Is it possible for someone to establish an SSH session but the bro log not to show “auth_success” as true. Thanks Tim -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160317/2514e98c/attachment.html