Re: Logging problem

[Keith Mastin <kmastin beechtree ca>]

>my system appears to have quit logging.  i have tried to restart syslogd
>and httpd, however, nothing changes.  any ideas?  thanks, vicki

Okay... you can start worrying now...
This is a sign of a successful intrusion, but it is not the only reason 
for the system to stop logging.

How much space do you have available for log files? Are you using any 
log management tools susch as logrotate to keep the logs managable?

I suspect this is more to do with space than anything else because httpd 
is on the same filesystem but no a usual concern to an intruder. You can 
check for intruders by checking the passwd file sfor unexpected users, 
/dev to .txt files and by running programs such as chkrootkit.

Okay, check these things out, and let us know asap. Worry until you know 
for sure the system in not compromised.

good luck