: /^Postponed gssapi-with-mic for \S+ from [a-fA-F:\d.]+ port \d+ ssh2$/ sshd: /^Received disconnect from [:a-f\d.]+: \d+:( |\Z)/ +sshd: /^error: ssh_msg_send: write$/ sshd: /^pam_unix\(sshd:auth\): conversation failed$/ sshd: /^pam_unix\(sshd:auth\): auth could not identify password for \S+$/ sshd: /^syslogin_perform_logout: logout\(\) returned an error$/ -- GitLab