may I suggest this patch too. Using openssh-server from Jessie (1:6.7p1-5), these lines added a " port xxxxx" string. -------------- next part -------------- A non-text attachment was scrubbed... Name: logchecker-ssh-bad-proto-port.patch Type: text/x-diff Size: 1427 bytes Desc: not available URL: <http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20150511/5e48d17b/attachment.patch>