[GLLUG] Re: linux-user Digest, Vol 5, Issue 6

[Ex Fed]

I noticed this entry from my logcheck script.  I thought this was a little 
strange.   It appears as if the syslog demon has been restarted at 04:02:40 
in the morning.

Could this be an indication that someone has cracked my system and reset the 
logs to cover his tracks?  Or is this normal?



Sep  7 04:02:40 www syslogd 1.4.1: restart.
Sep  7 04:04:06 www su(pam_unix)[15997]: session opened for user news by 
(uid=0) Sep  7 04:04:06 www su(pam_unix)[15997]: session closed for user 
news

Lee Duynslager

_________________________________________________________________
Express yourself with MSN Messenger 6.0 -- download now! 
http://www.msnmessenger-download.com/tracking/reach_general