Date: Sat, 15 Nov 2008 09:19:05 +0100 (CET) From: Wojciech Puchar <wojtek@wojtek.tensor.gdynia.pl> To: Jeremy Chadwick <koitsu@freebsd.org> Cc: freebsd-questions@freebsd.org, Lisa Casey <lisa@mail.jellico.com> Subject: Re: Question about entry in auth.log Message-ID: <20081115091830.X19924@wojtek.tensor.gdynia.pl> In-Reply-To: <20081115081723.GA66941@icarus.home.lan> References: <B8B09B39A8884900970CF2434D40F6C4@CaseyHome> <BAY122-DAV1214B45821956EB1D7B782BA110@phx.gbl> <692726B5-52B5-46AC-9C79-41553179AF36@comcast.net> <20081114215444.C8966@mail.jellico.com> <20081115073714.GA66093@icarus.home.lan> <20081115081723.GA66941@icarus.home.lan>
next in thread | previous in thread | raw e-mail | index | archive | help
> > Also keep in mind that the user may not have actually logged in and > gotten a shell; the message you see can also happen if the individual > simply scp'd something (e.g. no shell spawned). but this case there are other messages about scp, not sure if in auth.log or others. i use single file for logs /var/log/messages. > > -- > | Jeremy Chadwick jdc at parodius.com | > | Parodius Networking http://www.parodius.com/ | > | UNIX Systems Administrator Mountain View, CA, USA | > | Making life hard for others since 1977. PGP: 4BD6C0CB | > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20081115091830.X19924>