Re: monitoring sshd generates socket failures in auth.log

[Marcus Mülbüsch]

Am 01.10.2014 um 13:56 schrieb Martin Pala:
> Hello Marcus,
>
> can you try with Monit 5.9? There was fix in Monit 5.8.1 for socket shutdown:
>
> --8<--
> Fixed: Do graceful TCP close for TCP/UDP port test instead of RST.
> --8<--
>
> This RST-on-close may be related to sshd's message.

Hello Martin,

   I temporarily updated monit to 5.8.1 and 5.9, and both versions 
fixed it:

> Oct  1 16:50:12 localhost sshd[****]: Connection closed by 127.0.0.1 [preauth]

   Thanks for the quick answer; however I will downgrade to 5.8 again 
and wait until the package goes stable on gentoo; until then I will 
accept these logs.

Marcus