SSH logging

Hi all,

we were trying to log all SSH connections going to one of our test computers.

Even though they appear in the conn log, it does not even create a ssh log. Do we need to activate this module at a certain place?


Have you loaded ssh.bro?


Hello Brian,

Just check "brolite.bro" (<bro_dir>/policy)