Sorry for the delay on my end. Here is one upstream commit that is relevant: https://sourceforge.net/p/logwatch/git/ci/0490a1c4ccf1b811bce0cd68dfce8a9e346d7648/
This will correct for: "Received disconnect from..." with a port on the end. Another upstream commit: https://sourceforge.net/p/logwatch/git/ci/50cd9b06 This will correct for: "Disconnected from..." with a port on the end and "Connection reset by..." I can build (hopefully later today) a test package of logwatch with only the sshd changes mentioned above. I will need to evaluate the latter commit, as it includes a number of further changes than what is explicitly requested in this bug. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644057 Title: Excessive Disconnect unmatched entries from sshd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/logwatch/+bug/1644057/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs