Note: Due to technical difficulties, the Archives are currently not up to date.
GMANE provides an alternative service for most mailing lists. c.f. bug 424647
On 21 Dec 2005, at 12:32, Gavin Seddon wrote:
> I have been looking in '/var/log' for users logging on. The files and
> directories in there are fastidiously organised (to say the least).
> Better than usual UNIX distros. What is the best place to look for
> logins/hacks.
Which syslog daemon do you use? How is it configured?
I use metalog and I get password failure notices in /var/log/pwdfail/*
You could also run
lastlog |grep -v '**Never logged in**'
to see when people last logged in.
Yours,
Craig
--
Craig Webster | t: +44 (0)131 516 8595 | e: craig@...
Xeriom.NET | f: +44 (0)709 287 1902 | w: http://xeriom.net
--
gentoo-amd64@g.o mailing list
|
|
