Re: Auth.log

On Fri, 5 Nov 2004 07:23:40 +0100 Andrea Vettorello <[EMAIL PROTECTED]> wrote: > On Fri, 5 Nov 2004 12:34:38 +1100, Matthew Joyce > <[EMAIL PROTECTED]> wrote: > > > > > > Hi, > > > > I was just checking some logs on a woody box and just want to > > clarify something. > > > > Stuff like this :

Re: Auth.log

"Matthew Joyce" <[EMAIL PROTECTED]> writes: > I have ssh configured so root cannot login, but I want to show some > stats to management to elevate the need to be security conscious, are > there any packages which will analyse these logs and produce a nice > report, a summary perhaps ? apt-cache s

Re: Auth.log

On Fri, 5 Nov 2004 12:34:38 +1100, Matthew Joyce <[EMAIL PROTECTED]> wrote: > > > Hi, > > I was just checking some logs on a woody box and just want to clarify > something. > > Stuff like this : > [...] > Nov 3 00:06:25 donate sshd[3666]: Failed password for root from > 61.218.125.178 port

Re: auth.log webmin[xxx]: Timeout of admin

On Fri, 24 Sep 2004, Robert S wrote: > I've installed webmin 1.16 (from the webmin site) on woody. I have the > webmin daemon running but haven't used webmin for several days, but I keep > getting these messages in my /var/log/auth.log - which are reported to me by > logcheck. > > Unusual System

Re: auth.log

On Thu, Apr 26, 2001 at 11:26:41AM -0400, B.C.J.O wrote: > Apr 26 06:25:03 cain su[2536]: + ??? root-nobody > > ... and I can't figure out what the heck caused it. I haven't seen a line > like it before. Any ideas what kind of event would have caused this line > to be logged? all clues welcome. =)

Re: auth.log: su(to root) fails 1000 times /min?

On Sat, 14 Jun 1997, joost witteveen wrote: > > >From my /var/adm/log.auth: > Jun 12 23:05:57 rulcmc su: FAILED SU (to root) joost on none > Jun 12 23:06:28 rulcmc last message repeated 552 times Looks like a program caught in an infinite loop. Check for processes under your user name that are