From owner-freebsd-questions@FreeBSD.ORG Mon Apr 21 01:20:46 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ECCAC37B401 for ; Mon, 21 Apr 2003 01:20:46 -0700 (PDT) Received: from lv.raad.tartu.ee (lv.raad.tartu.ee [194.126.106.110]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1CADA43F93 for ; Mon, 21 Apr 2003 01:20:45 -0700 (PDT) (envelope-from toomas.aas@raad.tartu.ee) Received: Message by Barricade lv.raad.tartu.ee with ESMTP id h3L8KhC30223 for ; Mon, 21 Apr 2003 11:20:43 +0300 Message-Id: <200304210820.h3L8KhC30223@lv.raad.tartu.ee> Received: from INFO/SpoolDir by raad.tartu.ee (Mercury 1.48); 21 Apr 03 11:20:40 +0300 Received: from SpoolDir by INFO (Mercury 1.48); 21 Apr 03 11:20:24 +0300 From: "Toomas Aas" Organization: Tartu City Government To: freebsd-questions@freebsd.org Date: Mon, 21 Apr 2003 11:20:21 +0300 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Priority: normal Subject: sshd: buffer_get trying to get more bytes than in buffer X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Apr 2003 08:20:47 -0000 Hello! I've noticed that one of my users logging in via ssh from one particular IP always causes this message to appear in auth.log: Apr 20 15:43:18 heerold sshd[18766]: fatal: buffer_get: trying to get more bytes 4 than in buffer 0 The same user logs in from several different IP-s and the message only appears when he logs in from one particular IP. This leads me to believe that it might be just a quirk in the SSH client software he uses on this particular PC, but I just wanted to confirm that it's not actually an indication of Something Evil in progress. The OS is 4.7-RELEASE-p9 with base system sshd. -- Toomas Aas | toomas.aas@raad.tartu.ee | http://www.raad.tartu.ee/~toomas/ * If you can't hear me, it's because I'm in parentheses.