Seif Zadeh Hossein wrote: > Hi there, > I logged into my ISP last night, and start downloading some files. As it > started to take longer than I thought I left it running over night. This > morning after I logged out I checked the `messages' file, and to my > surprise most of it was deleted. There was only a few lines there; to be > precise, there was three logs of syslogd being restarted, and then there > was a log of "su session openned for user `nobody'" and "su session > closed for user `nobody'". The logs show that the whole session took less > than a second, so I presume s/he run a script of some sort as su. What's > even more puzzling is that I get dynamic IP address when I log in the ISP. > > Any ideas? Eagerly waiting... > > Hossein > > P.S: I use RH5.0 with most of the updates applied. Don't panic, you're ok. Nobody is the UID of the process used to rotate your logs by the logrotate utility. Phew.... -Steve. -- PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES! http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe" as the Subject.
