Index: /trunk/host/debian/scripts-syslog-ng-config/d_zroot.pl
===================================================================
--- /trunk/host/debian/scripts-syslog-ng-config/d_zroot.pl	(revision 2094)
+++ /trunk/host/debian/scripts-syslog-ng-config/d_zroot.pl	(revision 2095)
@@ -120,4 +120,5 @@
 	} elsif ($message =~ m|^ *root : TTY=|) {
 	} elsif ($message =~ m|^Set /proc/self/oom_adj to |) {
+	} elsif ($message =~ m|^fatal: mm_request_receive: read: Connection reset by peer$|) {
 	} else {
 	    sendmsg($message, "scripts-spew");
Index: /trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl
===================================================================
--- /trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl	(revision 2094)
+++ /trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl	(revision 2095)
@@ -122,4 +122,5 @@
 	} elsif ($message =~ m|^error: PAM: Authentication failure|) {
 	} elsif ($message =~ m|^pam_unix\(sshd:auth\): authentication failure|) {
+	} elsif ($message =~ m|^pam_unix\(sshd:auth\): check pass; user unknown|) {
 	} elsif ($message =~ m|^Postponed keyboard-interactive for invalid user |) {
 	} elsif ($message =~ m|^Failed keyboard-interactive/pam for invalid user |) {