Linda Knippers wrote:
Steve Grubb wrote:
....
type=USER_LOGIN msg=audit(1158674606.789:1503): user pid=10052 uid=0
auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c255 msg='uid=0:
exe="/usr/sbin/sshd" (hostname=16.116.117.213, addr=2.0.0.0,
terminal=/dev/pts/3 res=success)'
type=USER_LOGIN msg=audit(1158668540.641:1460): user pid=9595 uid=0
auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c255
msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=?, terminal=sshd
res=failed)'
Do you know why we often get an addr of 2.0.0.0?
I'd have to trace through the code and know about your network.
I don't know if this really has anything to do with a specific network because
we get the same value as well.
- Loulwa
--
redhat-lspp mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/redhat-lspp
