OpenSSH server doesn't log client disconnect without SSH_MSG_DISCONNECT

[Opty]

On Fri, May 24, 2024 at 12:07 AM Damien Miller <djm at mindrot.org> wrote:
> On Thu, 23 May 2024, Opty wrote:
> > [...]
>
> This includes the message:
>
> > Connection closed by 127.0.0.1 port 55157
>
> This is logged by sshd at syslog(3) level LOG_INFO. It's possible
> something in your system logging configuration is dropping this
> message.

That seems highly unprobable unless sshd logs using LOG_NEWS facility:

opty at qeporkak:~$ grep -Ev '^(#|$)' /etc/syslog.conf
*.info;*.!warn;\
        authpriv.none;cron.none;mail.none;news.none
-/var/log/messages      ;RFC5424
*.warn;\
        authpriv.none;cron.none;mail.none;news.none
-/var/log/syslog        ;RFC5424
*.=debug
-/var/log/debug         ;RFC5424
authpriv.*
-/var/log/secure        ;RFC5424
cron.*                                                  -/var/log/cron
         ;RFC5424
mail.*
-/var/log/maillog       ;RFC5424
*.emerg                                                 *
         ;RFC5424
include /etc/syslog.d/*.conf
opty at qeporkak:~$ ls /etc/syslog.d
opty at qeporkak:~$

opty at qeporkak:~$ sudo logger -p daemon.info -s test
Password:
<30>May 24 18:49:09 root: test

opty at qeporkak:~$ sudo tail -1 /var/log/messages
2024-05-24T18:49:09.982715+02:00 qeporkak root - - - test

Regards,
Opty