Re: Logging problem

["Vicki Edwards" <vedwards blueridge net>]

It is a new server.  I checked for rootkits and didnt find anything.  And no
unusual logins------!  I have enough space, so I dont think that is the
problem either.  Not familiar with the logging tools yet but I plan to be.
Any other reasons for it to stop.  Thanks, Vicki


----- Original Message -----
From: "Keith Mastin" <kmastin beechtree ca>
To: <enigma-list redhat com>
Sent: Wednesday, October 30, 2002 9:06 PM
Subject: Re: Logging problem


> >my system appears to have quit logging.  i have tried to restart syslogd
> >and httpd, however, nothing changes.  any ideas?  thanks, vicki
>
> Okay... you can start worrying now...
> This is a sign of a successful intrusion, but it is not the only reason
> for the system to stop logging.
>
> How much space do you have available for log files? Are you using any
> log management tools susch as logrotate to keep the logs managable?
>
> I suspect this is more to do with space than anything else because httpd
> is on the same filesystem but no a usual concern to an intruder. You can
> check for intruders by checking the passwd file sfor unexpected users,
> /dev to .txt files and by running programs such as chkrootkit.
>
> Okay, check these things out, and let us know asap. Worry until you know
> for sure the system in not compromised.
>
> good luck
>
>
>
> _______________________________________________
> enigma-list mailing list
> enigma-list redhat com
> https://listman.redhat.com/mailman/listinfo/enigma-list
>