Displaying 1 result from an estimated 1 matches for "emob".
Did you mean:
emb
2011 May 19
0
Incorrect IP address in syslog when logging commands in Unix
...rned on logging in the sshd_config file and it now logs all commands, which is great. The trouble is, the source IP address in the log is always the same, regardless of where I log in from.
e.g.
In syslog,
"May 19 10:58:11 n1 audit: [ID 702911 audit.notice] execve(2) ok session 3800170877 by emob as root:root from 1.2.3.4 obj /usr/bin/less"
IP address 1.2.3.4 doesn't change at all... This could jolly well be the IP address of the machine that was first used to connect using ssh.
I'm not sure if this is an ssh problem but telnet seems to show the right address...
Using OpenSS...