Re: possible hacker?

[Alan Mead <adm ipat com>]

At 11:06 AM 4/12/99 -0700, you wrote:
>
>Anyone know what this means?
>
>Apr 11 04:02:32 arcane syslogd 1.3-3: restart.
>Apr 11 04:02:32 arcane syslogd 1.3-3: restart.
>Apr 11 04:02:33 arcane syslogd 1.3-3: restart.
>Apr 11 04:02:33 arcane syslogd 1.3-3: restart.
>Apr 11 04:02:33 arcane PAM_pwdb[2503]: (su) session opened for user nobody
>by (uid=99)
>Apr 11 04:02:59 arcane PAM_pwdb[2503]: (su) session closed for user nobody

Stock RH machines do some house cleaning chores every Sunday morning,
including log rotation.  This is normal.  Of course, that doesn't mean that
it isn't a cracker :)

-Alan
---
Alan D. Mead  /  Research Scientist  /  adm ipat com
Institute for Personality and Ability Testing
1801 Woodfield Dr  /  Savoy IL 61874 USA
217-352-4739 (v)  /  217-352-9674 (f)