I just received this message from logcheck, on two machines (Debian), at the same minute. They do not share /var/log/ via NFS or anything.
What might this be? Same minute!
System Events
=-=-=-=-=-=-=
***************
*************** This could indicate tampering.
*** WARNING ***: Log file /var/log/syslog is smaller than last time checked!
--
Tell the truth or trump--but get the trick.
-- Mark Twain, "Pudd'nhead Wilson's Calendar"
signature.asc
Description: OpenPGP digital signature

