These log messages refer to the SSH (SSH library events) category.
2.65.1. auth_failed (ID: 08700001)
- Default Severity
- WARNING
- Log Message
- SSH user authentication failed for method <auth_method>
- Explanation
- User failed to authenticate.
- Firewall Action
- close
- Recommended Action
- Verify the user credentials.
- Revision
- 1
- Parameters
- auth_method
2.65.2. auth_success (ID: 08700002)
- Default Severity
- NOTICE
- Log Message
- SSH user authentication successful using method <auth_method>
- Explanation
- User was successfully authenticated.
- Firewall Action
- None
- Recommended Action
- None
- Revision
- 1
- Parameters
- auth_method
2.65.3. channel_opened (ID: 08700003)
- Default Severity
- NOTICE
- Log Message
- Channel opened
- Explanation
- A channel between the SSH client and server has been opened.
- Firewall Action
- None
- Recommended Action
- None
- Revision
- 1
2.65.4. channel_closed (ID: 08700004)
- Default Severity
- NOTICE
- Log Message
- Channel closed
- Explanation
- A channel between the SSH client and server has been closed.
- Firewall Action
- None
- Recommended Action
- None
- Revision
- 1
2.65.5. ssh_client_connected (ID: 08700005)
- Default Severity
- NOTICE
- Log Message
- SSH connection established with <server_ip> on port <server_port>
- Explanation
- The SSH client has connected to the SSH server and will commence the handshake.
- Firewall Action
- None
- Recommended Action
- None
- Revision
- 1
- Parameters
- server_ip
server_port
2.65.6. ssh_client_failed_to_connect (ID: 08700006)
- Default Severity
- WARNING
- Log Message
- SSH client failed to connect to server at <ssh_server_ip> on port <ssh_server_port>
- Explanation
- The SSH client failed to connect to the SSH server.
- Firewall Action
- close
- Recommended Action
- Verify that the SSH server is running and listening on the correct port.
- Revision
- 1
- Parameters
- ssh_server_ip
ssh_server_port
2.65.7. ssh_client_disconnected (ID: 08700007)
- Default Severity
- NOTICE
- Log Message
- SSH client disconnected <reason>
- Explanation
- The SSH client has disconnected from the SSH server.
- Firewall Action
- close
- Recommended Action
- None
- Revision
- 3
- Parameters
- reason
ssh_server_ip
ssh_server_port
2.65.8. ssh_rejected_message (ID: 08700008)
- Default Severity
- WARNING
- Log Message
- Rejecting SSH message <messagetype> <reason>
- Explanation
- A received SSH message was rejected.
- Firewall Action
- drop
- Recommended Action
- Verify that the SSH client and server configurations are correct.
- Revision
- 1
- Parameters
- messagetype
reason
2.65.9. dns_timeout (ID: 08700009)
- Default Severity
- WARNING
- Log Message
- DNS query for InCenter FQDN Address: <fqdn> timed out
- Explanation
- DNS query could not be completed due to timeout.
- Firewall Action
- None
- Recommended Action
- Make sure that DNS Server address is valid and reachable.
- Revision
- 1
- Parameters
- fqdn
2.65.10. dns_no_record (ID: 08700010)
- Default Severity
- WARNING
- Log Message
- No DNS record was found for InCenter FQDN Address: <fqdn>
- Explanation
- DNS query failed for given hostname.
- Firewall Action
- None
- Recommended Action
- Make sure that InCenter FQDN address is correct.
- Revision
- 1
- Parameters
- fqdn
2.65.11. sesmgr_session_system_file_download_requested (ID: 08700011)
- Default Severity
- INFORMATIONAL
- Log Message
- System file <device>\\<file> download requested via scp.
- Explanation
- An external party has requested the system file [file] from [device] system via scp command.
- Firewall Action
- serving_file : failed_to_serve_file
- Recommended Action
- None
- Revision
- 1
- Parameters
- device
file
cOS Core 15.00.01 Log Reference Guide
