Re: my log files-is there any problem

From: Saurabh Bathe (sbathe_at_gmail.com)
Date: 05/13/05

  • Next message: Duncan Lithgow: "Re: how-to for x-terminal newbie" 
    Date: Fri, 13 May 2005 11:40:33 +0530
To: Ankush Grover <ankush174@gmail.com>, For users of Fedora Core releases <fedora-list@redhat.com>

    Ankush Grover wrote:

    >hey friends,
    >
    > Here is my log file which is generated by Logwatch .
    >
    >crond:
    > Unknown Entries:
    > session closed for user root: 313 Time(s)
    > session opened for user root by (uid=0): 313 Time(s)
    >
    >
    >Relaying denied:
    > From unknown[211.48.102.152] to support@microsoft.com : 1 Time(s)
    > From unknown[222.101.92.32] to smtphunter44@daum.net : 1 Time(s)
    >
    >
    >I am little concerned with these 2 means are these the normal entries
    >or there is some problem.As it can be seen that cron daemon opened for
    >root 313 times isn't it too much.
    >
    >Please tell me about this.
    >
    >Thanks & Regards
    >
    >Ankush Grover
    >
    >
    >
    Hello Ankush,

    Check /var/log/cron to see what cron job is running. Jobs like sa
    (systat) generally run every 10 minutes as root. So these might be usual.

    For the sendmail logs, nothing much to worry as a relaying attempt was
    denied. If this is a public facing server running sendmail, these
    entries might be pretty common atleast in India.
    But if you are really worried, cheking the actual logs might give more
    insights to the problem

    -Saurabh 

    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Duncan Lithgow: "Re: how-to for x-terminal newbie"

    Relevant Pages

    • Re: Help: partitions - running out of free space
      ... Some logs indicate that I'm running out of disk space. ... It appears as if you're root filesystem has filled up, ... as init is switching to the single user maintenance runlevel. ... cannot give you any advice on how to download and install any missing ...
      (comp.os.linux.misc)
    • Re: some attack to fedora machine .
      ... I monitor my system for intrusion attacks ... Its very true as most informed people don't run as root, however you gotta be root to delete,modify, or even look at the logs. ... A sys admin will have to make trade offs to ensure people can get their work done but a saavy user can often get around things because its a trade off, ...
      (Fedora)
    • Re: some attack to fedora machine .
      ... I monitor my system for intrusion attacks ... the interesting information isn't owned by root at all but by the users. ... gotta be root to delete,modify, or even look at the logs. ... that it really depends on your perspective, user vs. sys admin. ...
      (Fedora)
    • Re: Tod der optischen Medien
      ... Was bitte hat der BIOS Parameter Block mit den Eigenschaften von FAT16 ... | Root Entries: This is the total number of file name entries that can ... | be stored in the root directory of the volume. ...
      (de.comp.hardware.laufwerke.brenner)
    • Re: Odd semi-crash or hang
      ... More details after reboot. ... Cannot find anything specific in logs, ... are some odd entries earlier this morning, ... Trying to reach it through remote desktop, ...
      (microsoft.public.windows.server.sbs)