SMF Type 119 records for OpenSSH

This topic describes the SMF Type 119 records collected for OpenSSH servers and clients.

Common SMF Type 119 record format
SMF 119 record subtypes for OpenSSH
Standard data format concepts
Common TCP/IP identification section for OpenSSH
Common security section for OpenSSH
Common login / failure section (subtype 94, 95, 98)
Client connection started (subtype 94)
Server connection started (subtype 95)
Server transfer completion record (subtype 96)
Client transfer completion record (subtype 97)
Server login failure (subtype 98)