diff --git a/modules/journalwatch.nix b/modules/journalwatch.nix
index 4db875d..d1afbb1 100644
--- a/modules/journalwatch.nix
+++ b/modules/journalwatch.nix
@@ -324,6 +324,7 @@
           error: kex_exchange_identification: Connection closed by remote host
           error: kex_exchange_identification: read: Connection reset by peer
           error: PAM: Authentication failure for \S+ from \S+
+          error: Protocol major versions differ: 2 vs\. 1
           fatal: Timeout before authentication for \S+ port [0-9]+
         '';
         match = "SYSLOG_IDENTIFIER = sshd";