[svlug] log question

[Will Lowe]

> Sep  8 22:58:52 wilfred sshd[698]: log: Generating new 768 bit RSA key.
> Sep  8 22:58:53 wilfred sshd[698]: log: RSA key generation complete.

These two lines are normal and are seperated from the others in
question by half an hour.  sshd does this from time to time;  I don't
remember the interval offhand.

> Is this normal?  1040 is udp/tcp.  

1040 is just an unallocated port number above 1024.  This means
somebody's running their ssh client non-setuid,  and there's nothing
wrong with that.  Probably just someone sshing in.

-- 
					thanks,
		
					Will