SuSE stopps logging!
Hello! My SuSE box stopps logging the /var/log/messages since the Sep. 11th. -rw-r----- 1 root root 530468 Sep 11 11:44 messages -rw------- 1 root root 12 Sep 14 10:04 messages.offset what is the message.offset good for? # less messages.offset 10817 530468 #--> that is exactly the size of my messages file. I am a bit worried. Spiekey
Hello! Hello! First, please don't post HTML mails to mailing lists. Thank you.
My SuSE box stopps logging the /var/log/messages since the Sep. 11th. -rw-r----- 1 root root 530468 Sep 11 11:44 messages -rw------- 1 root root 12 Sep 14 10:04 messages.offset messages.offset is used by logcheck, AFAIR. Are you using logcheck? I am a bit worried. look, if syslogd is running: ps uax |grep syslog
Markus -- _____________________________ /"\ Markus Gaugusch ICQ 11374583 \ / ASCII Ribbon Campaign markus@gaugusch.dhs.org X Against HTML Mail / \
Hello! Don't kill me because of my (too?) simple questions: ;-) I was watching your discussion on logfiles ...
yes, i am using logcheck, is that bad? no, that's great :) it's perfectly normal to have those .offset files.
What are the benefits of using logcheck? Which kind of checks are performed? Martin> ----------------------------------------------------------------- Dipl.-Ing. Martin Schichl SC&C Software, Communication & Consulting GmbH & Co KEG Grottenhofstr. 3, A-8053 Graz Tel. +43/(0)316/265-205, Fax +43/(0)316/265-234 mschichl@scc.co.at, http://scc.co.at
What are the benefits of using logcheck? you can define what is "normal" in your logfiles (get's filtered), what is a security violation, and what is unusual. (you can also filter violations). The result is delivered as mail, which is nearly in-realtime and very convenient. logcheck is a script which is run in a cron job, so you can also run it only once in the night and every 10 minutes, when you are awake.
Markus -- _____________________________ /"\ Markus Gaugusch ICQ 11374583 \ / ASCII Ribbon Campaign markus@gaugusch.dhs.org X Against HTML Mail / \
participants (3)
-
Markus Gaugusch -
Martin Schichl -
spiekey