Rudy Gevaert <[EMAIL PROTECTED]> writes:
> Hello,
>
> This weekend I got a strange log:
>
> Unusual System Events
> =-=-=-=-=-=-=-=-=-=-=
> Aug 11 06:25:03 alhandra su[3584]: + ??? root-nobody
> Aug 11 06:25:03 alhandra PAM_unix[3584]: (su) session opened for user
> nobody by
> +(uid=0)
I also saw this recently when SAS (a statistics package) opened up a
TCP port to listen for data shares. Since noticing it, I have seen it
several more times for other tasks, like the cron jobs mentioned
earlier.
--
Brian P. Flaherty
/"\
\ / ASCII RIBBON CAMPAIGN
X AGAINST HTML MAIL
/ \
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
