[techtalk] cracked?

Richard H. Fifarek rfifarek at som.siu.edu
Wed Jan 12 16:15:27 EST 2000

On Wed, 12 Jan 2000, srl wrote:

> A bit later, while doing something else entirely, i noticed that the logs
> had cycled; the old /var/log/messages was now /var/log/messages.1, and
> there were.. 6 or so "syslogd restarted" messages from around 4:01:20. I

	This is normal RedHat behavior.  Check /etc/cron.daily/logrotate

> Does this necessarily mean my system's been compromised? If so, is
> there any way I can tell? 

	Probably not, BUT that doesn't rule it out.  Look for strange
files, significant changes in free disk space, etc.
		Richard H. Fifarek	SIU School of Medicine
		rfifarek at som.siu.edu	Information Resources

techtalk at linuxchix.org   http://www.linuxchix.org

More information about the Techtalk mailing list