We have cisco router and after checking the log I saw this message:
pam_aaa:authentication failed from <ipaddress> -sshd[2909]
pam_aaa:authentication failed from <ipaddress> -sshd[2913]
pam_aaa:authentication failed from <ipaddress> -sshd[3158]
I wanted to validate that number inside the [] brackets are the source port number? Any reference or direction to a Cisco documentation of the message is much appreciated.
Alex
