Just not the syslogd is crunching the logfiles but crond with its config file /etc/crontab (suse) does this job regulary, so that this messy can be normal, if you have files like messages07112001.gz in your /var/log Michael -----Original Message----- From: Jan Räther [mailto:jan.raether@zmnh.uni-hamburg.de] Sent: Tuesday, November 06, 2001 4:36 PM To: SuSE Security Subject: [suse-security] strange log entry Hi there, I'm running logcheck-1.1 on a SuSE 7.2 box. Last night i got the following report: Unusual System Events =-=-=-=-=-=-=-=-=-=-= *************** *** WARNING ***: Log file /var/log/messages is smaller than last time checked! *************** This could indicate tampering. should i worry about that? greets, Jan -- Jan Räther Universitaet Hamburg Zentrum für Molekulare Neurobiologie Service-Gruppe EDV Falkenried 94 20251 Hamburg Germany Tel.:040 - 428 - 03 - 6619 Fax.:040 - 428 - 03 - 6621 `When you say "I wrote a program that crashed Windows", people just stare at you blankly and say "Hey, I got those with the system, *for free*".' (By Linus Torvalds) -- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com