Skip to content

Instantly share code, notes, and snippets.

@breyer
Last active February 12, 2016 03:45
Show Gist options
  • Save breyer/3bbeb43fbffffb93f123 to your computer and use it in GitHub Desktop.
Save breyer/3bbeb43fbffffb93f123 to your computer and use it in GitHub Desktop.
osssec rule: fatal: Unable to negotiate a key exchange method
OSSEC additional rules
Add to rules/sshd_rules.xml in group <group name="syslog,sshd,">:
<rule id="99999" level="2">
<decoded_as>sshd</decoded_as>
<match>^fatal: Unable to negotiate a key exchange method</match>
<description>Failed SSHD key exchange</description>
</rule>
<rule id="99998" level="2">
<decoded_as>sshd</decoded_as>
<match>^fatal: no matching mac found</match>
<description>Failed SSHD key exchange</description>
</rule>
<rule id="99997" level="2">
<decoded_as>sshd</decoded_as>
<match>^fatal: no hostkey alg</match>
<description>Failed SSHD key exchange</description>
</rule>
<rule id="99996" level="2">
<decoded_as>sshd</decoded_as>
<match>^fatal: no matching cipher found</match>
<description>Failed SSHD key exchange</description>
</rule>
<rule id="99995" level="2">
<decoded_as>sshd</decoded_as>
<match>^fatal: Unable to negotiate with</match>
<description>Failed SSHD key exchange</description>
</rule>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment