login about faq

Why to I get this error in my Event log?

Log Name:      Application
Source:        SSH Tectia Server
Date:          4/23/2009 9:57:33 AM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic,Audit Failure
User:          N/A
Computer:      SSHSERVER
Description:
401 Connection_denied, Error: Protocol error, Src IP: X.X.X.X, Dst IFace: default, Dst IP: Y.Y.Y.Y, Src Port: 59957, 
Dst Port: 22, "Version exchange failed: Error while writing our version string."
...

asked Dec 17 '10 at 11:35

SSH%20KB's gravatar image

SSH KB ♦
509249246237


A protocol error may occur during a connection indicating a version exchange failed. This is most likely due to a client not providing its version string as part of the initial connection phase.

You might experience the following protocol error, as obtained from Windows Event Viewer, during a connection: "Version exchange failed: Error while writing our version string."

Log Name:      Application
Source:        SSH Tectia Server
Date:          4/23/2009 9:57:33 AM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic,Audit Failure
User:          N/A
Computer:      SSHSERVER
Description:
401 Connection_denied, Error: Protocol error, Src IP: X.X.X.X, Dst IFace: default, Dst IP: Y.Y.Y.Y, Src Port: 59957, 
Dst Port: 22, "Version exchange failed: Error while writing our version string."
...

This might occur as a result of a possible incompatibility in the client connection, where the client does not send its version string to the SSH Tectia Server.

Scanning software usually produces this type of behavior, when its purpose is to determine if an SSH server is listening on a particular port.

It's also possible to disable logging of this message by configuring the logging parameters in the server and setting the "401 Connection_denied" to discard. See here for more info about configuring server logging on windows.

link

answered Dec 17 '10 at 11:37

SSH%20KB's gravatar image

SSH KB ♦
509249246237

edited Jan 12 '11 at 19:49

Roman's gravatar image

Roman ♦♦
7735817

Any way to disable the error since the error does not really cause any problem?

link

answered Jan 12 '11 at 09:27

anhui's gravatar image

anhui
1

I updated the answer to include instructions on how to disable auditing of this message.

(Jan 12 '11 at 19:49) Roman ♦♦ Roman's gravatar image
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or __italic__
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×14
×4

Asked: Dec 17 '10 at 11:35

Seen: 18,387 times

Last updated: Jan 12 '11 at 19:49

All user contributed content licensed under the cc-by-sa license.
Powered by OSQA.