113 reputation
3
bio website brcooley.github.com
location Virginia
age
visits member for 1 year, 2 months
seen May 22 '12 at 16:21
stats profile views 4

Mar
19
awarded  Scholar
Mar
19
comment How can I tell if sshd is running with ClientAliveInterval > 0?
I might be wrong, but the TCP-keepalive packets wouldn't have encrypted payloads? The ones I was seeing were, so I assumed it was SSH.
Mar
19
accepted How can I tell if sshd is running with ClientAliveInterval > 0?
Mar
18
comment How can I tell if sshd is running with ClientAliveInterval > 0?
I feel like just looking for process death could be problematic, as if you won't really be able to tell the difference between sshd just dying (CAI == 0) and a small ClientAliveInterval. However, the tcpdump tip worked pretty well, as of 4.1.1 it didn't seem to decode ssh-keepalive, but the regular pulse of packets every 30 seconds pretty well answered my question.
Mar
18
awarded  Supporter
Mar
17
awarded  Student
Mar
17
asked How can I tell if sshd is running with ClientAliveInterval > 0?