On sshd.c 2042 -->ssh_packet_close(ssh); on line 2402 .. gabage because it has been messed up earlier by,, 2383 ������������������������������������/* The connection has been terminated. */ 2384 ������������������������������������packet_destroy_all(ssh, 1, 1); 2385 ������������������������������������destroy_sensitive_data(ssh, 1); where packet_destroy_all invokes packet_destroy_state which cipher_free's first ... this is a bug in the audit patch. That's the anaylsis I could afford doing on my limited time to deal with this annoying crash.