[Bug 3447] immediate connection closed with nothing logged at DEBUG LogLevel - silent pipe() error?

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Fri Jun 17 19:34:54 AEST 2022


https://bugzilla.mindrot.org/show_bug.cgi?id=3447

Vincent Lefevre <vincent-openssh at vinc17.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |vincent-openssh at vinc17.net

--- Comment #2 from Vincent Lefevre <vincent-openssh at vinc17.net> ---
(In reply to Darren Tucker from comment #1)
> Added proposed error logging upstream.  Thanks for the report, it
> will be in the next major release.

Thanks.

> The other possibility is that it's hitting the MaxStartups limit (or
> possibly PerSourceMaxStartups, but that's not enabled by default)
> and the missing log entries are due to the log rate limiting in
> drop_connection().

OpenSSH 7.9p1 (used on the Debian 10 server) doesn't seem to have log
rate limiting:

        if (drop_connection(startups) == 1) {
[...]
                verbose("drop connection #%d from [%s]:%d "
                    "on [%s]:%d past MaxStartups", startups,
                    raddr, get_peer_port(*newsock),
                    laddr, get_local_port(*newsock));

and OpenSSH 9.0p1 doesn't seem to have log rate limiting for VERBOSE
log level and below since in drop_connection(), drop_level >=
SYSLOG_LEVEL_VERBOSE. Compared to 7.9p1, it has additional log messages
at higher levels, e.g. with error().

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list