cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
940
Views
5
Helpful
1
Replies

Expresway-C and -E Event logs problem

Skeep747
Level 1
Level 1

Cisco Jabber work fine, but in the Event log on Expressway-E and -C every five second i have this warning:

vcs-e

Received disconnect from xxx.xxx.xxx.xxx: 11: disconnected by user
Event="sshd" Module="openssh" Level="INFO" Detail="User child is on pid 32043" UTCTime="2014-10-10 08:06:50"
Event="sshd" Module="openssh" Level="INFO" Detail="Accepted publickey for pfwd from xxx.xxx.xxx.xxx port 12209 ssh2: RSA+cert 8e:20:23:4d:5e:07:b9:89:84:3e:6c:10:58:66:47:cb"
Event="sshd" Module="openssh" Level="INFO" Detail="Authorized by X509(rsa) : CN=vcsc.domain.com ...
Event="sshd" Module="openssh" Level="INFO" Detail="Connection from xxx.xxx.xxx.xxx port 12209 on xxx.xxx.xxx.xxx port 2222"

vcs-c

Event="sshd" Module="openssh" Level="INFO" Detail="Bytes per second: sent 64953.8, received 39595.1"
Event="sshd" Module="openssh" Level="INFO" Detail="Transferred: sent 4672, received 2848 bytes, in 0.1 seconds"
Event="sshd" Module="openssh" Level="INFO" Detail="Authenticated to vcse.domain.com ([xxx.xxx.xxx.xxx]:2222)."
Event="sshd" Module="openssh" Level="INFO" Detail="RSA+cert host key for IP address 'xxx.xxx.xxx.xxx not in list of known hosts."
Event="sshd" Module="openssh" Level="INFO" Detail="Allocated port 35525 for remote forward to localhost:8443"

 

This problem was discussed on this padge: https://supportforums.cisco.com/t5/jabber-clients/cucm-10-5-and-expressway-8-2-how-can-i-join-rsa-cert-host-key/td-p/2544871, but i can't undertand what helped the author of this appeal?

1 Reply 1

Hi @Skeep747,

 please take a look at the following bug: CSCut14424 (Excessive logging of "disconnected by user").

 

Hope this helps,

 Marcelo Morais