Date: Wed, 09 Mar 2005 10:24:54 GMT From: Mark <admin@asarian-host.net> To: "'FreeBSD-Questions Questions'" <freebsd-questions@freebsd.org> Subject: Auth.log date issue? Message-ID: <200503091024.j29AOsEp004882@asarian-host.net>
next in thread | raw e-mail | index | archive | help
Running FreeBSD 4.10, today I saw this in my log: asarian-host.net login failures: Mar 8 22:11:20 asarian-host sshd[32810]: Failed password for asarian from 192.168.0.8 port 3535 ssh2 Mar 8 22:11:36 asarian-host sshd[32812]: Failed password for asarian from 192.168.0.8 port 3536 ssh2 Mar 8 22:11:39 asarian-host sshd[32814]: Failed password for asarian from 192.168.0.8 port 3537 ssh2 Which is curious, as the IP address no longer has a machine on it. Then I checked, and after a while I suddenly noticed /var/log/auth.log was dated March 8, 2004! Apparently, the security script just checks the date, but not the year? Is it supposed to work this way? It gave me a good scare, all for nothing. :) Thanks, - Mark
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200503091024.j29AOsEp004882>