[svlug] log question
harpo at thebackrow.net
Tue Sep 11 11:55:01 PDT 2001
> Sep 8 22:58:52 wilfred sshd: log: Generating new 768 bit RSA key.
> Sep 8 22:58:53 wilfred sshd: log: RSA key generation complete.
These two lines are normal and are seperated from the others in
question by half an hour. sshd does this from time to time; I don't
remember the interval offhand.
> Is this normal? 1040 is udp/tcp.
1040 is just an unallocated port number above 1024. This means
somebody's running their ssh client non-setuid, and there's nothing
wrong with that. Probably just someone sshing in.
More information about the svlug