@mas wrote:
My suggestion for a format to log these failed attempt would therefore be something like:
Apr 21 02:39:05 schnecke mt-daapd[3453]: Failed password for user admin from 208.70.255.64 port 3689 mt-daapd
Erp… probably so. 🙂
Should be logging successful ones, and I dropped the pw in there so I could see if it was doing first or second pass authentication, and then left it in there. D’oh.