epike on Thu, 13 Dec 2001 23:00:20 +0100 |
here some more: /var/log/secure (if your'e root) who /var/log/wtmp - logins /var/log/xferlog - ftp tranfers also the Apache Error logs shows you IIS-style worms attempts JondZ / E.Pike > > now that i have a persistent internet connection via cablemodem, what logs > should i routinely check for security breaches? if someone attempts to > compromise my box, i'd like to know, so where do i look? any suggestion are > appreciated. > > thanks, > chris > > ______________________________________________________________________ > Philadelphia Linux Users Group - http://www.phillylinux.org > Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce > General Discussion - http://lists.phillylinux.org/mail/listinfo/plug > ______________________________________________________________________ Philadelphia Linux Users Group - http://www.phillylinux.org Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce General Discussion - http://lists.phillylinux.org/mail/listinfo/plug
|
|