On Tue, 10 Mar 1998, Seif Zadeh Hossein wrote:
> Hi there,
> I logged into my ISP last night, and start downloading some files. As it
> started to take longer than I thought I left it running over night. This
> morning after I logged out I checked the `messages' file, and to my
> surprise most of it was deleted. There was only a few lines there; to be
> precise, there was three logs of syslogd being restarted, and then there
> was a log of "su session openned for user `nobody'" and "su session
> closed for user `nobody'". The logs show that the whole session took less
> than a second, so I presume s/he run a script of some sort as su. What's
> even more puzzling is that I get dynamic IP address when I log in the ISP.
>
> Any ideas? Eagerly waiting...
Most likely logrotate ran and rotated the logs for you. You should see
in /var/log files like messages.1 messages.2 etc. Logrotate runs
every morning around 1:00 AM. What you describe is what I see also except
that I have modified my logrotate.conf script to move the old logs
to /var/log/OLD_LOGS so /var/log is not so full of stuff.
Hope this helps.
......Tom "Do not meddle in the affairs of wizards,
[EMAIL PROTECTED] for you are crunchy and good with ketchup."
Unix IS user friendly. It's just selective about who its friends are.
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists
To unsubscribe: mail [EMAIL PROTECTED] with
"unsubscribe" as the Subject.
