cat ips.log |grep -i ssh
2009:07:12-13:09:50 ace75 snort[4673]: Loading dynamic preprocessor library /usr                                                                              /lib/snort/libsf_ssh_preproc.so...
2009:07:12-14:10:56 (none) snort[3519]: Loading dynamic preprocessor library /us                                                                              r/lib/snort/libsf_ssh_preproc.so...
2009:07:12-18:22:09 (none) snort[3516]: Loading dynamic preprocessor library /us                                                                              r/lib/snort/libsf_ssh_preproc.so...
2009:07:12-20:52:35 (none) snort[3515]: Loading dynamic preprocessor library /us                                                                              r/lib/snort/libsf_ssh_preproc.so...
2009:07:12-22:38:07 ace75 snort[10057]: Loading dynamic preprocessor library /us                                                                              r/lib/snort/libsf_ssh_preproc.so...
2009:07:13-08:04:44 (none) snort[3564]: Loading dynamic preprocessor library /us                                                                              r/lib/snort/libsf_ssh_preproc.so...
2009:07:13-10:28:03 (none) snort[3550]: Loading dynamic preprocessor library /us                                                                              r/lib/snort/libsf_ssh_preproc.so...
2009:07:13-12:39:10 (none) snort[3547]: Loading dynamic preprocessor library /us                                                                              r/lib/snort/libsf_ssh_preproc.so...
2009:07:13-13:44:17 (none) snort[3564]: Loading dynamic preprocessor library /us                                                                              r/lib/snort/libsf_ssh_preproc.so...
ace75:/var/log # cat confd.log |grep -i ssh
2009:07:12-18:25:03 ace75 confd[4687]: id="310c" severity="info" sys="System" su                                                                              b="confd" name="config node changed" client="index.plx" facility="webadmin" user                                                                              ="admin" srcip="192.168.2.222" node="ssh->status"
2009:07:12-18:30:47 ace75 confd[4790]: id="310c" severity="info" sys="System" su                                                                              b="confd" name="config node unchanged" client="index.plx" facility="webadmin" us                                                                              er="admin" srcip="192.168.2.222" node="ssh->allowed_networks"
2009:07:12-19:00:44 ace75 confd[6429]: id="3100" severity="info" sys="System" su                                                                              b="confd" name="closing session IKqizTZnrTmlwWcysShN: logout" client="mdw_daemon                                                                              .plx" facility="system" user="system" srcip="127.0.0.1"
ace75:/var/log # cat system.log |grep -i ssh
ace75:/var/log # cat mdw.log |grep -i ssh
ace75:/var/log # cat /tmp/confd-debug.log |grep -i ssh
ace75:/var/log # cat /tmp/mdwebug.log |grep -i ssh
cat: /tmp/mdwebug.log: No such file or directory
ace75:/var/log # cat /tmp/mdwdebug.log |grep -i ssh
LOADING ssh.obj (ssh.conf)
CALLING SYSTEM: /etc/init.d/sshd reload
:: Reload SSH..done
BASH HOOK: /var/mdw/hooks/ssh
LOADING afc.adapter.obj (uplink.conf,webadmin.conf,ssh.conf,ha.obj,afc.obj)
LOADING ssh.adapter.obj (im.conf,p2p.conf,ssh.conf,ips.conf)
BASH HOOK: /var/mdw/hooks/ssh.adapter
ace75:/var/log #