Hi all,
we were trying to log all SSH connections going to one of our test computers.
Even though they appear in the conn log, it does not even create a ssh log. Do we need to activate this module at a certain place?
Brian
Have you loaded ssh.bro?
Robin
Hello Brian,
Just check "brolite.bro" (<bro_dir>/policy)