At 06:27 PM 4/25/01 -0500, you wrote:
>Syslog seems to freak out if the log file it's writing to changes. More
>specifically, the inode pointer changes with the way log rotate works. So,
>in order for the log rotate function to work, Syslog will get restarted.
<phew!> Thanks Charile!
I'm still running sort of paranoid here... the other day I just happened to
log on and do a netstat, there was a telnet connection showing ESTABLISHED
and I've got telnet turned off... The connection was gone one second later
and I'm still not sure what it was... an attempted connection that I just
*happened* to see in that brief moment.. or... perhaps a hidden version of
telnet somewhere on the box that someone is using as a back door... ??
All checks have shown nothing out of the ordinary going on with the box..
But I'm looking constantly for anything suspicious.. perhaps a bit too hard.
Some have suggested a ground up rebuild just to be sure and I may yet do
this.. but for now, I'll keep watching like a hawk and hope for the best.
Thanks for the response and helping me put this little system "glitch" to
bed... !!
Wayne Sagar
_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security
