```
Another discovery:
exec-Sessions (message 98 with data = exec) do not get logged. Only
pty-sessions (message 98 with data = pty-req).
Also, message 98 with data = exec should directly logged to…
```
What steps will reproduce the problem?
1. The attacker has found the login to the honeypot
2. The attacker executes a series of commands while logging in (i've seen more
and more of this behavio…