X-Spam-Check-By: sourceware.org DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=AskG5EuJe2U8FtmHPXKjQkqxzXyeHOQDw4vn85+nUUUIvKVU+I8ROpBKM1L/Vm4bqj2Gph6FbkxMe3vcg/JeErlHisN+Vg7dGfXesyziuOfjSfvrCgI2pIJa5sHbyBOwYz2Fy8HYk4Ejur5SDptZYStYzxBlYZ/7mDgmrRH3jlY= Message-ID: <31b7d2790702261016sba3f0b5j526d5ad4fbae750b@mail.gmail.com> Date: Mon, 26 Feb 2007 12:16:16 -0600 From: "DePriest, Jason R." To: cygwin AT cygwin DOT com Subject: Re: sshd timestamp logging In-Reply-To: <5abc24640702261011v129b1f9fkb47e78bfb151bc29@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <5abc24640702261011v129b1f9fkb47e78bfb151bc29 AT mail DOT gmail DOT com> X-IsSubscribed: yes Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com On 2/26/07, Andrew Louie wrote: > I am able to to get sshd to output logs to /var/logs/sshd.log but all > the entires do not have time stamps. A search of google yields no > useful information on how to enable timestamps, i guess timestamps are > just supposed to be attached by default, but that does not seem to be > the case here. > > Anyone have any idea how I can get sshd log entires with time stamps? > > i am running sshd like so under cygrunsrv: > > sshd -De > > thanks > > > -- > -Andrew Louie > I installed syslog-ng as a service with cygrunsrv and I have sshd log to that. It keeps time stamps. Liek this: Feb 26 12:13:31 srvc sshd: PID 1552: Connection from 172.21.128.39 port 5248 Feb 26 12:13:38 srvc sshd: PID 1552: Failed none for USER from 172.21.128.39 port 5248 ssh2 Feb 26 12:13:45 srvc sshd: PID 1552: Failed password for USER from 172.21.128.39 port 5248 ssh2 Feb 26 12:13:48 srvc sshd: PID 1552: Accepted password for USER from 172.21.128.39 port 5248 ssh2 -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/