Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  nodelist  faq  login

Help me, I'm a prisoner in a Fortune cookie file!


computers / comp.security.ssh / "openlog_internal" sshd crashes

SubjectAuthor
o "openlog_internal" sshd crashesChristian Mund

1
Subject: "openlog_internal" sshd crashes
From: Christian Mund
Newsgroups: comp.security.ssh
Date: Wed, 16 Jun 2021 06:48 UTC
X-Received: by 2002:ac8:4b61:: with SMTP id g1mr3659943qts.193.1623826108861; Tue, 15 Jun 2021 23:48:28 -0700 (PDT)
X-Received: by 2002:a05:6808:692:: with SMTP id k18mr5810186oig.148.1623826108314; Tue, 15 Jun 2021 23:48:28 -0700 (PDT)
Path: i2pn2.org!i2pn.org!usenet.goja.nl.eu.org!2.eu.feeder.erje.net!feeder.erje.net!news.uzoreto.com!tr2.eu1.usenetexpress.com!feeder.usenetexpress.com!tr1.iad1.usenetexpress.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.security.ssh
Date: Tue, 15 Jun 2021 23:48:28 -0700 (PDT)
Injection-Info: google-groups.googlegroups.com; posting-host=85.212.99.174; posting-account=eCFJ1woAAAAcFvBjybzMDIbyT94O3ABC
NNTP-Posting-Host: 85.212.99.174
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <ed6e6b7f-4cbf-4224-9163-bed5cacbcb88n@googlegroups.com>
Subject: "openlog_internal" sshd crashes
From: cmun...@gmail.com (Christian Mund)
Injection-Date: Wed, 16 Jun 2021 06:48:28 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Lines: 11
View all headers
Hello,

since some weeks sshd is occasionally crashing on certain brute-force/password-guessing attempts on one of my servers. Here's some more info complete with a stack trace (w/out debug symbols though):

https://gist.github.com/kkkrist/5e987254b8a7a5811434d66f017db4d0

I also have session logs and packet captures of the tcp sessions. Is this something that needs to be looked into? Or is it config/distro-specific?

–Christian


1
rocksolid light 0.7.2
clearneti2ptor