last bits of old packet API / active_state global
diff --git a/monitor.c b/monitor.c
index 5fa30b2..a9546da 100644
--- a/monitor.c
+++ b/monitor.c
@@ -1628,7 +1628,7 @@
 	case SSH_LOGIN_ROOT_DENIED:
 	case SSH_CONNECTION_CLOSE:
 	case SSH_INVALID_USER:
-		audit_event(event);
+		audit_event(ssh, event);
 		break;
 	default:
 		fatal("Audit event type %d not permitted", event);