Pagina's: [1]

Auteur Topic: SSH  (gelezen 1737 keer)

Offline Nazgul

  • MVP
  • *
  • Bedankjes
  • -Gegeven: 31
  • -Ontvangen: 44
  • Berichten: 307
SSH
« Gepost op: 24 oktober 2014, 09:46:33 »
Goedemorgen

Ik log als root in met mijn admin paswoord via WINSCP.
Dit wordt keurig gelogd in logcenter -> verbinding als :
user[root] from 10.0.0.11 logged in succesfully via SSH.
Na afloop de sessie via WINSCP verbroken.
Dat wordt dus (mij mij dan) NIET gelogd dus vind ik dat vreemd.
Hoe kan ik nagaan of deze verbinding echt is verbroken en niet ergens nog bestaat?
Bij het nalopen van broncontrole -> verbonden verbruikers is dus ook niets te zien .

Mijn vraag: is dat normaal of moet ik me zorgen maken?  ::)
  • Mijn Synology: DS 1019+
  • HDD's: 5 x SEAGATE 4TB
  • Extra's: DS414 (Back Up)

DS1019+  DSM 7.0-41890  |
DS414  DSM 6.2.3-25426 Update 2
Netgear R8500| NVIDEA Shield|

Offline Briolet

  • Global Moderator
  • MVP
  • *
  • Bedankjes
  • -Gegeven: 182
  • -Ontvangen: 2709
  • Berichten: 16.747
Re: SSH
« Reactie #1 Gepost op: 24 oktober 2014, 13:33:17 »
Het is heel normaal dat het uitloggen niet geregistreerd wordt. Ook in het interne verbindingslog op '/var/log/synolog/synoconn.log' zie je het niet staan.

Ik zag dat daar wel gelogd wordt welke gebruiker, welke share mount. Dat kun je in het gewone log niet zien.

Code: [Selecteer]
info 2014/10/19 17:37:14 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/19 18:49:20 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/19 19:03:04 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.22)] accessed the shared folder [Macintosh].
info 2014/10/19 21:48:01 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/19 22:26:56 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/19 23:44:43 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/19 23:44:54 Silvermoon: AFP client [Silvermoon] from [10.0.1.60] accessed the shared folder [TimeMachine].
warning 2014/10/20 00:45:05 SYSTEM: User [oracle] from [93.174.95.41] failed to log in via [SSH] due to authorization failure.
info 2014/10/20 09:26:55 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/20 09:50:17 Briolet: AFP client [Briolet] from [10.0.1.20] accessed the shared folder [Logs].
warning 2014/10/20 13:16:04 SYSTEM: User [mysql] from [93.174.95.41] failed to log in via [SSH] due to authorization failure.
info 2014/10/20 14:53:33 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/20 15:32:55 Briolet: AFP client [Briolet] from [10.0.1.20] accessed the shared folder [Macintosh].
info 2014/10/20 17:39:38 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/20 18:35:37 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/20 18:49:58 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/20 23:00:02 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/21 00:24:14 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
warning 2014/10/21 01:48:32 SYSTEM: User [lpa] from [93.174.95.41] failed to log in via [SSH] due to authorization failure.
warning 2014/10/21 14:31:25 SYSTEM: User [ftpuser] from [93.174.95.41] failed to log in via [SSH] due to authorization failure.
info 2014/10/21 15:04:01 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/21 15:04:19 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Android].
info 2014/10/21 15:20:03 SYSTEM: User [root] from [10.0.1.20] logged in successfully via [SSH].
info 2014/10/21 18:14:43 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/21 18:53:04 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/21 21:08:12 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/22 08:17:58 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/22 10:08:33 Briolet: AFP client [Briolet] from [10.0.1.20] accessed the shared folder [home].
info 2014/10/22 18:32:19 SYSTEM: User [root] from [10.0.1.60] logged in successfully via [SSH].
info 2014/10/22 18:43:56 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/22 18:56:47 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
warning 2014/10/22 21:11:28 SYSTEM: User [root] from [89.248.171.19] failed to log in via [SSH] due to authorization failure.
warning 2014/10/22 21:11:30 SYSTEM: User [root] from [89.248.171.19] failed to log in via [SSH] due to authorization failure.
warning 2014/10/22 21:11:32 SYSTEM: User [git] from [89.248.171.19] failed to log in via [SSH] due to authorization failure.
warning 2014/10/22 21:11:35 SYSTEM: User [ubuntu] from [89.248.171.19] failed to log in via [SSH] due to authorization failure.
warning 2014/10/22 21:11:39 SYSTEM: User [ucpss] from [89.248.171.19] failed to log in via [SSH] due to authorization failure.
info 2014/10/23 08:46:24 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/23 16:05:05 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/23 20:00:31 Briolet: AFP client [Briolet] from [10.0.1.22] accessed the shared folder [home].
info 2014/10/23 21:25:12 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/24 10:50:45 Briolet: CIFS client [Briolet] from [workstation(IP:10.0.1.60)] accessed the shared folder [Logs].
info 2014/10/24 12:23:09 iMac-DDR2: AFP client [iMac-DDR2] from [10.0.1.20] accessed the shared folder [TimeMachine].
info 2014/10/24 12:25:13 iMac-DDR2: AFP client [iMac-DDR2] from [10.0.1.20] accessed the shared folder [TimeMachine].
info 2014/10/24 13:13:48 SYSTEM: User [root] from [10.0.1.20] logged in successfully via [SSH].
info 2014/10/24 13:14:14 SYSTEM: User [root] from [10.0.1.20] logged in successfully via [SSH].
  • Mijn Synology: DS415+
  • HDD's: 3x 3TB in SHR
  • Extra's: DS212J, RT1900ac

Offline Birdy

  • Global Moderator
  • MVP
  • *
  • Bedankjes
  • -Gegeven: 1422
  • -Ontvangen: 8161
  • Berichten: 44.619
    • Truebase
Re: SSH
« Reactie #2 Gepost op: 24 oktober 2014, 14:04:33 »
Heb hier nog nooit naar gekeken maar, als je WinSCP disconnect dan is die verbinding echt weg, geldt eigenlijk voor alle verbindingen.
Niet druk om maken dus.


CS406      DSM 2.0-0731    DS508      DSM 4.0-2265      DS411+II  DSM 6.2.4-25556-8   DS115J    DSM 7.1.1-42962-7   DS918+    DSM 6.2.4-25556-8
DS107+     DSM 3.1-1639    DS411slim  DSM 6.2.4-25556   DS213J    DSM 6.2.4-25556-7   DS1515+   DSM 6.2.4-25556-8   DS220+    DSM 7.2.2-72806-3
DS107+     DSM 3.1-1639    DS111      DSM 5.2-5967-9    DS413J    DSM 6.2.3-25426-2   DS716+II  DSM 7.2.2-72806-3   RT2600ac  SRM 1.3.1-9346-13
BeeDrive   1TB             BeeStation BSM 1.2-65586                                                                 MR2200ac  SRM 1.3.1-9346-13
Pagina's: [1]