/var/log/syslog is smaller than last time checked!
On Fri, 16 Sep 2011 17:12:26 +0300, Jari Fredriksson wrote:
> I just received this message from logcheck, on two machines (Debian), at
> the same minute. They do not share /var/log/ via NFS or anything.
>
> What might this be? Same minute!
>
> System Events
> =-=-=-=-=-=-=
> ***************
> *************** This could indicate tampering.
> *** WARNING ***: Log file /var/log/syslog is smaller than last time
> checked!
Hum... could it be because logrotate made its job and cutted the syslog
file while logcheck was analyzing it?
It could be just a pure casualty :-?
Greetings,
--
Camaleón
--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: pan.2011.09.16.14.24.36@gmail.com">http://lists.debian.org/pan.2011.09.16.14.24.36@gmail.com
|
