--- logwatch-7.3.4/scripts/services/sshd.pom 2007-01-29 21:09:17.000000000 +0100 +++ logwatch-7.3.4/scripts/services/sshd 2007-05-07 12:14:01.000000000 +0200 @@ -223,7 +223,8 @@ ($ThisLine =~ /^input_userauth_request: (illegal|invalid) user (.*)$/ ) or ($ThisLine =~ m/^(Illegal|Invalid) user (.*) from ([^ ]+)/ ) or ($ThisLine =~ /pam_krb5: authentication succeeds for `([^ ]*)'/) or - ( $ThisLine =~ /pam_succeed_if\(.*:.*\): error retrieving information about user [a-zA-Z]*/ ) + ($ThisLine =~ /pam_succeed_if\(.*:.*\): error retrieving information about user [a-zA-Z]*/ ) or + ($ThisLine =~ /^debug1: /) ) { # Ignore these } elsif ( my ($Method,$User,$Host,$Port) = ($ThisLine =~ /^Accepted (\S+) for (\S+) from ([\d\.:a-f]+) port (\d+)/) ) {