USER_END for ssh?

Rob Myers rob.myers at gtri.gatech.edu
Wed Aug 17 18:31:03 UTC 2005


should there be a corresponding USER_END message for every USER_START
message?

i do not see any messages indicating the end of an ssh session, but the
messages i expect are shown at the start of an ssh session.

thanks for any pointers.

rob.




More information about the Linux-audit mailing list