where does macports' sshd write its logging info?

[Alan]

Thanks for the info Brandon.

The problem is, I'm not getting the same info with syslog as I used to with
/var/log/secure.log in Mac 10.6.

Doing "syslog | less", doesn't show any logins, either successful or not,
from ssh.

Doing "less /var/log/appfirewall.log" shows when the Mac firewall let in an
ssh connection, which is helpful, but I would also like to know the IP
address of the connecting machine.

Is there anyway I can log the IP address of connecting machines, regardless
of whether the ssh login is successful or not, with syslog?

Thanks for your help.



On Mon, Jun 30, 2014 at 10:45 AM, Brandon Allbery <allbery.b at gmail.com>
wrote:

> On Mon, Jun 30, 2014 at 2:25 AM, Alan <gorzarg at gmail.com> wrote:
>
>> I'm not sure where macports' sshd writes its logging info. (e.g. for
>> ubuntu, sshd writes it to /var/log/auth.log.)
>>
>> Is there a similar file for macports?
>>
>
> sshd logs via the system syslog facility. On most Linuxes, this means
> files under /var/log as specified by some variant of /etc/syslog.conf ---
> but there are a number of syslogd variants. In my Fedora 19 VM it's
> rsyslogd and the primary control file is /etc/rsyslogd.conf. I don't recall
> what Ubuntu uses off the top of my head.
>
> Apple replaced syslog with the Apple System Log facility, and you use
> /Applications/Utilities/Console.app to view them from the GUI or the syslog
> command to view from terminal. `man syslog` for details, including pointers
> to config files that will tell you how it emulates traditional syslogd and
> where it routes messages with facility AUTH and severity INFO or higher.
>
> --
> brandon s allbery kf8nh                               sine nomine
> associates
> allbery.b at gmail.com
> ballbery at sinenomine.net
> unix, openafs, kerberos, infrastructure, xmonad
> http://sinenomine.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.macosforge.org/pipermail/macports-users/attachments/20140630/932fd25b/attachment.html>