Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- `15216 2024-05-04 11:35:30.230 debug1: inetd sockets after dupping: 4, 4
- 15216 2024-05-04 11:35:30.230 Connection from 192.168.1.102 port 52626 on 192.168.1.198 port 22
- 15216 2024-05-04 11:35:30.230 debug1: Local version string SSH-2.0-OpenSSH_for_Windows_8.6
- 15216 2024-05-04 11:35:30.230 debug1: Remote protocol version 2.0, remote software version SSHJ_0.35.0
- 15216 2024-05-04 11:35:30.230 debug1: compat_banner: no match: SSHJ_0.35.0
- 15216 2024-05-04 11:35:30.230 debug2: fd 4 setting O_NONBLOCK
- 16064 2024-05-04 11:35:30.232 debug1: inetd sockets after dupping: 4, 4
- 16064 2024-05-04 11:35:30.232 Connection from 192.168.1.102 port 52636 on 192.168.1.198 port 22
- 16064 2024-05-04 11:35:30.232 debug1: Local version string SSH-2.0-OpenSSH_for_Windows_8.6
- 16064 2024-05-04 11:35:30.232 debug1: Remote protocol version 2.0, remote software version SSHJ_0.35.0
- 16064 2024-05-04 11:35:30.232 debug1: compat_banner: no match: SSHJ_0.35.0
- 16064 2024-05-04 11:35:30.232 debug2: fd 4 setting O_NONBLOCK
- 14260 2024-05-04 11:35:30.234 debug1: inetd sockets after dupping: 4, 4
- 14260 2024-05-04 11:35:30.234 Connection from 192.168.1.102 port 52644 on 192.168.1.198 port 22
- 14260 2024-05-04 11:35:30.234 debug1: Local version string SSH-2.0-OpenSSH_for_Windows_8.6
- 14260 2024-05-04 11:35:30.234 debug1: Remote protocol version 2.0, remote software version SSHJ_0.35.0
- 14260 2024-05-04 11:35:30.234 debug1: compat_banner: no match: SSHJ_0.35.0
- 14260 2024-05-04 11:35:30.235 debug2: fd 4 setting O_NONBLOCK
- 15216 2024-05-04 11:35:30.265 debug3: spawning "C:\\WINDOWS\\System32\\OpenSSH\\sshd.exe" -y as user
- 16064 2024-05-04 11:35:30.268 debug3: spawning "C:\\WINDOWS\\System32\\OpenSSH\\sshd.exe" -y as user
- 15216 2024-05-04 11:35:30.269 debug2: Network child is on pid 5520
- 15216 2024-05-04 11:35:30.269 debug3: send_rexec_state: entering fd = 6 config len 328
- 15216 2024-05-04 11:35:30.269 debug3: ssh_msg_send: type 0
- 15216 2024-05-04 11:35:30.269 debug3: send_rexec_state: done
- 15216 2024-05-04 11:35:30.269 debug3: ssh_msg_send: type 0
- 15216 2024-05-04 11:35:30.269 debug3: ssh_msg_send: type 0
- 15216 2024-05-04 11:35:30.269 debug3: preauth child monitor started
- 14260 2024-05-04 11:35:30.270 debug3: spawning "C:\\WINDOWS\\System32\\OpenSSH\\sshd.exe" -y as user
- 16064 2024-05-04 11:35:30.272 debug2: Network child is on pid 14320
- 16064 2024-05-04 11:35:30.272 debug3: send_rexec_state: entering fd = 6 config len 328
- 16064 2024-05-04 11:35:30.272 debug3: ssh_msg_send: type 0
- 16064 2024-05-04 11:35:30.272 debug3: send_rexec_state: done
- 16064 2024-05-04 11:35:30.272 debug3: ssh_msg_send: type 0
- 16064 2024-05-04 11:35:30.272 debug3: ssh_msg_send: type 0
- 16064 2024-05-04 11:35:30.272 debug3: preauth child monitor started
- 14260 2024-05-04 11:35:30.274 debug2: Network child is on pid 2932
- 14260 2024-05-04 11:35:30.274 debug3: send_rexec_state: entering fd = 6 config len 328
- 14260 2024-05-04 11:35:30.274 debug3: ssh_msg_send: type 0
- 14260 2024-05-04 11:35:30.274 debug3: send_rexec_state: done
- 14260 2024-05-04 11:35:30.274 debug3: ssh_msg_send: type 0
- 14260 2024-05-04 11:35:30.274 debug3: ssh_msg_send: type 0
- 14260 2024-05-04 11:35:30.274 debug3: preauth child monitor started
- 15216 2024-05-04 11:35:30.289 debug1: list_hostkey_types: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
- 15216 2024-05-04 11:35:30.289 debug3: send packet: type 20 [preauth]
- 15216 2024-05-04 11:35:30.289 debug1: SSH2_MSG_KEXINIT sent [preauth]
- 15216 2024-05-04 11:35:30.289 debug3: receive packet: type 20 [preauth]
- 15216 2024-05-04 11:35:30.289 debug1: SSH2_MSG_KEXINIT received [preauth]
- 15216 2024-05-04 11:35:30.289 debug2: local server KEXINIT proposal [preauth]
- 15216 2024-05-04 11:35:30.289 debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256 [preauth]
- 15216 2024-05-04 11:35:30.289 debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
- 15216 2024-05-04 11:35:30.289 debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
- 15216 2024-05-04 11:35:30.289 debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
- 15216 2024-05-04 11:35:30.289 debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
- 15216 2024-05-04 11:35:30.289 debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
- 15216 2024-05-04 11:35:30.289 debug2: compression ctos: none,zlib@openssh.com [preauth]
- 15216 2024-05-04 11:35:30.289 debug2: compression stoc: none,zlib@openssh.com [preauth]
- 15216 2024-05-04 11:35:30.289 debug2: languages ctos: [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: languages stoc: [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: first_kex_follows 0 [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: reserved 0 [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: peer client KEXINIT proposal [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256@ssh.com,diffie-hellman-group15-sha256,diffie-hellman-group15-sha256@ssh.com,diffie-hellman-group15-sha384@ssh.com,diffie-hellman-group16-sha256,diffie-hellman-group16-sha384@ssh.com,diffie-hellman-group16-sha512@ssh.com,diffie-hellman-group18-sha512@ssh.com,ext-info-c [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp256,rsa-sha2-512,rsa-sha2-256,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-rsa,ssh-dss [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-cbc,aes128-ctr,aes192-cbc,aes192-ctr,aes256-cbc,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,blowfish-cbc,blowfish-ctr,cast128-cbc,cast128-ctr,idea-cbc,idea-ctr,serpent128-cbc,serpent128-ctr,serpent192-cbc,serpent192-ctr,serpent256-cbc,serpent256-ctr,3des-cbc,3des-ctr,twofish128-cbc,twofish128-ctr,twofish192-cbc,twofish192-ctr,twofish256-cbc,twofish256-ctr,twofish-cbc,arcfour,arcfour128,arcfour256 [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-cbc,aes128-ctr,aes192-cbc,aes192-ctr,aes256-cbc,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,blowfish-cbc,blowfish-ctr,cast128-cbc,cast128-ctr,idea-cbc,idea-ctr,serpent128-cbc,serpent128-ctr,serpent192-cbc,serpent192-ctr,serpent256-cbc,serpent256-ctr,3des-cbc,3des-ctr,twofish128-cbc,twofish128-ctr,twofish192-cbc,twofish192-ctr,twofish256-cbc,twofish256-ctr,twofish-cbc,arcfour,arcfour128,arcfour256 [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: MACs ctos: hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-sha1-96@openssh.com,hmac-md5,hmac-md5-etm@openssh.com,hmac-md5-96,hmac-md5-96-etm@openssh.com,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-ripemd160,hmac-ripemd160-etm@openssh.com,hmac-ripemd160-96,hmac-ripemd160@openssh.com [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: MACs stoc: hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-sha1-96@openssh.com,hmac-md5,hmac-md5-etm@openssh.com,hmac-md5-96,hmac-md5-96-etm@openssh.com,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-ripemd160,hmac-ripemd160-etm@openssh.com,hmac-ripemd160-96,hmac-ripemd160@openssh.com [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: compression ctos: none [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: compression stoc: none [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: languages ctos: [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: languages stoc: [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: first_kex_follows 0 [preauth]
- 15216 2024-05-04 11:35:30.290 debug2: reserved 0 [preauth]
- 15216 2024-05-04 11:35:30.290 debug1: kex: algorithm: curve25519-sha256 [preauth]
- 15216 2024-05-04 11:35:30.290 debug1: kex: host key algorithm: ssh-ed25519 [preauth]
- 15216 2024-05-04 11:35:30.290 debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
- 15216 2024-05-04 11:35:30.290 debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
- 15216 2024-05-04 11:35:30.290 debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
- 16064 2024-05-04 11:35:30.292 debug1: list_hostkey_types: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
- 16064 2024-05-04 11:35:30.292 debug3: send packet: type 20 [preauth]
- 16064 2024-05-04 11:35:30.292 debug1: SSH2_MSG_KEXINIT sent [preauth]
- 16064 2024-05-04 11:35:30.292 debug3: receive packet: type 20 [preauth]
- 16064 2024-05-04 11:35:30.292 debug1: SSH2_MSG_KEXINIT received [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: local server KEXINIT proposal [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256 [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: compression ctos: none,zlib@openssh.com [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: compression stoc: none,zlib@openssh.com [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: languages ctos: [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: languages stoc: [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: first_kex_follows 0 [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: reserved 0 [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: peer client KEXINIT proposal [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256@ssh.com,diffie-hellman-group15-sha256,diffie-hellman-group15-sha256@ssh.com,diffie-hellman-group15-sha384@ssh.com,diffie-hellman-group16-sha256,diffie-hellman-group16-sha384@ssh.com,diffie-hellman-group16-sha512@ssh.com,diffie-hellman-group18-sha512@ssh.com,ext-info-c [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp256,rsa-sha2-512,rsa-sha2-256,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-rsa,ssh-dss [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-cbc,aes128-ctr,aes192-cbc,aes192-ctr,aes256-cbc,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,blowfish-cbc,blowfish-ctr,cast128-cbc,cast128-ctr,idea-cbc,idea-ctr,serpent128-cbc,serpent128-ctr,serpent192-cbc,serpent192-ctr,serpent256-cbc,serpent256-ctr,3des-cbc,3des-ctr,twofish128-cbc,twofish128-ctr,twofish192-cbc,twofish192-ctr,twofish256-cbc,twofish256-ctr,twofish-cbc,arcfour,arcfour128,arcfour256 [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-cbc,aes128-ctr,aes192-cbc,aes192-ctr,aes256-cbc,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,blowfish-cbc,blowfish-ctr,cast128-cbc,cast128-ctr,idea-cbc,idea-ctr,serpent128-cbc,serpent128-ctr,serpent192-cbc,serpent192-ctr,serpent256-cbc,serpent256-ctr,3des-cbc,3des-ctr,twofish128-cbc,twofish128-ctr,twofish192-cbc,twofish192-ctr,twofish256-cbc,twofish256-ctr,twofish-cbc,arcfour,arcfour128,arcfour256 [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: MACs ctos: hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-sha1-96@openssh.com,hmac-md5,hmac-md5-etm@openssh.com,hmac-md5-96,hmac-md5-96-etm@openssh.com,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-ripemd160,hmac-ripemd160-etm@openssh.com,hmac-ripemd160-96,hmac-ripemd160@openssh.com [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: MACs stoc: hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-sha1-96@openssh.com,hmac-md5,hmac-md5-etm@openssh.com,hmac-md5-96,hmac-md5-96-etm@openssh.com,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-ripemd160,hmac-ripemd160-etm@openssh.com,hmac-ripemd160-96,hmac-ripemd160@openssh.com [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: compression ctos: none [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: compression stoc: none [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: languages ctos: [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: languages stoc: [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: first_kex_follows 0 [preauth]
- 16064 2024-05-04 11:35:30.292 debug2: reserved 0 [preauth]
- 16064 2024-05-04 11:35:30.292 debug1: kex: algorithm: curve25519-sha256 [preauth]
- 16064 2024-05-04 11:35:30.292 debug1: kex: host key algorithm: ssh-ed25519 [preauth]
- 16064 2024-05-04 11:35:30.292 debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
- 16064 2024-05-04 11:35:30.292 debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
- 16064 2024-05-04 11:35:30.292 debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
- 14260 2024-05-04 11:35:30.294 debug1: list_hostkey_types: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
- 14260 2024-05-04 11:35:30.294 debug3: send packet: type 20 [preauth]
- 14260 2024-05-04 11:35:30.294 debug1: SSH2_MSG_KEXINIT sent [preauth]
- 14260 2024-05-04 11:35:30.294 debug3: receive packet: type 20 [preauth]
- 14260 2024-05-04 11:35:30.294 debug1: SSH2_MSG_KEXINIT received [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: local server KEXINIT proposal [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256 [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: compression ctos: none,zlib@openssh.com [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: compression stoc: none,zlib@openssh.com [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: languages ctos: [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: languages stoc: [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: first_kex_follows 0 [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: reserved 0 [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: peer client KEXINIT proposal [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256@ssh.com,diffie-hellman-group15-sha256,diffie-hellman-group15-sha256@ssh.com,diffie-hellman-group15-sha384@ssh.com,diffie-hellman-group16-sha256,diffie-hellman-group16-sha384@ssh.com,diffie-hellman-group16-sha512@ssh.com,diffie-hellman-group18-sha512@ssh.com,ext-info-c [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp256,rsa-sha2-512,rsa-sha2-256,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-rsa,ssh-dss [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-cbc,aes128-ctr,aes192-cbc,aes192-ctr,aes256-cbc,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,blowfish-cbc,blowfish-ctr,cast128-cbc,cast128-ctr,idea-cbc,idea-ctr,serpent128-cbc,serpent128-ctr,serpent192-cbc,serpent192-ctr,serpent256-cbc,serpent256-ctr,3des-cbc,3des-ctr,twofish128-cbc,twofish128-ctr,twofish192-cbc,twofish192-ctr,twofish256-cbc,twofish256-ctr,twofish-cbc,arcfour,arcfour128,arcfour256 [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-cbc,aes128-ctr,aes192-cbc,aes192-ctr,aes256-cbc,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,blowfish-cbc,blowfish-ctr,cast128-cbc,cast128-ctr,idea-cbc,idea-ctr,serpent128-cbc,serpent128-ctr,serpent192-cbc,serpent192-ctr,serpent256-cbc,serpent256-ctr,3des-cbc,3des-ctr,twofish128-cbc,twofish128-ctr,twofish192-cbc,twofish192-ctr,twofish256-cbc,twofish256-ctr,twofish-cbc,arcfour,arcfour128,arcfour256 [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: MACs ctos: hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-sha1-96@openssh.com,hmac-md5,hmac-md5-etm@openssh.com,hmac-md5-96,hmac-md5-96-etm@openssh.com,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-ripemd160,hmac-ripemd160-etm@openssh.com,hmac-ripemd160-96,hmac-ripemd160@openssh.com [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: MACs stoc: hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-sha1-96@openssh.com,hmac-md5,hmac-md5-etm@openssh.com,hmac-md5-96,hmac-md5-96-etm@openssh.com,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-ripemd160,hmac-ripemd160-etm@openssh.com,hmac-ripemd160-96,hmac-ripemd160@openssh.com [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: compression ctos: none [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: compression stoc: none [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: languages ctos: [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: languages stoc: [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: first_kex_follows 0 [preauth]
- 14260 2024-05-04 11:35:30.294 debug2: reserved 0 [preauth]
- 14260 2024-05-04 11:35:30.294 debug1: kex: algorithm: curve25519-sha256 [preauth]
- 14260 2024-05-04 11:35:30.294 debug1: kex: host key algorithm: ssh-ed25519 [preauth]
- 14260 2024-05-04 11:35:30.294 debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
- 14260 2024-05-04 11:35:30.294 debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
- 14260 2024-05-04 11:35:30.294 debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
- 15216 2024-05-04 11:35:30.707 debug3: receive packet: type 30 [preauth]
- 15216 2024-05-04 11:35:30.707 debug1: SSH2_MSG_KEX_ECDH_INIT received [preauth]
- 15216 2024-05-04 11:35:30.710 debug3: mm_sshkey_sign: entering [preauth]
- 15216 2024-05-04 11:35:30.710 debug3: mm_request_send: entering, type 6 [preauth]
- 15216 2024-05-04 11:35:30.710 debug3: mm_sshkey_sign: waiting for MONITOR_ANS_SIGN [preauth]
- 15216 2024-05-04 11:35:30.710 debug3: mm_request_receive_expect: entering, type 7 [preauth]
- 15216 2024-05-04 11:35:30.710 debug3: mm_request_receive: entering [preauth]
- 15216 2024-05-04 11:35:30.710 debug3: mm_request_receive: entering
- 15216 2024-05-04 11:35:30.710 debug3: monitor_read: checking request 6
- 15216 2024-05-04 11:35:30.710 debug3: mm_answer_sign: entering
- 15216 2024-05-04 11:35:30.711 debug3: mm_answer_sign: KEX signature 0000020DC784A350(83)
- 15216 2024-05-04 11:35:30.711 debug3: mm_request_send: entering, type 7
- 15216 2024-05-04 11:35:30.711 debug2: monitor_read: 6 used once, disabling now
- 15216 2024-05-04 11:35:30.711 debug3: send packet: type 31 [preauth]
- 15216 2024-05-04 11:35:30.711 debug3: send packet: type 21 [preauth]
- 15216 2024-05-04 11:35:30.711 debug2: set_newkeys: mode 1 [preauth]
- 15216 2024-05-04 11:35:30.711 debug1: rekey out after 134217728 blocks [preauth]
- 15216 2024-05-04 11:35:30.711 debug1: SSH2_MSG_NEWKEYS sent [preauth]
- 15216 2024-05-04 11:35:30.711 debug1: Sending SSH2_MSG_EXT_INFO [preauth]
- 15216 2024-05-04 11:35:30.711 debug3: send packet: type 7 [preauth]
- 15216 2024-05-04 11:35:30.711 debug1: expecting SSH2_MSG_NEWKEYS [preauth]
- 16064 2024-05-04 11:35:30.747 debug3: receive packet: type 30 [preauth]
- 16064 2024-05-04 11:35:30.747 debug1: SSH2_MSG_KEX_ECDH_INIT received [preauth]
- 14260 2024-05-04 11:35:30.747 debug3: receive packet: type 30 [preauth]
- 14260 2024-05-04 11:35:30.747 debug1: SSH2_MSG_KEX_ECDH_INIT received [preauth]
- 16064 2024-05-04 11:35:30.752 debug3: mm_sshkey_sign: entering [preauth]
- 16064 2024-05-04 11:35:30.752 debug3: mm_request_send: entering, type 6 [preauth]
- 16064 2024-05-04 11:35:30.752 debug3: mm_sshkey_sign: waiting for MONITOR_ANS_SIGN [preauth]
- 16064 2024-05-04 11:35:30.752 debug3: mm_request_receive_expect: entering, type 7 [preauth]
- 16064 2024-05-04 11:35:30.752 debug3: mm_request_receive: entering [preauth]
- 16064 2024-05-04 11:35:30.752 debug3: mm_request_receive: entering
- 16064 2024-05-04 11:35:30.752 debug3: monitor_read: checking request 6
- 16064 2024-05-04 11:35:30.752 debug3: mm_answer_sign: entering
- 14260 2024-05-04 11:35:30.752 debug3: mm_sshkey_sign: entering [preauth]
- 14260 2024-05-04 11:35:30.752 debug3: mm_request_send: entering, type 6 [preauth]
- 14260 2024-05-04 11:35:30.752 debug3: mm_sshkey_sign: waiting for MONITOR_ANS_SIGN [preauth]
- 14260 2024-05-04 11:35:30.752 debug3: mm_request_receive_expect: entering, type 7 [preauth]
- 14260 2024-05-04 11:35:30.752 debug3: mm_request_receive: entering [preauth]
- 14260 2024-05-04 11:35:30.752 debug3: mm_request_receive: entering
- 14260 2024-05-04 11:35:30.752 debug3: monitor_read: checking request 6
- 14260 2024-05-04 11:35:30.752 debug3: mm_answer_sign: entering
- 16064 2024-05-04 11:35:30.753 debug3: mm_answer_sign: KEX signature 00000240FD547A70(83)
- 16064 2024-05-04 11:35:30.753 debug3: mm_request_send: entering, type 7
- 16064 2024-05-04 11:35:30.753 debug2: monitor_read: 6 used once, disabling now
- 16064 2024-05-04 11:35:30.753 debug3: send packet: type 31 [preauth]
- 16064 2024-05-04 11:35:30.753 debug3: send packet: type 21 [preauth]
- 16064 2024-05-04 11:35:30.753 debug2: set_newkeys: mode 1 [preauth]
- 16064 2024-05-04 11:35:30.753 debug1: rekey out after 134217728 blocks [preauth]
- 16064 2024-05-04 11:35:30.753 debug1: SSH2_MSG_NEWKEYS sent [preauth]
- 16064 2024-05-04 11:35:30.753 debug1: Sending SSH2_MSG_EXT_INFO [preauth]
- 16064 2024-05-04 11:35:30.753 debug3: send packet: type 7 [preauth]
- 16064 2024-05-04 11:35:30.753 debug1: expecting SSH2_MSG_NEWKEYS [preauth]
- 14260 2024-05-04 11:35:30.753 debug3: mm_answer_sign: KEX signature 0000024E887E2A60(83)
- 14260 2024-05-04 11:35:30.753 debug3: mm_request_send: entering, type 7
- 14260 2024-05-04 11:35:30.753 debug2: monitor_read: 6 used once, disabling now
- 14260 2024-05-04 11:35:30.754 debug3: send packet: type 31 [preauth]
- 14260 2024-05-04 11:35:30.754 debug3: send packet: type 21 [preauth]
- 14260 2024-05-04 11:35:30.754 debug2: set_newkeys: mode 1 [preauth]
- 14260 2024-05-04 11:35:30.754 debug1: rekey out after 134217728 blocks [preauth]
- 14260 2024-05-04 11:35:30.754 debug1: SSH2_MSG_NEWKEYS sent [preauth]
- 14260 2024-05-04 11:35:30.754 debug1: Sending SSH2_MSG_EXT_INFO [preauth]
- 14260 2024-05-04 11:35:30.754 debug3: send packet: type 7 [preauth]
- 14260 2024-05-04 11:35:30.754 debug1: expecting SSH2_MSG_NEWKEYS [preauth]
- 15216 2024-05-04 11:35:30.768 debug3: receive packet: type 21 [preauth]
- 15216 2024-05-04 11:35:30.768 debug1: SSH2_MSG_NEWKEYS received [preauth]
- 15216 2024-05-04 11:35:30.768 debug2: set_newkeys: mode 0 [preauth]
- 15216 2024-05-04 11:35:30.768 debug1: rekey in after 134217728 blocks [preauth]
- 15216 2024-05-04 11:35:30.768 debug1: KEX done [preauth]
- 16064 2024-05-04 11:35:30.773 debug3: receive packet: type 21 [preauth]
- 16064 2024-05-04 11:35:30.773 debug1: SSH2_MSG_NEWKEYS received [preauth]
- 16064 2024-05-04 11:35:30.773 debug2: set_newkeys: mode 0 [preauth]
- 16064 2024-05-04 11:35:30.773 debug1: rekey in after 134217728 blocks [preauth]
- 16064 2024-05-04 11:35:30.773 debug1: KEX done [preauth]
- 14260 2024-05-04 11:35:30.775 debug3: receive packet: type 21 [preauth]
- 14260 2024-05-04 11:35:30.775 debug1: SSH2_MSG_NEWKEYS received [preauth]
- 14260 2024-05-04 11:35:30.775 debug2: set_newkeys: mode 0 [preauth]
- 14260 2024-05-04 11:35:30.775 debug1: rekey in after 134217728 blocks [preauth]
- 14260 2024-05-04 11:35:30.775 debug1: KEX done [preauth]
- 15216 2024-05-04 11:35:30.825 debug3: receive packet: type 5 [preauth]
- 16064 2024-05-04 11:35:30.825 debug3: send packet: type 6 [preauth]
- 15216 2024-05-04 11:35:30.825 debug3: send packet: type 6 [preauth]
- 14260 2024-05-04 11:35:30.825 debug3: receive packet: type 5 [preauth]
- 14260 2024-05-04 11:35:30.825 debug3: send packet: type 6 [preauth]
- 14260 2024-05-04 11:35:30.832 debug3: receive packet: type 50 [preauth]
- 15216 2024-05-04 11:35:30.832 debug1: userauth-request for user cosimo service ssh-connection method publickey [preauth]
- 15216 2024-05-04 11:35:30.832 debug1: attempt 0 failures 0 [preauth]
- service ssh-connection method publickey [preauth]
- 16064 2024-05-04 11:35:30.832 debug3: mm_getpwnamallow: entering [preauth]
- 14260 2024-05-04 11:35:30.832 debug1: attempt 0 failures 0 [preauth]
- 15216 2024-05-04 11:35:30.832 debug3: mm_getpwnamallow: entering [preauth]
- 15216 2024-05-04 11:35:30.832 debug3: mm_request_send: entering, type 8 [preauth]
- 16064 2024-05-04 11:35:30.832 debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
- 14260 2024-05-04 11:35:30.832 debug3: mm_request_send: entering, type 8 [preauth]
- preauth]
- 16064 2024-05-04 11:35:30.832 debug3: mm_request_receive: entering [preauth]
- 14260 2024-05-04 11:35:30.832 debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
- 16064 2024-05-04 11:35:30.832 debug3: mm_request_receive: entering
- 14260 2024-05-04 11:35:30.832 debug3: mm_request_receive_expect: entering, type 9 [preauth]
- 14260 2024-05-04 11:35:30.832 debug3: mm_request_receive: entering [preauth]
- 16064 2024-05-04 11:35:30.832 debug3: monitor_read: checking request 8
- 16064 2024-05-04 11:35:30.832 debug3: mm_answer_pwnamallow: entering
- 14260 2024-05-04 11:35:30.832 debug3: monitor_read: checking request 8
- 14260 2024-05-04 11:35:30.832 debug3: mm_answer_pwnamallow: entering
- 15216 2024-05-04 11:35:30.832 debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
- 15216 2024-05-04 11:35:30.832 debug3: mm_request_receive_expect: entering, type 9 [preauth]
- 15216 2024-05-04 11:35:30.832 debug3: mm_request_receive: entering [preauth]
- 15216 2024-05-04 11:35:30.832 debug3: mm_request_receive: entering
- 15216 2024-05-04 11:35:30.832 debug3: monitor_read: checking request 8
- 15216 2024-05-04 11:35:30.832 debug3: mm_answer_pwnamallow: entering
- 15216 2024-05-04 11:35:30.833 debug2: parse_server_config_depth: config reprocess config len 328
- 15216 2024-05-04 11:35:30.833 debug3: checking match for 'User cosimo' user cosimo host 192.168.1.102 addr 192.168.1.102 laddr 192.168.1.198 lport 22
- 15216 2024-05-04 11:35:30.833 debug1: user cosimo matched 'User cosimo' at line 84
- 16064 2024-05-04 11:35:30.833 debug2: parse_server_config_depth: config reprocess config len 328
- 15216 2024-05-04 11:35:30.833 debug3: reprocess config:85 setting ChrootDirectory "C:\\Users\\lensa\\Biblioteca di calibre"
- 16064 2024-05-04 11:35:30.833 debug3: checking match for 'User cosimo' user cosimo host 192.168.1.102 addr 192.168.1.102 laddr 192.168.1.198 lport 22
- 16064 2024-05-04 11:35:30.833 debug1: user cosimo matched 'User cosimo' at line 84
- 16064 2024-05-04 11:35:30.833 debug3: match found
- 16064 2024-05-04 11:35:30.833 debug3: reprocess config:85 setting ChrootDirectory "C:\\Users\\lensa\\Biblioteca di calibre"
- 14260 2024-05-04 11:35:30.833 debug2: parse_server_config_depth: config reprocess config len 328
- 14260 2024-05-04 11:35:30.833 debug3: checking match for 'User cosimo' user cosimo host 192.168.1.102 addr 192.168.1.102 laddr 192.168.1.198 lport 22
- 14260 2024-05-04 11:35:30.833 debug1: user cosimo matched 'User cosimo' at line 84
- 14260 2024-05-04 11:35:30.833 debug3: match found
- 14260 2024-05-04 11:35:30.833 debug3: reprocess config:85 setting ChrootDirectory "C:\\Users\\lensa\\Biblioteca di calibre"
- 15216 2024-05-04 11:35:30.833 debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
- 15216 2024-05-04 11:35:30.833 debug3: mm_request_send: entering, type 9
- 16064 2024-05-04 11:35:30.834 debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
- 16064 2024-05-04 11:35:30.834 debug3: mm_request_send: entering, type 9
- 16064 2024-05-04 11:35:30.834 debug2: monitor_read: 8 used once, disabling now
- 14260 2024-05-04 11:35:30.834 debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
- 14260 2024-05-04 11:35:30.834 debug3: mm_request_send: entering, type 9
- 14260 2024-05-04 11:35:30.834 debug2: monitor_read: 8 used once, disabling now
- 15216 2024-05-04 11:35:30.834 debug2: input_userauth_request: setting up authctxt for cosimo [preauth]
- 16064 2024-05-04 11:35:30.834 debug2: input_userauth_request: setting up authctxt for cosimo [preauth]
- 15216 2024-05-04 11:35:30.834 debug3: mm_request_send: entering, type 4 [preauth]
- 16064 2024-05-04 11:35:30.834 debug3: mm_inform_authserv: entering [preauth]
- ckey [preauth]
- 16064 2024-05-04 11:35:30.835 debug3: mm_request_send: entering, type 4 [preauth]
- 15216 2024-05-04 11:35:30.835 debug2: userauth_pubkey: valid user cosimo querying public key rsa-sha2-512 AAAAB3NzaC1yc2EAAAADAQABAAABAQCXuPZAqDrer777f4c69qM+JvKQvevaIPZNCUy/sb5b9x2k9wL8vVgwNOFkGsYVOKJv75y+uCnjCJorUHCbPsYsx7pQW85Msy0cO2NLQKD7FljTmOLPbq//wpXae5OmFIhH1ynUkbpo5zcsM5aU/ltAKX/upaXa6ieXnFhiS/92xegQ0E/jw0tLxBVnO8DUc5Irg743YqH4NiFEgz91gn4KzY5nEyY4FsRRgTHyET+jiKVPVWn5j9vD/aToCmLvM6eywjHK8N2dAwVoJL7xjJkbtbZIbLVBZx1Zc+2YoTWr1+4kTTp3r5O3hJzUaytceCq6VW1c4CWfunGlzFU/kIeF [preauth]
- 16064 2024-05-04 11:35:30.835 debug2: input_userauth_request: try method publickey [preauth]
- 16064 2024-05-04 11:35:30.835 debug2: userauth_pubkey: valid user cosimo querying public key rsa-sha2-512 AAAAB3NzaC1yc2EAAAADAQABAAABAQCXuPZAqDrer777f415216 2024-05-04 11:35:30.835 debug3: mm_key_allowed: entering [preauth]
- uthctxt for cosimo [preauth]
- Xae5OmFIhH1ynUkbpo5zcsM5aU/ltAKX/upaXa6ieXnFhiS/92xegQ0E/jw0tLxBVnO8DUc5Irg743YqH4NiFEgz91gn4KzY5nEyY4FsRRgTHyET+jiKVPVWn5j9vD/aToCmLvM6eywjHK8N2dAwVoJL7xjJkbtbZIbLVBZx1Zc+2YoTWr1+4kTTp3r5O3hJzUaytceCq6VW1c4CWfunGlzFU/kIeF [preauth]
- 14260 2024-05-04 11:35:30.835 debug3: mm_inform_authserv: entering [preauth]
- 14260 2024-05-04 11:35:30.835 debug3: mm_request_send: entering, type 4 [preauth]
- ob RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk [preauth]
- 15216 2024-05-04 11:35:30.835 debug3: mm_request_send: entering, type 22 [preauth]
- 16064 2024-05-04 11:35:30.835 debug3: mm_key_allowed: entering [preauth]
- ublickey [preauth]
- 15216 2024-05-04 11:35:30.835 debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED [preauth]
- 14260 2024-05-04 11:35:30.835 debug2: userauth_pubkey: valid user cosimo querying pu15216 2024-05-04 11:35:30.835 debug3: mm_request_receive_expect: entering, type 23 [preauth]
- 9x2k9wL8vVgwNOFkGsYVOKJv75y+uCnjCJorUHCbPsYsx7pQW85Msy0cO2NLQKD7FljTmOLPbq//wpXae5OmFIhH1ynUkbpo5zcsM5aU/ltAKX/upaXa6ieXnFhiS/92xegQ0E/jw0tLxBVnO8DUc5Irg743YqH4NiFEgz91gn4KzY5nEyY4FsRRgTHyET+jiKVPVWn5j9vD/aToCmLvM6eywjHK8N2dAwVoJL7xjJkbtbZIbLVBZx1Zc+2YoTWr1+4kTTp3r5O3hJzUaytceCq6VW1c4CWfunGlzFU/kIeF [preauth]
- 15216 2024-05-04 11:35:30.835 debug3: mm_request_receive: entering [preauth]
- pkblob RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk [preauth]
- 16064 2024-05-04 11:35:30.835 debug3: mm_request_receive_expect: entering, type 23 [preauth]
- 15216 2024-05-04 11:35:30.835 debug3: mm_request_receive: entering
- 14260 2024-05-04 11:35:30.835 debug3: mm_request_send: entering, type 22 [prea15216 14260 2024-05-04 11:35:30.835 debug3: mm_key_allowed: waiting for 15216 2024-05-04 11:35:30.835 debu14260 2024-05-04 11:35:30.835 debug3: mm_request_receive_expect: enterin16064 2024-05-04 11:3514260 2024-05-04 11:35:30.835 debug3: mm_request_receive: 15216 202416064 2024-05-04 11:35:30.835 debug2: monitor_read: 4 used14260 2024-05-04 11:35:30.835 debug3: mm_request_receive: entering
- 22
- 16064 2024-05-04 11:35:30.835 debug3: mm_request_receive: entering
- 16064 2024-05-04 11:35:30.836 debug3: monitor_read: checking request 22
- 15216 2024-05-04 11:35:30.835 debug3: mm_answer_keyallowed: entering
- 16064 2024-05-04 11:35:30.836 debug3: mm_answer_keyallowed: entering
- 15216 2024-05-04 11:35:30.836 debug3: mm_answer_keyallowed: key_from_blob: 0000020DC7888260
- 16064 2024-05-04 11:35:30.836 debug3: mm_answer_keyallowed: key_from_blob: 00000240FD586AD0
- 15216 2024-05-04 11:35:30.836 debug1: trying public key file C:\\Users\\lensa\\.ssh\\authorized_keys
- 16064 2024-05-04 11:35:30.836 debug1: trying public key file C:\\Users\\lensa\\.ssh\\authorized_keys
- 14260 2024-05-04 11:35:30.836 debug3: mm_answer_authserv: service=ssh-connection, style=
- 14260 2024-05-04 11:35:30.836 debug2: monitor_read: 4 used once, disabling now
- 14260 2024-05-04 11:35:30.836 debug3: mm_request_receive: entering
- 14260 2024-05-04 11:35:30.836 debug3: monitor_read: checking request 22
- 14260 2024-05-04 11:35:30.836 debug3: mm_answer_keyallowed: entering
- 14260 2024-05-04 11:35:30.836 debug3: mm_answer_keyallowed: key_from_blob: 0000024E8881DD00
- 14260 2024-05-04 11:35:30.836 debug1: trying public key file C:\\Users\\lensa\\.ssh\\authorized_keys
- 16064 2024-05-04 11:35:30.836 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: matching key found: RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk
- 14260 2024-05-04 11:35:30.836 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: matching key found: RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk
- 16064 2024-05-04 11:35:30.836 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
- 15216 2024-05-04 11:35:30.836 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: matching key found: RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk
- 14260 2024-05-04 11:35:30.836 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
- 14260 2024-05-04 11:35:30.836 Accepted key RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk found at C:\\Users\\lensa\\.ssh\\authorized_keys:2
- ing
- 15216 2024-05-04 11:35:30.836 Accepted key RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk found at C:\\Users\\lensa\\.ssh\\authorized_keys:2
- 16064 2024-05-04 11:35:30.836 debug3: mm_answer_keyallowed: publickey authentication test: RSA key is allowed
- 16064 2024-05-04 11:35:30.836 debug3: mm_request_send: entering, type 23
- 15216 2024-05-04 11:35:30.836 debug3: mm_answer_keyallowed: publickey authentication test: RSA key is allowed
- 14260 2024-05-04 11:35:30.836 debug3: mm_answer_keyallowed: publickey authentication test: RSA key is allowed
- 14260 2024-05-04 11:35:30.836 debug3: mm_request_send: entering, type 23
- 16064 2024-05-04 11:35:30.836 debug3: send packet: type 60 [preauth]
- 15216 2024-05-04 11:35:30.836 debug3: send packet: type 60 [preauth]
- 14260 2024-05-04 11:35:30.836 debug3: send packet: type 60 [preauth]
- 16064 2024-05-04 11:35:30.836 debug2: userauth_pubkey: authenticated 0 pkalg rsa-sha2-512 [preauth]
- 14260 2024-05-04 11:35:30.836 debug2: userauth_pubkey: authenticated 0 pkalg rsa-sha2-512 [preauth]
- 15216 2024-05-04 11:35:30.836 debug2: userauth_pubkey: authenticated 0 pkalg rsa-sha2-512 [preauth]
- equested 8.298ms) [preauth]
- 14260 2024-05-04 11:35:30.836 debug3: ensure_minimum_time_since: elapsed 4.471ms, delaying 3.827ms (requested 8.298ms) [preauth]
- 15216 2024-05-04 11:35:30.836 debug3: user_specific_delay: user specific delay 0.000ms [preauth]
- 15216 2024-05-04 11:35:30.836 debug3: ensure_minimum_time_since: elapsed 4.471ms, delaying 3.827ms (requested 8.298ms) [preauth]
- 15216 2024-05-04 11:35:30.852 Postponed publickey for cosimo from 192.168.1.102 port 52626 ssh2 [preauth]
- 16064 2024-05-04 11:35:30.876 debug3: receive packet: type 50 [preauth]
- 14260 2024-05-04 11:35:30.876 debug3: receive packet: type 50 [preauth]
- 16064 2024-05-04 11:35:30.876 debug1: userauth-request for user cosimo service ssh-connection method publickey [preauth]
- 14260 2024-05-04 11:35:30.876 debug1: userauth-request for user cosimo service ssh-connection method publickey [preauth]
- 16064 2024-05-04 11:35:30.876 debug1: attempt 1 failures 0 [preauth]
- 14260 2024-05-04 11:35:30.876 debug1: attempt 1 failures 0 [preauth]
- 16064 2024-05-04 11:35:30.876 debug2: input_userauth_request: try method publickey [preauth]
- 14260 2024-05-04 11:35:30.876 debug2: input_userauth_request: try method publickey [preauth]
- 16064 2024-05-04 11:35:30.876 debug2: userauth_pubkey: valid user cosimo attempting public key rsa-sha2-512 AAAAB3NzaC1yc2EAAAADAQABAAABAQCXuPZAqDrer777f4c69qM+JvKQvevaIPZNCUy/sb5b9x2k9wL8vVgwNOFkGsYVOKJv75y+uCnjCJorUHCbPsYsx7pQW85Msy0cO2NLQKD7FljTmOLPbq//wpXae5OmFIhH1ynUkbpo5zcsM5aU/ltAKX/upaXa6ieXnFhiS/92xegQ0E/jw0tLxBVnO8DUc5Irg743YqH4NiFEgz91gn4KzY5nEyY4FsRRgTHyET+jiKVPVWn5j9vD/aToCmLvM6eywjHK8N2dAwVoJL7xjJkbtbZIbLVBZx1Zc+2YoTWr1+4kTTp3r5O3hJzUaytceCq6VW1c4CWfunGlzFU/kIeF [preauth]
- 14260 2024-05-04 11:35:30.876 debug2: userauth_pubkey: valid user cosimo attempting public key rsa-sha2-512 AAAAB3NzaC1yc2EAAAADAQABAAABAQCXuPZAqDrer777f4c69qM+JvKQvevaIPZNCUy/sb5b9x2k9wL8vVgwNOFkGsYVOKJv75y+uCnjCJorUHCbPsYsx7pQW85Msy0cO2NLQKD7FljTmOLPbq//wpXae5OmFIhH1ynUkbpo5zcsM5aU/ltAKX/upaXa6ieXnFhiS/92xegQ0E/jw0tLxBVnO8DUc5Irg743YqH4NiFEgz91gn4KzY5nEyY4FsRRgTHyET+jiKVPVWn5j9vD/aToCmLvM6eywjHK8N2dAwVoJL7xjJkbtbZIbLVBZx1Zc+2YoTWr1+4kTTp3r5O3hJzUaytceCq6VW1c4CWfunGlzFU/kIeF [preauth]
- 16064 2024-05-04 11:35:30.876 debug3: userauth_pubkey: have rsa-sha2-512 signature for RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk [preauth]
- 14260 2024-05-04 11:35:30.876 debug3: userauth_pubkey: have rsa-sha2-512 signature for RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk [preauth]
- 16064 2024-05-04 11:35:30.876 debug3: mm_key_allowed: entering [preauth]
- 14260 2024-05-04 11:35:30.876 debug3: mm_key_allowed: entering [preauth]
- 16064 2024-05-04 11:35:30.876 debug3: mm_request_send: entering, type 22 [preauth]
- 16064 2024-05-04 11:35:30.876 debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED [preauth]
- 14260 2024-05-04 11:35:30.876 debug3: mm_request_receive_expect: entering, type 23 [preauth]
- 14260 2024-05-04 11:35:30.876 debug3: mm_request_receive: entering [preauth]
- 14260 2024-05-04 11:35:30.876 debug3: mm_request_receive: entering
- 14260 2024-05-04 11:35:30.876 debug3: monitor_read: checking request 22
- 14260 2024-05-04 11:35:30.876 debug3: mm_answer_keyallowed: entering
- 14260 2024-05-04 11:35:30.876 debug3: mm_answer_keyallowed: key_from_blob: 0000024E8881E1D0
- 16064 2024-05-04 11:35:30.876 debug3: mm_request_receive: entering [preauth]
- 14260 2024-05-04 11:35:30.876 debug1: trying public key file C:\\Users\\lensa\\.ssh\\authorized_keys
- 16064 2024-05-04 11:35:30.876 debug3: mm_request_receive: entering
- 16064 2024-05-04 11:35:30.876 debug3: monitor_read: checking request 22
- 16064 2024-05-04 11:35:30.876 debug3: mm_answer_keyallowed: entering
- 16064 2024-05-04 11:35:30.876 debug3: mm_answer_keyallowed: key_from_blob: 00000240FD586810
- 16064 2024-05-04 11:35:30.876 debug1: trying public key file C:\\Users\\lensa\\.ssh\\authorized_keys
- 14260 2024-05-04 11:35:30.876 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: matching key found: RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk
- 14260 2024-05-04 11:35:30.876 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
- 14260 2024-05-04 11:35:30.876 Accepted key RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk found at C:\\Users\\lensa\\.ssh\\authorized_keys:2
- 16064 2024-05-04 11:35:30.876 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: matching key found: RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk
- 16064 2024-05-04 11:35:30.876 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
- 16064 2024-05-04 11:35:30.876 Accepted key RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk found at C:\\Users\\lensa\\.ssh\\authorized_keys:2
- 14260 2024-05-04 11:35:30.876 debug3: mm_answer_keyallowed: publickey authentication: RSA key is allowed
- 14260 2024-05-04 11:35:30.876 debug3: mm_request_send: entering, type 23
- 16064 2024-05-04 11:35:30.876 debug3: mm_answer_keyallowed: publickey authentication: RSA key is allowed
- 16064 2024-05-04 11:35:30.876 debug3: mm_request_send: entering, type 23
- 16064 2024-05-04 11:35:30.877 debug3: mm_sshkey_verify: entering [preauth]
- 16064 2024-05-04 11:35:30.877 debug3: mm_request_send: entering, type 24 [preauth]
- 16064 2024-05-04 11:35:30.877 debug3: mm_sshkey_verify: waiting for MONITOR_ANS_KEYVERIFY [preauth]
- 16064 2024-05-04 11:35:30.877 debug3: mm_request_receive_expect: entering, type 25 [preauth]
- 14260 2024-05-04 11:35:30.877 debug3: mm_request_send: entering, type 24 [preauth]
- 16064 2024-05-04 11:35:30.877 debug3: mm_request_receive: entering [preauth]
- 14260 2024-05-04 11:35:30.877 debug3: mm_sshkey_verify: waiting for MONITOR_ANS_KEYVERIFY [preauth]
- 16064 2024-05-04 11:35:30.877 debug3: mm_request_receive: entering
- 14260 2024-05-04 11:35:30.877 debug3: mm_request_receive_expect: entering, type 25 [preauth]
- 14260 2024-05-04 11:35:30.877 debug3: mm_request_receive: entering [preauth]
- 16064 2024-05-04 11:35:30.877 debug3: monitor_read: checking request 24
- 14260 2024-05-04 11:35:30.877 debug3: mm_request_receive: entering
- 14260 2024-05-04 11:35:30.877 debug3: monitor_read: checking request 24
- 16064 2024-05-04 11:35:30.877 debug3: mm_answer_keyverify: publickey 00000240FD586FA0 signature verified
- 16064 2024-05-04 11:35:30.877 debug1: auth_activate_options: setting new authentication options
- 16064 2024-05-04 11:35:30.877 debug3: mm_request_send: entering, type 25
- 14260 2024-05-04 11:35:30.877 debug3: mm_answer_keyverify: publickey 0000024E8881E1D0 signature verified
- 14260 2024-05-04 11:35:30.877 debug1: auth_activate_options: setting new authentication options
- 14260 2024-05-04 11:35:30.877 debug3: mm_request_send: entering, type 25
- .102 port 52636 ssh2: RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk
- 16064 2024-05-04 11:35:30.877 debug1: monitor_child_preauth: user cosimo authenticated by privileged process
- 16064 2024-05-04 11:35:30.877 debug3: mm_get_keystate: Waiting for new keys
- 14260 2024-05-04 11:35:30.877 Accepted publickey for cosimo from 192.168.1.102 port 52644 ssh2: RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk
- 16064 2024-05-04 11:35:30.877 debug3: mm_request_receive_expect: entering, type 26
- 16064 2024-05-04 11:35:30.877 debug3: mm_request_receive: entering
- simo authenticated by privileged process
- 14260 2024-05-04 11:35:30.877 debug3: mm_get_keystate: Waiting for new keys
- 14260 2024-05-04 11:35:30.877 debug3: mm_request_receive_expect: entering, type 26
- 14260 2024-05-04 11:35:30.877 debug3: mm_request_receive: entering
- 15216 2024-05-04 11:35:30.884 debug3: receive packet: type 50 [preauth]
- 15216 2024-05-04 11:35:30.884 debug1: userauth-request for user cosimo service ssh-connection method publickey [preauth]
- 15216 2024-05-04 11:35:30.884 debug1: attempt 1 failures 0 [preauth]
- 15216 2024-05-04 11:35:30.884 debug2: input_userauth_request: try method publickey [preauth]
- 15216 2024-05-04 11:35:30.884 debug2: userauth_pubkey: valid user cosimo attempting public key rsa-sha2-512 AAAAB3NzaC1yc2EAAAADAQABAAABAQCXuPZAqDrer777f4c69qM+JvKQvevaIPZNCUy/sb5b9x2k9wL8vVgwNOFkGsYVOKJv75y+uCnjCJorUHCbPsYsx7pQW85Msy0cO2NLQKD7FljTmOLPbq//wpXae5OmFIhH1ynUkbpo5zcsM5aU/ltAKX/upaXa6ieXnFhiS/92xegQ0E/jw0tLxBVnO8DUc5Irg743YqH4NiFEgz91gn4KzY5nEyY4FsRRgTHyET+jiKVPVWn5j9vD/aToCmLvM6eywjHK8N2dAwVoJL7xjJkbtbZIbLVBZx1Zc+2YoTWr1+4kTTp3r5O3hJzUaytceCq6VW1c4CWfunGlzFU/kIeF [preauth]
- 15216 2024-05-04 11:35:30.884 debug3: userauth_pubkey: have rsa-sha2-512 signature for RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk [preauth]
- 15216 2024-05-04 11:35:30.884 debug3: mm_key_allowed: entering [preauth]
- 15216 2024-05-04 11:35:30.884 debug3: mm_request_send: entering, type 22 [preauth]
- 15216 2024-05-04 11:35:30.884 debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED [preauth]
- 15216 2024-05-04 11:35:30.884 debug3: mm_request_receive_expect: entering, type 23 [preauth]
- 15216 2024-05-04 11:35:30.884 debug3: mm_request_receive: entering [preauth]
- 15216 2024-05-04 11:35:30.884 debug3: mm_request_receive: entering
- 15216 2024-05-04 11:35:30.884 debug3: monitor_read: checking request 22
- 15216 2024-05-04 11:35:30.884 debug3: mm_answer_keyallowed: entering
- 15216 2024-05-04 11:35:30.884 debug3: mm_answer_keyallowed: key_from_blob: 0000020DC7888310
- 15216 2024-05-04 11:35:30.884 debug1: trying public key file C:\\Users\\lensa\\.ssh\\authorized_keys
- 15216 2024-05-04 11:35:30.884 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: matching key found: RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk
- 15216 2024-05-04 11:35:30.884 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
- 15216 2024-05-04 11:35:30.884 Accepted key RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk found at C:\\Users\\lensa\\.ssh\\authorized_keys:2
- 15216 2024-05-04 11:35:30.884 debug3: mm_answer_keyallowed: publickey authentication: RSA key is allowed
- 15216 2024-05-04 11:35:30.885 debug3: mm_request_send: entering, type 23
- 15216 2024-05-04 11:35:30.885 debug3: mm_sshkey_verify: entering [preauth]
- 15216 2024-05-04 11:35:30.885 debug3: mm_request_send: entering, type 24 [preauth]
- 15216 2024-05-04 11:35:30.885 debug3: mm_sshkey_verify: waiting for MONITOR_ANS_KEYVERIFY [preauth]
- 15216 2024-05-04 11:35:30.885 debug3: mm_request_receive_expect: entering, type 25 [preauth]
- 15216 2024-05-04 11:35:30.885 debug3: mm_request_receive: entering [preauth]
- 15216 2024-05-04 11:35:30.885 debug3: mm_request_receive: entering
- 15216 2024-05-04 11:35:30.885 debug3: monitor_read: checking request 24
- 15216 2024-05-04 11:35:30.885 debug3: mm_answer_keyverify: publickey 0000020DC7888730 signature verified
- 15216 2024-05-04 11:35:30.885 debug1: auth_activate_options: setting new authentication options
- 15216 2024-05-04 11:35:30.885 debug3: mm_request_send: entering, type 25
- 15216 2024-05-04 11:35:30.885 Accepted publickey for cosimo from 192.168.1.102 port 52626 ssh2: RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk
- 15216 2024-05-04 11:35:30.885 debug1: monitor_child_preauth: user cosimo authenticated by privileged process
- 15216 2024-05-04 11:35:30.885 debug3: mm_get_keystate: Waiting for new keys
- 15216 2024-05-04 11:35:30.885 debug3: mm_request_receive_expect: entering, type 26
- 15216 2024-05-04 11:35:30.885 debug3: mm_request_receive: entering
- 16064 2024-05-04 11:35:30.899 debug3: mm_get_keystate: GOT new keys
- 14260 2024-05-04 11:35:30.899 debug3: mm_get_keystate: GOT new keys
- new authentication options [preauth]
- 14260 2024-05-04 11:35:30.899 debug1: auth_activate_options: setting new authentication options [preauth]
- 16064 2024-05-04 11:35:30.899 debug2: userauth_pubkey: authenticated 1 pkalg rsa-sha2-512 [preauth]
- 16064 2024-05-04 11:35:30.899 debug3: user_specific_delay: user specific delay 0.000ms [preauth]
- 16064 2024-05-04 11:35:30.899 debug3: ensure_minimum_time_since: elapsed 1.026ms, delaying 7.272ms (requested 8.298ms) [preauth]
- 15216 2024-05-04 11:35:30.899 debug3: user_specific_delay: user specif14260 2024-05-04 11:35:30.899 debug2: userauth_pubkey: authenticated 1 pkalg rsa-sha2-512 [preauth]
- 15216 2024-05-04 11:35:30.899 debug3: ensure_minimum_time_since: elapsed 0.998ms, de14260 2024-05-04 11:35:30.899 debug3: user_spe16064 2024-05-04 11:35:30.899 debug3: mm_send_keysta15216 2024-05-04 11:35:30.899 debug3: send packet: type 52 [preauth]
- 15216 2024-05-04 11:35:30.899 debug3: mm_request_send: entering, type 26 [preauth]
- 14260 2024-05-04 11:35:30.899 debug3: ensure_minimum_time_since: elapsed 1.026ms, delaying 7.272ms (requested 8.298ms) [preauth]
- 14260 2024-05-04 11:35:30.899 debug3: send packet: type 52 [preauth]
- 14260 2024-05-04 11:35:30.899 debug3: mm_request_send: entering, type 26 [preauth]
- 14260 2024-05-04 11:35:30.899 debug3: mm_send_keystate: Finished sending state [preauth]
- 15216 2024-05-04 11:35:30.903 debug1: monitor_read_log: child log fd closed
- 16064 2024-05-04 11:35:30.903 debug1: monitor_read_log: child log fd closed
- 14260 2024-05-04 11:35:30.903 debug1: monitor_read_log: child log fd closed
- 14260 2024-05-04 11:35:30.906 debug3: LsaLogonUser Succeeded (Impersonation: 1)
- 16064 2024-05-04 11:35:30.906 debug3: LsaLogonUser Succeeded (Impersonation: 1)
- 15216 2024-05-04 11:35:30.906 debug3: LsaLogonUser Succeeded (Impersonation: 1)
- 14260 2024-05-04 11:35:30.911 debug3: spawning "C:\\WINDOWS\\System32\\OpenSSH\\sshd.exe" -z as user
- 16064 2024-05-04 11:35:30.911 debug3: spawning "C:\\WINDOWS\\System32\\OpenSSH\\sshd.exe" -z as user
- 15216 2024-05-04 11:35:30.912 debug3: spawning "C:\\WINDOWS\\System32\\OpenSSH\\sshd.exe" -z as user
- 14260 2024-05-04 11:35:30.915 User child is on pid 15892
- 14260 2024-05-04 11:35:30.915 debug3: send_rexec_state: entering fd = 5 config len 328
- 14260 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 14260 2024-05-04 11:35:30.915 debug3: send_rexec_state: done
- 14260 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 16064 2024-05-04 11:35:30.915 debug3: send_rexec_state: entering fd = 5 config len 328
- 14260 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 14260 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 16064 2024-05-04 11:35:30.915 debug3: send_rexec_state: done
- 14260 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 16064 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 16064 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 16064 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 15216 2024-05-04 11:35:30.915 debug3: send_rexec_state: entering fd = 5 config len 328
- 16064 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 15216 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 15216 2024-05-04 11:35:30.915 debug3: send_rexec_state: done
- 16064 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 15216 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 15216 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 15216 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 15216 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 15216 2024-05-04 11:35:30.915 debug3: ssh_msg_send: type 0
- 7104 2024-05-04 11:35:30.932 debug3: recv_idexch_state: entering fd = 3
- 7104 2024-05-04 11:35:30.932 debug3: ssh_msg_recv entering
- 7104 2024-05-04 11:35:30.932 debug3: recv_idexch_state: done
- 7104 2024-05-04 11:35:30.932 debug2: fd 5 setting O_NONBLOCK
- 7104 2024-05-04 11:35:30.932 debug3: recv_autxctx_state: entering fd = 3
- 7104 2024-05-04 11:35:30.932 debug3: ssh_msg_recv entering
- 7104 2024-05-04 11:35:30.932 debug3: recv_autxctx_state: done
- 15892 2024-05-04 11:35:30.933 debug3: recv_idexch_state: entering fd = 3
- 15892 2024-05-04 11:35:30.933 debug3: ssh_msg_recv entering
- 15892 2024-05-04 11:35:30.933 debug3: recv_idexch_state: done
- 15892 2024-05-04 11:35:30.933 debug2: fd 5 setting O_NONBLOCK
- 15892 2024-05-04 11:35:30.933 debug3: recv_autxctx_state: entering fd = 39744 2024-05-04 11:35:30.933 debug3: ssh_msg_recv entering
- 9744 2024-05-04 11:35:30.933 debug3: recv_idexch_state: done
- 9744 2024-05-04 11:35:30.933 debug2: fd 5 setting O_NONBLOCK
- 9744 2024-05-04 11:35:30.933 debug3: recv_autxctx_state: entering fd = 3
- 9744 2024-05-04 11:35:30.933 debug3: ssh_msg_recv entering
- 9744 2024-05-04 11:35:30.933 debug3: recv_autxctx_state: done
- 7104 2024-05-04 11:35:30.933 debug2: parse_server_config_depth: config reprocess config len 328
- 7104 2024-05-04 11:35:30.933 debug3: checking match for 'User cosimo' user cosimo host 192.168.1.102 addr 192.168.1.102 laddr 192.168.1.198 lport 22
- 7104 2024-05-04 11:35:30.933 debug1: user cosimo matched 'User cosimo' at line 84
- 7104 2024-05-04 11:35:30.933 debug3: match found
- 7104 2024-05-04 11:35:30.933 debug3: reprocess config:85 setting ChrootDirectory "C:\\Users\\lensa\\Biblioteca di calibre"
- 15892 2024-05-04 11:35:30.934 debug2: parse_server_config_depth: config reprocess config len 328
- 15892 2024-05-04 11:35:30.934 debug3: checking match for 'User cosimo' user cosimo host 192.168.1.102 addr 192.168.1.102 laddr 192.168.1.198 lport 22
- 15892 2024-05-04 11:35:30.934 debug1: user cosimo matched 'User cosimo' at line 84
- 15892 2024-05-04 11:35:30.934 debug3: match found
- 15892 2024-05-04 11:35:30.934 debug3: reprocess config:85 setting ChrootDirectory "C:\\Users\\lensa\\Biblioteca di calibre"
- 9744 2024-05-04 11:35:30.934 debug2: parse_server_config_depth: config reprocess config len 328
- 9744 2024-05-04 11:35:30.934 debug3: checking match for 'User cosimo' user cosimo host 192.168.1.102 addr 192.168.1.102 laddr 192.168.1.198 lport 22
- 9744 2024-05-04 11:35:30.934 debug1: user cosimo matched 'User cosimo' at line 84
- 9744 2024-05-04 11:35:30.934 debug3: match found
- 9744 2024-05-04 11:35:30.934 debug3: reprocess config:85 setting ChrootDirectory "C:\\Users\\lensa\\Biblioteca di calibre"
- 15216 2024-05-04 11:35:30.934 debug3: monitor_recv_keystate: entering
- 15216 2024-05-04 11:35:30.934 debug3: ssh_msg_recv entering
- 15216 2024-05-04 11:35:30.934 debug3: monitor_recv_keystate: done
- 14260 2024-05-04 11:35:30.935 debug3: monitor_recv_keystate: entering
- 14260 2024-05-04 11:35:30.935 debug3: ssh_msg_recv entering
- 14260 2024-05-04 11:35:30.935 debug3: monitor_recv_keystate: done
- 16064 2024-05-04 11:35:30.935 debug3: monitor_recv_keystate: entering
- 15216 2024-05-04 11:35:30.935 Changed root directory to "C:\\\\Users\\\\lensa\\\\Biblioteca di calibre"
- 16064 2024-05-04 11:35:30.935 debug3: ssh_msg_recv entering
- 16064 2024-05-04 11:35:30.935 debug3: monitor_recv_keystate: done
- t_set_state
- 15216 2024-05-04 11:35:30.935 debug2: set_newkeys: mode 0
- 15216 2024-05-04 11:35:30.935 debug1: rekey in after 134217728 blocks
- 15216 2024-05-04 11:35:30.935 debug2: set_newkeys: mode 1
- 15216 2024-05-04 11:35:30.935 debug1: rekey out after 134217728 blocks
- 15216 2024-05-04 11:35:30.935 debug1: ssh_packet_set_postauth: called
- 15216 2024-05-04 11:35:30.935 debug3: ssh_packet_set_state: done
- 15216 2024-05-04 11:35:30.935 debug3: monitor_recv_authopt: entering
- 15216 2024-05-04 11:35:30.935 debug3: ssh_msg_recv entering
- 15216 2024-05-04 11:35:30.935 debug3: monitor_recv_authopt: done
- 15216 2024-05-04 11:35:30.935 debug3: notify_hostkeys: key 0: ssh-rsa SHA256:j67qDD90vBWtDSnI5gz/F1On6CBndnQOw9LWZhJu55s
- 15216 2024-05-04 11:35:30.935 debug3: notify_hostkeys: key 1: ecdsa-sha2-nistp256 SHA256:tVGN8rbbxxjENP8vlvidAWBUx7wDSjVr7LaNQ29x20U
- 15216 2024-05-04 11:35:30.935 debug3: notify_hostkeys: key 2: ssh-ed25519 SHA256:/29ogfSeqi44k+C54DdRnpt99nc2diLV1TMWdXCc/RQ
- 15216 2024-05-04 11:35:30.935 debug3: notify_hostkeys: sent 3 hostkeys
- 15216 2024-05-04 11:35:30.935 debug3: send packet: type 80
- 15216 2024-05-04 11:35:30.935 debug1: active: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
- 15216 2024-05-04 11:35:30.935 debug1: Entering interactive session for SSH2.
- 15216 2024-05-04 11:35:30.935 debug2: fd 8 setting O_NONBLOCK
- 15216 2024-05-04 11:35:30.935 debug2: fd 9 setting O_NONBLOCK
- 15216 2024-05-04 11:35:30.935 debug1: server_init_dispatch
- 15216 2024-05-04 11:35:30.935 debug3: receive packet: type 90
- 15216 2024-05-04 11:35:30.935 debug1: server_input_channel_open: ctype session rchan 0 win 2097152 max 32768
- 14260 2024-05-04 11:35:30.935 Changed root directory to "C:\\\\Users\\\\lensa\\\\Biblioteca di calibre"
- 15216 2024-05-04 11:35:30.935 debug1: channel 0: new [server-session]
- 15216 2024-05-04 11:35:30.935 debug2: session_new: allocate (allocated 0 max 10)
- 14260 2024-05-04 11:35:30.935 debug3: monitor_apply_keystate: packet_set_state
- 15216 2024-05-04 11:35:30.935 debug1: session_new: session 0
- 14260 2024-05-04 11:35:30.935 debug2: set_newkeys: mode 0
- 15216 2024-05-04 11:35:30.935 debug1: session_open: channel 0
- 14260 2024-05-04 11:35:30.935 debug1: rekey in after 134217728 blocks
- h channel 0
- 15216 2024-05-04 11:35:30.935 debug1: server_input_channel_open: confirm session
- 15216 2024-05-04 11:35:30.935 debug3: send packet: type 91
- 14260 2024-05-04 11:35:30.935 debug2: set_newkeys: mode 1
- 14260 2024-05-04 11:35:30.935 debug1: rekey out after 134217728 blocks
- 14260 2024-05-04 11:35:30.935 debug1: ssh_packet_set_postauth: called
- 14260 2024-05-04 11:35:30.936 debug3: ssh_packet_set_state: done
- 14260 2024-05-04 11:35:30.936 debug3: monitor_recv_authopt: entering
- 14260 2024-05-04 11:35:30.936 debug3: ssh_msg_recv entering
- 14260 2024-05-04 11:35:30.936 debug3: monitor_recv_authopt: done
- rs\\\\lensa\\\\Biblioteca di calibre"
- 16064 2024-05-04 11:35:30.936 debug3: monitor_apply_keystate: packet_set_state
- 14260 2024-05-04 11:35:30.936 debug3: notify_hostkeys: key 0: ssh-rsa SHA256:j67qDD90vBWtDSnI5gz/F1On6CBndnQOw9LWZhJu55s
- 16064 2024-05-04 11:35:30.936 debug2: set_newkeys: mode 0
- 14260 2024-05-04 11:35:30.936 debug3: notify_hostkeys: key 1: ecdsa-sha2-nistp256 SHA256:tVGN8rbbxxjENP8vlvidAWBUx7wDSjVr7LaNQ29x20U
- 16064 2024-05-04 11:35:30.936 debug2: set_newkeys: mode 1
- 14260 2024-05-04 11:35:30.936 debug3: notify_hostkeys: key 2: ssh-ed25519 SHA256:/29ogfSeqi44k+C54DdRnpt99nc2diLV1TMWdXCc/RQ
- 16064 2024-05-04 11:35:30.936 debug1: ssh_packet_set_postauth: called
- 16064 2024-05-04 11:35:30.936 debug3: ssh_packet_set_state: done
- keys
- 16064 2024-05-04 11:35:30.936 debug3: monitor_recv_authopt: entering
- 16064 2024-05-04 11:35:30.936 debug3: ssh_msg_recv entering
- 14260 2024-05-04 11:35:30.936 debug1: active: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
- 16064 2024-05-04 11:35:30.936 debug3: notify_hostkeys: key 0: ssh-rsa SHA256:j67qDD90vBWtDSnI5gz/F1On6CBndnQOw9LWZhJu55s
- 14260 2024-05-04 11:35:30.936 debug1: Entering interactive session for SSH2.
- 16064 2024-05-04 11:35:30.936 debug3: notify_hostkeys: key 1: ecdsa-sha2-nistp256 SHA256:tVGN8rbbxxjENP8vlvidAWBUx7wDSjVr7LaNQ29x20U
- 14260 2024-05-04 11:35:30.936 debug2: fd 8 setting O_NONBLOCK
- sh-ed25519 SHA256:/29ogfSeqi44k+C54DdRnpt99nc2diLV1TMWdXCc/RQ
- 16064 2024-05-04 11:35:30.936 debug3: notify_hostkeys: sent 3 hostkeys
- 16064 2024-05-04 11:35:30.936 debug3: send packet: type 80
- K
- 14260 2024-05-04 11:35:30.936 debug1: server_init_dispatch
- gent-forwarding port-forwarding pty user-rc x11-forwarding
- 16064 2024-05-04 11:35:30.936 debug1: Entering interactive session for SSH2.
- 16064 2024-05-04 11:35:30.936 debug2: fd 8 setting O_NONBLOCK
- 16064 2024-05-04 11:35:30.936 debug2: fd 9 setting O_NONBLOCK
- 16064 2024-05-04 11:35:30.936 debug1: server_init_dispatch
- 16064 2024-05-04 11:35:30.936 debug3: receive packet: type 90
- 14260 2024-05-04 11:35:30.936 debug1: server_input_channel_open: ctype session rchan 0 win 2097152 max 32768
- 14260 2024-05-04 11:35:30.936 debug1: input_session_request
- en: ctype session rchan 0 win 2097152 max 32768
- 14260 2024-05-04 11:35:30.936 debug1: channel 0: new [server-session]
- 16064 2024-05-04 11:35:30.936 debug1: input_session_request
- 14260 2024-05-04 11:35:30.936 debug2: session_new: allocate (allocated 0 max 10)
- 14260 2024-05-04 11:35:30.936 debug3: session_unused: session id 0 unused
- 14260 2024-05-04 11:35:30.936 debug1: session_new: session 0
- 14260 2024-05-04 11:35:30.936 debug1: session_open: channel 0
- located 0 max 10)
- 14260 2024-05-04 11:35:30.936 debug1: session_open: session 0: link with channel 0
- 16064 2024-05-04 11:35:30.936 debug3: session_unused: session id 0 unused
- 16064 2024-05-04 11:35:30.936 debug1: session_new: session 0
- 14260 2024-05-04 11:35:30.936 debug1: server_input_channel_open16064 2024-05-04 11:35:30.936 debug1: session_open: session 0: link with channel 0
- 16064 2024-05-04 11:35:30.936 debug1: server_input_channel_open: confirm session
- 14260 2024-05-04 11:35:30.936 debug3: send packet: type 91
- 16064 2024-05-04 11:35:30.996 debug3: receive packet: type 98
- 16064 2024-05-04 11:35:30.996 debug1: server_input_channel_req: channel 0 request subsystem reply 1
- 14260 2024-05-04 11:35:30.996 debug1: session_by_channel: session 0 channel 0
- 16064 2024-05-04 11:35:30.996 debug1: session_by_channel: session 0 channel 0
- 14260 2024-05-04 11:35:30.996 debug1: session_input_channel_req: session 0 req subsystem
- 16064 2024-05-04 11:35:30.996 debug1: session_input_channel_req: session 0 req subsystem
- 14260 2024-05-04 11:35:30.996 debug2: subsystem request for sftp by user cosimo
- 16064 2024-05-04 11:35:30.996 debug2: subsystem request for sftp by user cosimo
- 14260 2024-05-04 11:35:30.996 debug1: subsystem: cannot stat sftp-server.exe: No such file or directory
- 14260 2024-05-04 11:35:30.996 debug1: subsystem: exec() sftp-server.exe
- 14260 2024-05-04 11:35:30.996 Starting session: subsystem 'sftp' for cosimo from 192.168.1.102 port 52644 id 0
- 16064 2024-05-04 11:35:30.996 debug2: fd 10 setting O_NONBLOCK
- 14260 2024-05-04 11:35:30.996 debug2: fd 11 setting O_NONBLOCK
- 14260 2024-05-04 11:35:30.996 debug2: fd 12 setting O_NONBLOCK
- 16064 2024-05-04 11:35:30.996 debug2: fd 13 setting O_NONBLOCK
- 16064 2024-05-04 11:35:30.996 debug2: fd 14 setting O_NONBLOCK
- 14260 2024-05-04 11:35:30.996 debug2: fd 13 setting O_NONBLOCK
- 16064 2024-05-04 11:35:30.996 debug2: fd 15 setting O_NONBLOCK
- 14260 2024-05-04 11:35:30.996 debug2: fd 14 setting O_NONBLOCK
- 14260 2024-05-04 11:35:30.996 debug2: fd 15 setting O_NONBLOCK
- 16064 2024-05-04 11:35:30.996 debug3: shell: "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe"
- 14260 2024-05-04 11:35:30.996 debug3: shell_option: -c
- 16064 2024-05-04 11:35:30.996 debug3: shell_option: -c
- 14260 2024-05-04 11:35:30.996 debug3: exec_command: sftp-server.exe
- 14260 2024-05-04 11:35:30.996 debug3: arg escape option: TRUE
- 14260 2024-05-04 11:35:30.996 debug3: spawn_argv[0]: "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe"
- 14260 2024-05-04 11:35:30.996 debug3: spawning "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe" -c sftp-server.exe as subprocess
- 16064 2024-05-04 11:35:30.996 debug3: exec_command: sftp-server.exe
- 16064 2024-05-04 11:35:30.996 debug3: arg escape option: TRUE
- 16064 2024-05-04 11:35:30.996 debug3: spawn_argv[0]: "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe"
- 16064 2024-05-04 11:35:30.996 debug3: spawning "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe" -c sftp-server.exe as subprocess
- 15216 2024-05-04 11:35:30.998 debug3: receive packet: type 98
- 15216 2024-05-04 11:35:30.998 debug1: server_input_channel_req: channel 0 request subsystem reply 1
- 15216 2024-05-04 11:35:30.998 debug1: session_by_channel: session 0 channel 0
- 15216 2024-05-04 11:35:30.998 debug1: session_input_channel_req: session 0 req subsystem
- 15216 2024-05-04 11:35:30.998 debug2: subsystem request for sftp by user cosimo
- 15216 2024-05-04 11:35:30.998 debug1: subsystem: cannot stat sftp-server.exe: No such file or directory
- 15216 2024-05-04 11:35:30.998 debug1: subsystem: exec() sftp-server.exe
- 15216 2024-05-04 11:35:30.998 Starting session: subsystem 'sftp' for cosimo from 192.168.1.102 port 52626 id 0
- 15216 2024-05-04 11:35:30.998 debug2: fd 10 setting O_NONBLOCK
- 15216 2024-05-04 11:35:30.998 debug2: fd 11 setting O_NONBLOCK
- 15216 2024-05-04 11:35:30.998 debug2: fd 12 setting O_NONBLOCK
- 15216 2024-05-04 11:35:30.998 debug2: fd 13 setting O_NONBLOCK
- 15216 2024-05-04 11:35:30.998 debug2: fd 14 setting O_NONBLOCK
- 15216 2024-05-04 11:35:30.998 debug2: fd 15 setting O_NONBLOCK
- 15216 2024-05-04 11:35:30.999 debug3: shell: "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe"
- 15216 2024-05-04 11:35:30.999 debug3: shell_option: -c
- 15216 2024-05-04 11:35:30.999 debug3: exec_command: sftp-server.exe
- 15216 2024-05-04 11:35:30.999 debug3: arg escape option: TRUE
- 15216 2024-05-04 11:35:30.999 debug3: spawn_argv[0]: "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe"
- 15216 2024-05-04 11:35:30.999 debug3: spawning "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe" -c sftp-server.exe as subprocess
- 16064 2024-05-04 11:35:31.003 debug2: fd 5 setting TCP_NODELAY
- 16064 2024-05-04 11:35:31.003 debug3: fd 12 is O_NONBLOCK
- 16064 2024-05-04 11:35:31.003 debug3: fd 11 is O_NONBLOCK
- 16064 2024-05-04 11:35:31.003 debug3: fd 14 is O_NONBLOCK
- 16064 2024-05-04 11:35:31.003 debug3: send packet: type 99
- 14260 2024-05-04 11:35:31.003 debug2: fd 5 setting TCP_NODELAY
- 14260 2024-05-04 11:35:31.003 debug3: fd 12 is O_NONBLOCK
- 14260 2024-05-04 11:35:31.003 debug3: fd 11 is O_NONBLOCK
- 14260 2024-05-04 11:35:31.003 debug3: fd 14 is O_NONBLOCK
- 14260 2024-05-04 11:35:31.003 debug3: send packet: type 99
- 15216 2024-05-04 11:35:31.006 debug2: fd 5 setting TCP_NODELAY
- 15216 2024-05-04 11:35:31.006 debug3: fd 12 is O_NONBLOCK
- 15216 2024-05-04 11:35:31.006 debug3: fd 11 is O_NONBLOCK
- 15216 2024-05-04 11:35:31.006 debug3: fd 14 is O_NONBLOCK
- 15216 2024-05-04 11:35:31.006 debug3: send packet: type 99
- 15216 2024-05-04 11:35:48.525 debug3: receive packet: type 90
- 15216 2024-05-04 11:35:48.525 debug1: server_input_channel_open: ctype session rchan 1 win 2097152 max 32768
- 15216 2024-05-04 11:35:48.525 debug1: input_session_request
- 15216 2024-05-04 11:35:48.525 debug1: channel 1: new [server-session]
- 15216 2024-05-04 11:35:48.525 debug2: session_new: allocate (allocated 1 max 10)
- 15216 2024-05-04 11:35:48.525 debug3: session_unused: session id 1 unused
- 15216 2024-05-04 11:35:48.525 debug1: session_new: session 1
- 15216 2024-05-04 11:35:48.525 debug1: session_open: channel 1
- 15216 2024-05-04 11:35:48.525 debug1: session_open: session 1: link with channel 1
- 15216 2024-05-04 11:35:48.525 debug1: server_input_channel_open: confirm session
- 15216 2024-05-04 11:35:48.525 debug3: send packet: type 91
- 15216 2024-05-04 11:35:48.530 debug3: receive packet: type 98
- 15216 2024-05-04 11:35:48.530 debug1: server_input_channel_req: channel 1 request subsystem reply 1
- 15216 2024-05-04 11:35:48.530 debug1: session_by_channel: session 1 channel 1
- 15216 2024-05-04 11:35:48.531 debug1: session_input_channel_req: session 1 req subsystem
- 15216 2024-05-04 11:35:48.531 debug2: subsystem request for sftp by user cosimo
- 15216 2024-05-04 11:35:48.531 debug1: subsystem: cannot stat sftp-server.exe: No such file or directory
- 15216 2024-05-04 11:35:48.531 debug1: subsystem: exec() sftp-server.exe
- 15216 2024-05-04 11:35:48.531 Starting session: subsystem 'sftp' for cosimo from 192.168.1.102 port 52626 id 1
- 15216 2024-05-04 11:35:48.531 debug2: fd 10 setting O_NONBLOCK
- 15216 2024-05-04 11:35:48.531 debug2: fd 13 setting O_NONBLOCK
- 15216 2024-05-04 11:35:48.531 debug2: fd 15 setting O_NONBLOCK
- 15216 2024-05-04 11:35:48.531 debug2: fd 16 setting O_NONBLOCK
- 15216 2024-05-04 11:35:48.531 debug2: fd 17 setting O_NONBLOCK
- 15216 2024-05-04 11:35:48.531 debug2: fd 18 setting O_NONBLOCK
- 15216 2024-05-04 11:35:48.531 debug3: shell: "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe"
- 15216 2024-05-04 11:35:48.531 debug3: shell_option: -c
- 15216 2024-05-04 11:35:48.531 debug3: exec_command: sftp-server.exe
- 15216 2024-05-04 11:35:48.531 debug3: arg escape option: TRUE
- 15216 2024-05-04 11:35:48.531 debug3: spawn_argv[0]: "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe"
- 15216 2024-05-04 11:35:48.531 debug3: spawning "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe" -c sftp-server.exe as subprocess
- 15216 2024-05-04 11:35:48.538 debug3: fd 15 is O_NONBLOCK
- 15216 2024-05-04 11:35:48.538 debug3: fd 13 is O_NONBLOCK
- 15216 2024-05-04 11:35:48.539 debug3: fd 17 is O_NONBLOCK
- 15216 2024-05-04 11:35:48.539 debug3: send packet: type 99
- 15216 2024-05-04 11:36:07.746 debug3: receive packet: type 90
- 15216 2024-05-04 11:36:07.746 debug1: server_input_channel_open: ctype session rchan 2 win 2097152 max 32768
- 15216 2024-05-04 11:36:07.746 debug1: input_session_request
- 15216 2024-05-04 11:36:07.746 debug1: channel 2: new [server-session]
- 15216 2024-05-04 11:36:07.746 debug2: session_new: allocate (allocated 2 max 10)
- 15216 2024-05-04 11:36:07.746 debug3: session_unused: session id 2 unused
- 15216 2024-05-04 11:36:07.746 debug1: session_new: session 2
- 15216 2024-05-04 11:36:07.746 debug1: session_open: channel 2
- 15216 2024-05-04 11:36:07.746 debug1: session_open: session 2: link with channel 2
- 15216 2024-05-04 11:36:07.746 debug1: server_input_channel_open: confirm session
- 15216 2024-05-04 11:36:07.746 debug3: send packet: type 91
- 15216 2024-05-04 11:36:07.756 debug3: receive packet: type 98
- 15216 2024-05-04 11:36:07.756 debug1: server_input_channel_req: channel 2 request subsystem reply 1
- 15216 2024-05-04 11:36:07.756 debug1: session_by_channel: session 2 channel 2
- 15216 2024-05-04 11:36:07.756 debug1: session_input_channel_req: session 2 req subsystem
- 15216 2024-05-04 11:36:07.756 debug2: subsystem request for sftp by user cosimo
- 15216 2024-05-04 11:36:07.756 debug1: subsystem: cannot stat sftp-server.exe: No such file or directory
- 15216 2024-05-04 11:36:07.756 debug1: subsystem: exec() sftp-server.exe
- 15216 2024-05-04 11:36:07.756 Starting session: subsystem 'sftp' for cosimo from 192.168.1.102 port 52626 id 2
- 15216 2024-05-04 11:36:07.756 debug2: fd 10 setting O_NONBLOCK
- 15216 2024-05-04 11:36:07.756 debug2: fd 16 setting O_NONBLOCK
- 15216 2024-05-04 11:36:07.756 debug2: fd 18 setting O_NONBLOCK
- 15216 2024-05-04 11:36:07.756 debug2: fd 19 setting O_NONBLOCK
- 15216 2024-05-04 11:36:07.756 debug2: fd 20 setting O_NONBLOCK
- 15216 2024-05-04 11:36:07.756 debug2: fd 21 setting O_NONBLOCK
- 15216 2024-05-04 11:36:07.756 debug3: shell: "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe"
- 15216 2024-05-04 11:36:07.756 debug3: shell_option: -c
- 15216 2024-05-04 11:36:07.756 debug3: exec_command: sftp-server.exe
- 15216 2024-05-04 11:36:07.756 debug3: arg escape option: TRUE
- 15216 2024-05-04 11:36:07.756 debug3: spawn_argv[0]: "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe"
- 15216 2024-05-04 11:36:07.756 debug3: spawning "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe" -c sftp-server.exe as subprocess
- 15216 2024-05-04 11:36:07.758 debug3: fd 18 is O_NONBLOCK
- 15216 2024-05-04 11:36:07.758 debug3: fd 16 is O_NONBLOCK
- 15216 2024-05-04 11:36:07.758 debug3: fd 20 is O_NONBLOCK
- 15216 2024-05-04 11:36:07.758 debug3: send packet: type 99
- 15216 2024-05-04 11:36:07.966 debug3: receive packet: type 97
- 15216 2024-05-04 11:36:07.966 debug2: channel 2: rcvd close
- 15216 2024-05-04 11:36:07.966 debug2: channel 2: output open -> drain
- 15216 2024-05-04 11:36:07.966 debug2: chan_shutdown_read: channel 2: (i0 o1 sock -1 wfd 18 efd 20 [ignore])
- 15216 2024-05-04 11:36:07.966 debug1: chan_shutdown_extended_read: channel 2: (i0 o1 sock -1 wfd -1 efd 20 [ignore])
- 15216 2024-05-04 11:36:07.966 debug2: channel 2: input open -> closed
- 15216 2024-05-04 11:36:07.966 debug3: channel 2: will not send data after close
- 15216 2024-05-04 11:36:07.966 debug2: channel 2: obuf empty
- 15216 2024-05-04 11:36:07.966 debug2: chan_shutdown_write: channel 2: (i3 o1 sock -1 wfd 16 efd -1 [closed])
- 15216 2024-05-04 11:36:07.966 debug2: channel 2: output drain -> closed
- 15216 2024-05-04 11:36:07.966 debug2: channel 2: almost dead
- 15216 2024-05-04 11:36:07.966 debug2: channel 2: gc: notify user
- 15216 2024-05-04 11:36:07.966 debug1: session_by_channel: session 2 channel 2
- 15216 2024-05-04 11:36:07.966 debug1: session_close_by_channel: channel 2 child 7496
- 15216 2024-05-04 11:36:07.966 debug1: session_close_by_channel: channel 2: has child, ttyfd -1
- 15216 2024-05-04 11:36:07.982 debug1: Received SIGCHLD.
- 15216 2024-05-04 11:36:07.982 debug1: session_by_pid: pid 7496
- 15216 2024-05-04 11:36:07.982 debug1: session_exit_message: session 2 channel 2 pid 7496
- 15216 2024-05-04 11:36:07.982 debug2: channel 2: request exit-status confirm 0
- 15216 2024-05-04 11:36:07.982 debug3: send packet: type 98
- 15216 2024-05-04 11:36:07.982 debug1: session_exit_message: release channel 2
- 15216 2024-05-04 11:36:07.982 debug2: channel 2: send close
- 15216 2024-05-04 11:36:07.982 debug3: send packet: type 97
- 15216 2024-05-04 11:36:07.982 debug2: channel 2: is dead
- 15216 2024-05-04 11:36:07.982 debug2: channel 2: gc: notify user
- 15216 2024-05-04 11:36:07.982 debug1: session_by_channel: session 2 channel 2
- 15216 2024-05-04 11:36:07.982 debug1: session_close_by_channel: channel 2 child 0
- 15216 2024-05-04 11:36:07.982 Close session: user cosimo from 192.168.1.102 port 52626 id 2
- 15216 2024-05-04 11:36:07.982 debug3: session_unused: session id 2 unused
- 15216 2024-05-04 11:36:07.982 debug2: channel 2: gc: user detached
- 15216 2024-05-04 11:36:07.982 debug2: channel 2: is dead
- 15216 2024-05-04 11:36:07.982 debug2: channel 2: garbage collecting
- 15216 2024-05-04 11:36:07.983 debug1: channel 2: free: server-session, nchannels 3
- 15216 2024-05-04 11:36:07.983 debug3: channel 2: status: The following connections are open:\\r\\n #0 server-session (t4 r0 i0/0 o0/0 e[ignore]/0 fd 12/11/14 sock -1 cc -1)\\r\\n #1 server-session (t4 r1 i0/0 o0/0 e[ignore]/0 fd 15/13/17 sock -1 cc -1)\\r\\n #2 server-session (t4 r2 i3/0 o3/0 e[closed]/0 fd -1/-1/-1 sock -1 cc -1)\\r\\n
- 15216 2024-05-04 11:36:07.983 debug2: notify_done: reading
- 15216 2024-05-04 11:36:07.991 debug3: receive packet: type 1
- 15216 2024-05-04 11:36:07.991 Received disconnect from 192.168.1.102 port 52626:11:
- 15216 2024-05-04 11:36:07.991 Disconnected from 192.168.1.102 port 52626
- 15216 2024-05-04 11:36:07.991 debug1: do_cleanup
- 15216 2024-05-04 11:36:07.993 debug3: mm_request_receive: entering
- 15216 2024-05-04 11:36:07.993 debug1: do_cleanup
- 6460 2024-05-04 11:36:09.164 debug3: fd 5 is not O_NONBLOCK
- 6460 2024-05-04 11:36:09.164 debug3: spawning "C:\\WINDOWS\\System32\\OpenSSH\\sshd.exe" -R as subprocess
- 6460 2024-05-04 11:36:09.166 debug3: send_rexec_state: entering fd = 8 config len 328
- 6460 2024-05-04 11:36:09.166 debug3: ssh_msg_send: type 0
- 6460 2024-05-04 11:36:09.166 debug3: send_rexec_state: done
- 8568 2024-05-04 11:36:09.190 debug1: inetd sockets after dupping: 4, 4
- 8568 2024-05-04 11:36:09.190 Connection from 192.168.1.102 port 34298 on 192.168.1.198 port 22
- 8568 2024-05-04 11:36:09.190 debug1: Local version string SSH-2.0-OpenSSH_for_Windows_8.6
- 8568 2024-05-04 11:36:09.190 debug1: Remote protocol version 2.0, remote software version SSHJ_0.35.0
- 8568 2024-05-04 11:36:09.190 debug1: compat_banner: no match: SSHJ_0.35.0
- 8568 2024-05-04 11:36:09.190 debug2: fd 4 setting O_NONBLOCK
- 8568 2024-05-04 11:36:09.200 debug3: spawning "C:\\WINDOWS\\System32\\OpenSSH\\sshd.exe" -y as user
- 8568 2024-05-04 11:36:09.203 debug2: Network child is on pid 16284
- 8568 2024-05-04 11:36:09.204 debug3: send_rexec_state: entering fd = 6 config len 328
- 8568 2024-05-04 11:36:09.204 debug3: ssh_msg_send: type 0
- 8568 2024-05-04 11:36:09.204 debug3: send_rexec_state: done
- 8568 2024-05-04 11:36:09.204 debug3: ssh_msg_send: type 0
- 8568 2024-05-04 11:36:09.204 debug3: ssh_msg_send: type 0
- 8568 2024-05-04 11:36:09.204 debug3: preauth child monitor started
- 8568 2024-05-04 11:36:09.220 debug1: list_hostkey_types: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
- 8568 2024-05-04 11:36:09.220 debug3: send packet: type 20 [preauth]
- 8568 2024-05-04 11:36:09.220 debug1: SSH2_MSG_KEXINIT sent [preauth]
- 8568 2024-05-04 11:36:09.220 debug3: receive packet: type 20 [preauth]
- 8568 2024-05-04 11:36:09.220 debug1: SSH2_MSG_KEXINIT received [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: local server KEXINIT proposal [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256 [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: compression ctos: none,zlib@openssh.com [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: compression stoc: none,zlib@openssh.com [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: languages ctos: [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: languages stoc: [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: first_kex_follows 0 [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: reserved 0 [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: peer client KEXINIT proposal [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256@ssh.com,diffie-hellman-group15-sha256,diffie-hellman-group15-sha256@ssh.com,diffie-hellman-group15-sha384@ssh.com,diffie-hellman-group16-sha256,diffie-hellman-group16-sha384@ssh.com,diffie-hellman-group16-sha512@ssh.com,diffie-hellman-group18-sha512@ssh.com,ext-info-c [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp256,rsa-sha2-512,rsa-sha2-256,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-rsa,ssh-dss [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-cbc,aes128-ctr,aes192-cbc,aes192-ctr,aes256-cbc,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,blowfish-cbc,blowfish-ctr,cast128-cbc,cast128-ctr,idea-cbc,idea-ctr,serpent128-cbc,serpent128-ctr,serpent192-cbc,serpent192-ctr,serpent256-cbc,serpent256-ctr,3des-cbc,3des-ctr,twofish128-cbc,twofish128-ctr,twofish192-cbc,twofish192-ctr,twofish256-cbc,twofish256-ctr,twofish-cbc,arcfour,arcfour128,arcfour256 [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-cbc,aes128-ctr,aes192-cbc,aes192-ctr,aes256-cbc,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,blowfish-cbc,blowfish-ctr,cast128-cbc,cast128-ctr,idea-cbc,idea-ctr,serpent128-cbc,serpent128-ctr,serpent192-cbc,serpent192-ctr,serpent256-cbc,serpent256-ctr,3des-cbc,3des-ctr,twofish128-cbc,twofish128-ctr,twofish192-cbc,twofish192-ctr,twofish256-cbc,twofish256-ctr,twofish-cbc,arcfour,arcfour128,arcfour256 [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: MACs ctos: hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-sha1-96@openssh.com,hmac-md5,hmac-md5-etm@openssh.com,hmac-md5-96,hmac-md5-96-etm@openssh.com,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-ripemd160,hmac-ripemd160-etm@openssh.com,hmac-ripemd160-96,hmac-ripemd160@openssh.com [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: MACs stoc: hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-sha1-96@openssh.com,hmac-md5,hmac-md5-etm@openssh.com,hmac-md5-96,hmac-md5-96-etm@openssh.com,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-ripemd160,hmac-ripemd160-etm@openssh.com,hmac-ripemd160-96,hmac-ripemd160@openssh.com [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: compression ctos: none [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: compression stoc: none [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: languages ctos: [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: languages stoc: [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: first_kex_follows 0 [preauth]
- 8568 2024-05-04 11:36:09.220 debug2: reserved 0 [preauth]
- 8568 2024-05-04 11:36:09.220 debug1: kex: algorithm: curve25519-sha256 [preauth]
- 8568 2024-05-04 11:36:09.220 debug1: kex: host key algorithm: ssh-ed25519 [preauth]
- 8568 2024-05-04 11:36:09.220 debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
- 8568 2024-05-04 11:36:09.220 debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
- 8568 2024-05-04 11:36:09.220 debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
- 8568 2024-05-04 11:36:09.225 debug3: receive packet: type 30 [preauth]
- 8568 2024-05-04 11:36:09.225 debug1: SSH2_MSG_KEX_ECDH_INIT received [preauth]
- 8568 2024-05-04 11:36:09.227 debug3: mm_sshkey_sign: entering [preauth]
- 8568 2024-05-04 11:36:09.227 debug3: mm_request_send: entering, type 6 [preauth]
- 8568 2024-05-04 11:36:09.227 debug3: mm_sshkey_sign: waiting for MONITOR_ANS_SIGN [preauth]
- 8568 2024-05-04 11:36:09.227 debug3: mm_request_receive_expect: entering, type 7 [preauth]
- 8568 2024-05-04 11:36:09.227 debug3: mm_request_receive: entering [preauth]
- 8568 2024-05-04 11:36:09.227 debug3: mm_request_receive: entering
- 8568 2024-05-04 11:36:09.227 debug3: monitor_read: checking request 6
- 8568 2024-05-04 11:36:09.227 debug3: mm_answer_sign: entering
- 8568 2024-05-04 11:36:09.228 debug3: mm_answer_sign: KEX signature 0000019BF6848270(83)
- 8568 2024-05-04 11:36:09.228 debug3: mm_request_send: entering, type 7
- 8568 2024-05-04 11:36:09.228 debug2: monitor_read: 6 used once, disabling now
- 8568 2024-05-04 11:36:09.228 debug3: send packet: type 31 [preauth]
- 8568 2024-05-04 11:36:09.228 debug3: send packet: type 21 [preauth]
- 8568 2024-05-04 11:36:09.228 debug2: set_newkeys: mode 1 [preauth]
- 8568 2024-05-04 11:36:09.228 debug1: rekey out after 134217728 blocks [preauth]
- 8568 2024-05-04 11:36:09.228 debug1: SSH2_MSG_NEWKEYS sent [preauth]
- 8568 2024-05-04 11:36:09.228 debug1: Sending SSH2_MSG_EXT_INFO [preauth]
- 8568 2024-05-04 11:36:09.228 debug3: send packet: type 7 [preauth]
- 8568 2024-05-04 11:36:09.228 debug1: expecting SSH2_MSG_NEWKEYS [preauth]
- 8568 2024-05-04 11:36:09.244 debug3: receive packet: type 21 [preauth]
- 8568 2024-05-04 11:36:09.244 debug1: SSH2_MSG_NEWKEYS received [preauth]
- 8568 2024-05-04 11:36:09.244 debug2: set_newkeys: mode 0 [preauth]
- 8568 2024-05-04 11:36:09.244 debug1: rekey in after 134217728 blocks [preauth]
- 8568 2024-05-04 11:36:09.244 debug1: KEX done [preauth]
- 8568 2024-05-04 11:36:09.614 debug3: receive packet: type 5 [preauth]
- 8568 2024-05-04 11:36:09.614 debug3: send packet: type 6 [preauth]
- 8568 2024-05-04 11:36:09.620 debug3: receive packet: type 50 [preauth]
- 8568 2024-05-04 11:36:09.620 debug1: userauth-request for user cosimo service ssh-connection method publickey [preauth]
- 8568 2024-05-04 11:36:09.620 debug1: attempt 0 failures 0 [preauth]
- 8568 2024-05-04 11:36:09.620 debug3: mm_getpwnamallow: entering [preauth]
- 8568 2024-05-04 11:36:09.620 debug3: mm_request_send: entering, type 8 [preauth]
- 8568 2024-05-04 11:36:09.620 debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
- 8568 2024-05-04 11:36:09.620 debug3: mm_request_receive_expect: entering, type 9 [preauth]
- 8568 2024-05-04 11:36:09.620 debug3: mm_request_receive: entering [preauth]
- 8568 2024-05-04 11:36:09.621 debug3: mm_request_receive: entering
- 8568 2024-05-04 11:36:09.621 debug3: monitor_read: checking request 8
- 8568 2024-05-04 11:36:09.621 debug3: mm_answer_pwnamallow: entering
- 8568 2024-05-04 11:36:09.622 debug2: parse_server_config_depth: config reprocess config len 328
- 8568 2024-05-04 11:36:09.622 debug3: checking match for 'User cosimo' user cosimo host 192.168.1.102 addr 192.168.1.102 laddr 192.168.1.198 lport 22
- 8568 2024-05-04 11:36:09.622 debug1: user cosimo matched 'User cosimo' at line 84
- 8568 2024-05-04 11:36:09.622 debug3: match found
- 8568 2024-05-04 11:36:09.622 debug3: reprocess config:85 setting ChrootDirectory "C:\\Users\\lensa\\Biblioteca di calibre"
- 8568 2024-05-04 11:36:09.624 debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
- 8568 2024-05-04 11:36:09.624 debug3: mm_request_send: entering, type 9
- 8568 2024-05-04 11:36:09.624 debug2: monitor_read: 8 used once, disabling now
- 8568 2024-05-04 11:36:09.625 debug2: input_userauth_request: setting up authctxt for cosimo [preauth]
- 8568 2024-05-04 11:36:09.625 debug3: mm_inform_authserv: entering [preauth]
- 8568 2024-05-04 11:36:09.625 debug3: mm_request_send: entering, type 4 [preauth]
- 8568 2024-05-04 11:36:09.625 debug2: input_userauth_request: try method publickey [preauth]
- 8568 2024-05-04 11:36:09.625 debug2: userauth_pubkey: valid user cosimo querying public key rsa-sha2-512 AAAAB3NzaC1yc2EAAAADAQABAAABAQCXuPZAqDrer777f4c69qM+JvKQvevaIPZNCUy/sb5b9x2k9wL8vVgwNOFkGsYVOKJv75y+uCnjCJorUHCbPsYsx7pQW85Msy0cO2NLQKD7FljTmOLPbq//wpXae5OmFIhH1ynUkbpo5zcsM5aU/ltAKX/upaXa6ieXnFhiS/92xegQ0E/jw0tLxBVnO8DUc5Irg743YqH4NiFEgz91gn4KzY5nEyY4FsRRgTHyET+jiKVPVWn5j9vD/aToCmLvM6eywjHK8N2dAwVoJL7xjJkbtbZIbLVBZx1Zc+2YoTWr1+4kTTp3r5O3hJzUaytceCq6VW1c4CWfunGlzFU/kIeF [preauth]
- 8568 2024-05-04 11:36:09.625 debug1: userauth_pubkey: test pkalg rsa-sha2-512 pkblob RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk [preauth]
- 8568 2024-05-04 11:36:09.625 debug3: mm_key_allowed: entering [preauth]
- 8568 2024-05-04 11:36:09.625 debug3: mm_request_send: entering, type 22 [preauth]
- 8568 2024-05-04 11:36:09.625 debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED [preauth]
- 8568 2024-05-04 11:36:09.625 debug3: mm_request_receive_expect: entering, type 23 [preauth]
- 8568 2024-05-04 11:36:09.625 debug3: mm_request_receive: entering [preauth]
- 8568 2024-05-04 11:36:09.625 debug3: mm_request_receive: entering
- 8568 2024-05-04 11:36:09.625 debug3: monitor_read: checking request 4
- 8568 2024-05-04 11:36:09.625 debug3: mm_answer_authserv: service=ssh-connection, style=
- 8568 2024-05-04 11:36:09.625 debug2: monitor_read: 4 used once, disabling now
- 8568 2024-05-04 11:36:09.625 debug3: mm_request_receive: entering
- 8568 2024-05-04 11:36:09.625 debug3: monitor_read: checking request 22
- 8568 2024-05-04 11:36:09.625 debug3: mm_answer_keyallowed: entering
- 8568 2024-05-04 11:36:09.625 debug3: mm_answer_keyallowed: key_from_blob: 0000019BF68AB360
- 8568 2024-05-04 11:36:09.625 debug1: trying public key file C:\\Users\\lensa\\.ssh\\authorized_keys
- 8568 2024-05-04 11:36:09.626 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: matching key found: RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk
- 8568 2024-05-04 11:36:09.626 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
- 8568 2024-05-04 11:36:09.626 Accepted key RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk found at C:\\Users\\lensa\\.ssh\\authorized_keys:2
- 8568 2024-05-04 11:36:09.626 debug3: mm_answer_keyallowed: publickey authentication test: RSA key is allowed
- 8568 2024-05-04 11:36:09.626 debug3: mm_request_send: entering, type 23
- 8568 2024-05-04 11:36:09.626 debug3: send packet: type 60 [preauth]
- 8568 2024-05-04 11:36:09.626 debug2: userauth_pubkey: authenticated 0 pkalg rsa-sha2-512 [preauth]
- 8568 2024-05-04 11:36:09.626 debug3: user_specific_delay: user specific delay 0.000ms [preauth]
- 8568 2024-05-04 11:36:09.626 debug3: ensure_minimum_time_since: elapsed 5.792ms, delaying 2.506ms (requested 8.298ms) [preauth]
- 8568 2024-05-04 11:36:09.639 Postponed publickey for cosimo from 192.168.1.102 port 34298 ssh2 [preauth]
- 8568 2024-05-04 11:36:09.943 debug3: receive packet: type 50 [preauth]
- 8568 2024-05-04 11:36:09.943 debug1: userauth-request for user cosimo service ssh-connection method publickey [preauth]
- 8568 2024-05-04 11:36:09.943 debug1: attempt 1 failures 0 [preauth]
- 8568 2024-05-04 11:36:09.943 debug2: input_userauth_request: try method publickey [preauth]
- 8568 2024-05-04 11:36:09.944 debug2: userauth_pubkey: valid user cosimo attempting public key rsa-sha2-512 AAAAB3NzaC1yc2EAAAADAQABAAABAQCXuPZAqDrer777f4c69qM+JvKQvevaIPZNCUy/sb5b9x2k9wL8vVgwNOFkGsYVOKJv75y+uCnjCJorUHCbPsYsx7pQW85Msy0cO2NLQKD7FljTmOLPbq//wpXae5OmFIhH1ynUkbpo5zcsM5aU/ltAKX/upaXa6ieXnFhiS/92xegQ0E/jw0tLxBVnO8DUc5Irg743YqH4NiFEgz91gn4KzY5nEyY4FsRRgTHyET+jiKVPVWn5j9vD/aToCmLvM6eywjHK8N2dAwVoJL7xjJkbtbZIbLVBZx1Zc+2YoTWr1+4kTTp3r5O3hJzUaytceCq6VW1c4CWfunGlzFU/kIeF [preauth]
- 8568 2024-05-04 11:36:09.944 debug3: userauth_pubkey: have rsa-sha2-512 signature for RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk [preauth]
- 8568 2024-05-04 11:36:09.944 debug3: mm_key_allowed: entering [preauth]
- 8568 2024-05-04 11:36:09.944 debug3: mm_request_send: entering, type 22 [preauth]
- 8568 2024-05-04 11:36:09.944 debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED [preauth]
- 8568 2024-05-04 11:36:09.944 debug3: mm_request_receive_expect: entering, type 23 [preauth]
- 8568 2024-05-04 11:36:09.944 debug3: mm_request_receive: entering [preauth]
- 8568 2024-05-04 11:36:09.944 debug3: mm_request_receive: entering
- 8568 2024-05-04 11:36:09.944 debug3: monitor_read: checking request 22
- 8568 2024-05-04 11:36:09.944 debug3: mm_answer_keyallowed: entering
- 8568 2024-05-04 11:36:09.944 debug3: mm_answer_keyallowed: key_from_blob: 0000019BF68B25C0
- 8568 2024-05-04 11:36:09.944 debug1: trying public key file C:\\Users\\lensa\\.ssh\\authorized_keys
- 8568 2024-05-04 11:36:09.944 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: matching key found: RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk
- 8568 2024-05-04 11:36:09.944 debug1: C:\\Users\\lensa\\.ssh\\authorized_keys:2: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
- 8568 2024-05-04 11:36:09.944 Accepted key RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk found at C:\\Users\\lensa\\.ssh\\authorized_keys:2
- 8568 2024-05-04 11:36:09.944 debug3: mm_answer_keyallowed: publickey authentication: RSA key is allowed
- 8568 2024-05-04 11:36:09.944 debug3: mm_request_send: entering, type 23
- 8568 2024-05-04 11:36:09.944 debug3: mm_sshkey_verify: entering [preauth]
- 8568 2024-05-04 11:36:09.944 debug3: mm_request_send: entering, type 24 [preauth]
- 8568 2024-05-04 11:36:09.944 debug3: mm_sshkey_verify: waiting for MONITOR_ANS_KEYVERIFY [preauth]
- 8568 2024-05-04 11:36:09.944 debug3: mm_request_receive_expect: entering, type 25 [preauth]
- 8568 2024-05-04 11:36:09.944 debug3: mm_request_receive: entering [preauth]
- 8568 2024-05-04 11:36:09.944 debug3: mm_request_receive: entering
- 8568 2024-05-04 11:36:09.944 debug3: monitor_read: checking request 24
- 8568 2024-05-04 11:36:09.945 debug3: mm_answer_keyverify: publickey 0000019BF68AB360 signature verified
- 8568 2024-05-04 11:36:09.945 debug1: auth_activate_options: setting new authentication options
- 8568 2024-05-04 11:36:09.945 debug3: mm_request_send: entering, type 25
- 8568 2024-05-04 11:36:09.945 Accepted publickey for cosimo from 192.168.1.102 port 34298 ssh2: RSA SHA256:m3rlmzSZmiOB9VyWxcK4R12w6GiSLgDYRYmKByKGzmk
- 8568 2024-05-04 11:36:09.945 debug1: monitor_child_preauth: user cosimo authenticated by privileged process
- 8568 2024-05-04 11:36:09.945 debug3: mm_get_keystate: Waiting for new keys
- 8568 2024-05-04 11:36:09.945 debug3: mm_request_receive_expect: entering, type 26
- 8568 2024-05-04 11:36:09.945 debug3: mm_request_receive: entering
- 8568 2024-05-04 11:36:09.952 debug3: mm_get_keystate: GOT new keys
- 8568 2024-05-04 11:36:09.952 debug1: auth_activate_options: setting new authentication options [preauth]
- 8568 2024-05-04 11:36:09.952 debug2: userauth_pubkey: authenticated 1 pkalg rsa-sha2-512 [preauth]
- 8568 2024-05-04 11:36:09.952 debug3: user_specific_delay: user specific delay 0.000ms [preauth]
- 8568 2024-05-04 11:36:09.952 debug3: ensure_minimum_time_since: elapsed 2.003ms, delaying 6.295ms (requested 8.298ms) [preauth]
- 8568 2024-05-04 11:36:09.952 debug3: send packet: type 52 [preauth]
- 8568 2024-05-04 11:36:09.952 debug3: mm_request_send: entering, type 26 [preauth]
- 8568 2024-05-04 11:36:09.952 debug3: mm_send_keystate: Finished sending state [preauth]
- 8568 2024-05-04 11:36:09.954 debug1: monitor_read_log: child log fd closed
- 8568 2024-05-04 11:36:09.956 debug3: LsaLogonUser Succeeded (Impersonation: 1)
- 8568 2024-05-04 11:36:09.959 debug3: spawning "C:\\WINDOWS\\System32\\OpenSSH\\sshd.exe" -z as user
- 8568 2024-05-04 11:36:09.962 User child is on pid 15028
- 8568 2024-05-04 11:36:09.962 debug3: send_rexec_state: entering fd = 5 config len 328
- 8568 2024-05-04 11:36:09.962 debug3: ssh_msg_send: type 0
- 8568 2024-05-04 11:36:09.962 debug3: send_rexec_state: done
- 8568 2024-05-04 11:36:09.962 debug3: ssh_msg_send: type 0
- 8568 2024-05-04 11:36:09.962 debug3: ssh_msg_send: type 0
- 8568 2024-05-04 11:36:09.962 debug3: ssh_msg_send: type 0
- 8568 2024-05-04 11:36:09.962 debug3: ssh_msg_send: type 0
- 8568 2024-05-04 11:36:09.962 debug3: ssh_msg_send: type 0
- 15028 2024-05-04 11:36:09.975 debug3: recv_idexch_state: entering fd = 3
- 15028 2024-05-04 11:36:09.975 debug3: ssh_msg_recv entering
- 15028 2024-05-04 11:36:09.975 debug3: recv_idexch_state: done
- 15028 2024-05-04 11:36:09.976 debug2: fd 5 setting O_NONBLOCK
- 15028 2024-05-04 11:36:09.976 debug3: recv_autxctx_state: entering fd = 3
- 15028 2024-05-04 11:36:09.976 debug3: ssh_msg_recv entering
- 15028 2024-05-04 11:36:09.976 debug3: recv_autxctx_state: done
- 15028 2024-05-04 11:36:09.976 debug2: parse_server_config_depth: config reprocess config len 328
- 15028 2024-05-04 11:36:09.976 debug3: checking match for 'User cosimo' user cosimo host 192.168.1.102 addr 192.168.1.102 laddr 192.168.1.198 lport 22
- 15028 2024-05-04 11:36:09.976 debug1: user cosimo matched 'User cosimo' at line 84
- 15028 2024-05-04 11:36:09.976 debug3: match found
- 15028 2024-05-04 11:36:09.976 debug3: reprocess config:85 setting ChrootDirectory "C:\\Users\\lensa\\Biblioteca di calibre"
- 8568 2024-05-04 11:36:09.977 debug3: monitor_recv_keystate: entering
- 8568 2024-05-04 11:36:09.977 debug3: ssh_msg_recv entering
- 8568 2024-05-04 11:36:09.977 debug3: monitor_recv_keystate: done
- 8568 2024-05-04 11:36:09.977 Changed root directory to "C:\\\\Users\\\\lensa\\\\Biblioteca di calibre"
- 8568 2024-05-04 11:36:09.977 debug3: monitor_apply_keystate: packet_set_state
- 8568 2024-05-04 11:36:09.977 debug2: set_newkeys: mode 0
- 8568 2024-05-04 11:36:09.977 debug1: rekey in after 134217728 blocks
- 8568 2024-05-04 11:36:09.977 debug2: set_newkeys: mode 1
- 8568 2024-05-04 11:36:09.978 debug1: rekey out after 134217728 blocks
- 8568 2024-05-04 11:36:09.978 debug1: ssh_packet_set_postauth: called
- 8568 2024-05-04 11:36:09.978 debug3: ssh_packet_set_state: done
- 8568 2024-05-04 11:36:09.978 debug3: monitor_recv_authopt: entering
- 8568 2024-05-04 11:36:09.978 debug3: ssh_msg_recv entering
- 8568 2024-05-04 11:36:09.978 debug3: monitor_recv_authopt: done
- 8568 2024-05-04 11:36:09.978 debug3: notify_hostkeys: key 0: ssh-rsa SHA256:j67qDD90vBWtDSnI5gz/F1On6CBndnQOw9LWZhJu55s
- 8568 2024-05-04 11:36:09.978 debug3: notify_hostkeys: key 1: ecdsa-sha2-nistp256 SHA256:tVGN8rbbxxjENP8vlvidAWBUx7wDSjVr7LaNQ29x20U
- 8568 2024-05-04 11:36:09.978 debug3: notify_hostkeys: key 2: ssh-ed25519 SHA256:/29ogfSeqi44k+C54DdRnpt99nc2diLV1TMWdXCc/RQ
- 8568 2024-05-04 11:36:09.978 debug3: notify_hostkeys: sent 3 hostkeys
- 8568 2024-05-04 11:36:09.978 debug3: send packet: type 80
- 8568 2024-05-04 11:36:09.978 debug1: active: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
- 8568 2024-05-04 11:36:09.978 debug1: Entering interactive session for SSH2.
- 8568 2024-05-04 11:36:09.978 debug2: fd 8 setting O_NONBLOCK
- 8568 2024-05-04 11:36:09.978 debug2: fd 9 setting O_NONBLOCK
- 8568 2024-05-04 11:36:09.978 debug1: server_init_dispatch
- 8568 2024-05-04 11:36:09.978 debug3: receive packet: type 90
- 8568 2024-05-04 11:36:09.978 debug1: server_input_channel_open: ctype session rchan 0 win 2097152 max 32768
- 8568 2024-05-04 11:36:09.978 debug1: input_session_request
- 8568 2024-05-04 11:36:09.978 debug1: channel 0: new [server-session]
- 8568 2024-05-04 11:36:09.978 debug2: session_new: allocate (allocated 0 max 10)
- 8568 2024-05-04 11:36:09.978 debug3: session_unused: session id 0 unused
- 8568 2024-05-04 11:36:09.978 debug1: session_new: session 0
- 8568 2024-05-04 11:36:09.978 debug1: session_open: channel 0
- 8568 2024-05-04 11:36:09.978 debug1: session_open: session 0: link with channel 0
- 8568 2024-05-04 11:36:09.978 debug1: server_input_channel_open: confirm session
- 8568 2024-05-04 11:36:09.978 debug3: send packet: type 91
- 8568 2024-05-04 11:36:10.029 debug3: receive packet: type 98
- 8568 2024-05-04 11:36:10.029 debug1: server_input_channel_req: channel 0 request subsystem reply 1
- 8568 2024-05-04 11:36:10.029 debug1: session_by_channel: session 0 channel 0
- 8568 2024-05-04 11:36:10.029 debug1: session_input_channel_req: session 0 req subsystem
- 8568 2024-05-04 11:36:10.029 debug2: subsystem request for sftp by user cosimo
- 8568 2024-05-04 11:36:10.029 debug1: subsystem: cannot stat sftp-server.exe: No such file or directory
- 8568 2024-05-04 11:36:10.029 debug1: subsystem: exec() sftp-server.exe
- 8568 2024-05-04 11:36:10.029 Starting session: subsystem 'sftp' for cosimo from 192.168.1.102 port 34298 id 0
- 8568 2024-05-04 11:36:10.029 debug2: fd 10 setting O_NONBLOCK
- 8568 2024-05-04 11:36:10.029 debug2: fd 11 setting O_NONBLOCK
- 8568 2024-05-04 11:36:10.030 debug2: fd 12 setting O_NONBLOCK
- 8568 2024-05-04 11:36:10.030 debug2: fd 13 setting O_NONBLOCK
- 8568 2024-05-04 11:36:10.030 debug2: fd 14 setting O_NONBLOCK
- 8568 2024-05-04 11:36:10.030 debug2: fd 15 setting O_NONBLOCK
- 8568 2024-05-04 11:36:10.030 debug3: shell: "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe"
- 8568 2024-05-04 11:36:10.030 debug3: shell_option: -c
- 8568 2024-05-04 11:36:10.030 debug3: exec_command: sftp-server.exe
- 8568 2024-05-04 11:36:10.030 debug3: arg escape option: TRUE
- 8568 2024-05-04 11:36:10.030 debug3: spawn_argv[0]: "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe"
- 8568 2024-05-04 11:36:10.030 debug3: spawning "c:\\\\windows\\\\system32\\\\windowspowershell\\\\v1.0\\\\powershell.exe" -c sftp-server.exe as subprocess
- 8568 2024-05-04 11:36:10.037 debug2: fd 5 setting TCP_NODELAY
- 8568 2024-05-04 11:36:10.037 debug3: fd 12 is O_NONBLOCK
- 8568 2024-05-04 11:36:10.037 debug3: fd 11 is O_NONBLOCK
- 8568 2024-05-04 11:36:10.038 debug3: fd 14 is O_NONBLOCK
- 8568 2024-05-04 11:36:10.038 debug3: send packet: type 99
- 8568 2024-05-04 11:36:10.497 debug3: receive packet: type 97
- 8568 2024-05-04 11:36:10.497 debug2: channel 0: rcvd close
- 8568 2024-05-04 11:36:10.497 debug2: channel 0: output open -> drain
- 8568 2024-05-04 11:36:10.497 debug2: chan_shutdown_read: channel 0: (i0 o1 sock -1 wfd 12 efd 14 [ignore])
- 8568 2024-05-04 11:36:10.497 debug1: chan_shutdown_extended_read: channel 0: (i0 o1 sock -1 wfd -1 efd 14 [ignore])
- 8568 2024-05-04 11:36:10.497 debug2: channel 0: input open -> closed
- 8568 2024-05-04 11:36:10.497 debug3: channel 0: will not send data after close
- 8568 2024-05-04 11:36:10.497 debug2: channel 0: obuf empty
- 8568 2024-05-04 11:36:10.497 debug2: chan_shutdown_write: channel 0: (i3 o1 sock -1 wfd 11 efd -1 [closed])
- 8568 2024-05-04 11:36:10.497 debug2: channel 0: output drain -> closed
- 8568 2024-05-04 11:36:10.497 debug2: channel 0: almost dead
- 8568 2024-05-04 11:36:10.497 debug2: channel 0: gc: notify user
- 8568 2024-05-04 11:36:10.497 debug1: session_by_channel: session 0 channel 0
- 8568 2024-05-04 11:36:10.497 debug1: session_close_by_channel: channel 0 child 10624
- 8568 2024-05-04 11:36:10.497 debug1: session_close_by_channel: channel 0: has child, ttyfd -1
- 8568 2024-05-04 11:36:10.514 debug1: Received SIGCHLD.
- 8568 2024-05-04 11:36:10.514 debug1: session_by_pid: pid 10624
- 8568 2024-05-04 11:36:10.514 debug1: session_exit_message: session 0 channel 0 pid 10624
- 8568 2024-05-04 11:36:10.514 debug2: channel 0: request exit-status confirm 0
- 8568 2024-05-04 11:36:10.514 debug3: send packet: type 98
- 8568 2024-05-04 11:36:10.514 debug1: session_exit_message: release channel 0
- 8568 2024-05-04 11:36:10.514 debug2: channel 0: send close
- 8568 2024-05-04 11:36:10.514 debug3: send packet: type 97
- 8568 2024-05-04 11:36:10.514 debug2: channel 0: is dead
- 8568 2024-05-04 11:36:10.514 debug2: channel 0: gc: notify user
- 8568 2024-05-04 11:36:10.514 debug1: session_by_channel: session 0 channel 0
- 8568 2024-05-04 11:36:10.514 debug1: session_close_by_channel: channel 0 child 0
- 8568 2024-05-04 11:36:10.514 Close session: user cosimo from 192.168.1.102 port 34298 id 0
- 8568 2024-05-04 11:36:10.514 debug3: session_unused: session id 0 unused
- 8568 2024-05-04 11:36:10.514 debug2: channel 0: gc: user detached
- 8568 2024-05-04 11:36:10.514 debug2: channel 0: is dead
- 8568 2024-05-04 11:36:10.514 debug2: channel 0: garbage collecting
- 8568 2024-05-04 11:36:10.514 debug1: channel 0: free: server-session, nchannels 1
- 8568 2024-05-04 11:36:10.514 debug3: channel 0: status: The following connections are open:\\r\\n #0 server-session (t4 r0 i3/0 o3/0 e[closed]/0 fd -1/-1/-1 sock -1 cc -1)\\r\\n
- 8568 2024-05-04 11:36:10.514 debug2: notify_done: reading
- 8568 2024-05-04 11:36:10.520 debug3: receive packet: type 1
- 8568 2024-05-04 11:36:10.520 Received disconnect from 192.168.1.102 port 34298:11:
- 8568 2024-05-04 11:36:10.520 Disconnected from 192.168.1.102 port 34298
- 8568 2024-05-04 11:36:10.520 debug1: do_cleanup
- 8568 2024-05-04 11:36:10.522 debug3: mm_request_receive: entering
Add Comment
Please, Sign In to add comment