OpenSSH accesslog : Logging ciphers, MAC and user agent
3
votes
1
answer
3244
views
How to log the
Protocol
, KexAlgorithm
, Cipher
and MAC
algorithm negociated by the client and the client's user agent string?
What I'm looking for is the OpenSSH equivalent to Apache HTTPD's [CustomLog+LogFormat+mod_ssl](https://httpd.apache.org/docs/2.4/en/mod/mod_ssl.html#logformats) %{SSL_PROTOCOL}x %{SSL_CIPHER}x
+ %{User-agent}i
I want to log (on the server side) the same information that are availiable on the client side :
$ ssh -v localhost 2>&1 |grep kex
debug1: kex: server->client chacha20-poly1305@openssh.com none
debug1: kex: client->server chacha20-poly1305@openssh.com none
+
$ ssh -v localhost 2>&1 |grep version
debug1: Local version string SSH-2.0-OpenSSH_6.7
debug1: Remote protocol version 2.0, remote software version OpenSSH_6.7
Asked by Cerber
(235 rep)
Jul 5, 2016, 03:05 PM
Last activity: Jul 5, 2016, 03:45 PM
Last activity: Jul 5, 2016, 03:45 PM