[techtalk] cracked?

[Richard H. Fifarek]

On Wed, 12 Jan 2000, srl wrote:

> A bit later, while doing something else entirely, i noticed that the logs
> had cycled; the old /var/log/messages was now /var/log/messages.1, and
> there were.. 6 or so "syslogd restarted" messages from around 4:01:20. I

	This is normal RedHat behavior.  Check /etc/cron.daily/logrotate

> Does this necessarily mean my system's been compromised? If so, is
> there any way I can tell? 

	Probably not, BUT that doesn't rule it out.  Look for strange
files, significant changes in free disk space, etc.
	     ____________________________________________________
		Richard H. Fifarek	SIU School of Medicine
		rfifarek at som.siu.edu	Information Resources
	     ____________________________________________________


************
techtalk at linuxchix.org   http://www.linuxchix.org