Syslog-ng

["Igmar Palsenberg" <palsenberg tebenet nl>]

Hi,

I was wondering if anyone is using Syslog-ng, and what are the experiences
with this syslog clone ??

The reason I'm asking is that we got hacked yesterday, and the hacker
modified some logfiles (only on this host, not on the remote syslog host
:-)))

I want to prevent modifications of logfiles, and syslog-ng seems to have
what I want, not to mention being the only program that is able to verify
integrety of logfiles.

Since this a production machine, I don't want to have a crashed machine, or
missing some logs.



        Thanks for the info,


                        Igmar