Log SSH login attempts in SNORT

Hi,

I am using Debian and SNORT.

How can I log unsuccessful login attempts through SSH with the attempted username and password?

Thanks
LVL 1
masdf123Asked:
Who is Participating?
 
CrunchedConnect With a Mentor Commented:
These will already be logged in /var/log/secure

Is that the info you are after?
0
 
masdf123Author Commented:
I found them in /var/log/auth.log
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.