Date: Fri, 31 Jul 1998 14:16:57 -0700 (PDT) From: Doug White <dwhite@resnet.uoregon.edu> To: Brian Neal <brian@free1.cetinc.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Logfile question Message-ID: <Pine.BSF.4.00.9807311416190.14321-100000@resnet.uoregon.edu> In-Reply-To: <199807302222.WAA14541@free1.cetinc.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 30 Jul 1998, Brian Neal wrote: > I have a question regarding logfile rotation and removal. Specifically, my > messages and ftpd files have disappeared. This is 2.2.6-STABLE. I was > wondering if they would be deleted to free up space? There was an incident > on this machine a few days ago, someone got ahold of a username and password > and got into the system via ftp. This individual did not, however, have > permissions necessary to delete any of these files, however, since I have no > logs, I can't tell what did happen. If this individual used some kind of > password dictionary to get in (obviously generating a very large amount of > unsuccessfull login attempts), could the messages log have been deleted to > conserve space? They could have been rolled (they'd be in /var/log/messages.?.gz) and for some reason newsyslog couldn't touch /var/log/messages then restart syslogd to get things flowing again. Doug White | University of Oregon Internet: dwhite@resnet.uoregon.edu | Residence Networking Assistant http://gladstone.uoregon.edu/~dwhite | Computer Science Major To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.00.9807311416190.14321-100000>