Hi there, I'm running logcheck-1.1 on a SuSE 7.2 box. Last night i got the following report: Unusual System Events =-=-=-=-=-=-=-=-=-=-= *************** *** WARNING ***: Log file /var/log/messages is smaller than last time checked! *************** This could indicate tampering. should i worry about that? greets, Jan -- Jan Räther Universitaet Hamburg Zentrum für Molekulare Neurobiologie Service-Gruppe EDV Falkenried 94 20251 Hamburg Germany Tel.:040 - 428 - 03 - 6619 Fax.:040 - 428 - 03 - 6621 `When you say "I wrote a program that crashed Windows", people just stare at you blankly and say "Hey, I got those with the system, *for free*".' (By Linus Torvalds)
could be that the syslog daemon gzipped the old log file and started a new one which is the normal behavior. look in /var/log/ for some .gz files On Tue, 6 Nov 2001, Jan R�ther wrote:
Hi there,
I'm running logcheck-1.1 on a SuSE 7.2 box. Last night i got the following report:
Unusual System Events =-=-=-=-=-=-=-=-=-=-= *************** *** WARNING ***: Log file /var/log/messages is smaller than last time checked! *************** This could indicate tampering.
should i worry about that?
greets,
Jan
-- Jan R�ther Universitaet Hamburg Zentrum f�r Molekulare Neurobiologie Service-Gruppe EDV Falkenried 94 20251 Hamburg Germany Tel.:040 - 428 - 03 - 6619 Fax.:040 - 428 - 03 - 6621
`When you say "I wrote a program that crashed Windows", people just stare at you blankly and say "Hey, I got those with the system, *for free*".'
(By Linus Torvalds)
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
Chad Whitten Network/Systems Administrator neXband Communications chadwick@nexband.com
participants (2)
-
dog@intop.net
-
Jan R�ther