I have an additional data point: the ssh daemon does not actually crash, it just stops responding for a few minutes. The connection was left intact during today's experiment, but no input was processed. It looks like a frozen connection, but it did come back into an active state eventually.
Here is the auth.log tail. I usually have resolved the problem by going to webmin and restarting the ssh daemon, but today I was slower to initiate that webmin login, when I noticed the SSH connection was actively accepting input again:
Nov 6 18:08:02 server1 sudo: myuser : TTY=pts/0 ; PWD=/home/myuser ; USER=root ; COMMAND=/usr/bin/aptitude upgrade
Nov 6 18:10:02 server1 sshd[20626]: Received disconnect from XXX.XXX.XXX.XXX: 11: disconnected by user
Nov 6 18:10:02 server1 sshd[20610]: pam_unix(sshd:session): session closed for user myuser
Nov 6 18:10:18 server1 sudo: myuser : TTY=pts/0 ; PWD=/home/myuser ; USER=root ; COMMAND=/bin/ps ax
Nov 6 18:10:26 server1 sudo: myuser : TTY=pts/0 ; PWD=/home/myuser ; USER=root ; COMMAND=/bin/kill -9 1354
Nov 6 18:15:08 server1 perl[21100]: pam_unix(webmin:session): session opened for user myuser by (uid=0)
Nov 6 18:15:08 server1 sudo: myuser : TTY=pts/1 ; PWD=/usr/share/webmin ; USER=root ; COMMAND=list
Nov 6 18:15:08 server1 webmin[21100]: Successful login as myuser from XXX.XXX.XXX.XXX
Nov 6 18:15:42 server1 sudo: myuser : TTY=pts/0 ; PWD=/home/myuser@ ; USER=root ; COMMAND=/bin/ps ax
Nov 6 18:17:01 server1 CRON[21239]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 6 18:17:01 server1 CRON[21239]: pam_unix(cron:session): session closed for user root
I have an additional data point: the ssh daemon does not actually crash, it just stops responding for a few minutes. The connection was left intact during today's experiment, but no input was processed. It looks like a frozen connection, but it did come back into an active state eventually.
Here is the auth.log tail. I usually have resolved the problem by going to webmin and restarting the ssh daemon, but today I was slower to initiate that webmin login, when I noticed the SSH connection was actively accepting input again:
Nov 6 18:08:02 server1 sudo: myuser : TTY=pts/0 ; PWD=/home/myuser ; USER=root ; COMMAND= /usr/bin/ aptitude upgrade sshd:session) : session closed for user myuser webmin: session) : session opened for user myuser by (uid=0) share/webmin ; USER=root ; COMMAND=list cron:session) : session opened for user root by (uid=0) cron:session) : session closed for user root
Nov 6 18:10:02 server1 sshd[20626]: Received disconnect from XXX.XXX.XXX.XXX: 11: disconnected by user
Nov 6 18:10:02 server1 sshd[20610]: pam_unix(
Nov 6 18:10:18 server1 sudo: myuser : TTY=pts/0 ; PWD=/home/myuser ; USER=root ; COMMAND=/bin/ps ax
Nov 6 18:10:26 server1 sudo: myuser : TTY=pts/0 ; PWD=/home/myuser ; USER=root ; COMMAND=/bin/kill -9 1354
Nov 6 18:15:08 server1 perl[21100]: pam_unix(
Nov 6 18:15:08 server1 sudo: myuser : TTY=pts/1 ; PWD=/usr/
Nov 6 18:15:08 server1 webmin[21100]: Successful login as myuser from XXX.XXX.XXX.XXX
Nov 6 18:15:42 server1 sudo: myuser : TTY=pts/0 ; PWD=/home/myuser@ ; USER=root ; COMMAND=/bin/ps ax
Nov 6 18:17:01 server1 CRON[21239]: pam_unix(
Nov 6 18:17:01 server1 CRON[21239]: pam_unix(
This test is still with the Windows 2003 VM, BTW.