Hi, I got up this morning and had a quick peruse of /var/log/messages after leaving the RH7.2 Box connected to the internet (It has now been connected for 32 Hours). I have been doing some reading lately that if somebody manages to compromise your box they will redirect logging to /dev/null so you wont get any output in the log files. While reading /var/log/messages I saw syslogd had been restarted.
Nov 29 04:02:09 Fresian syslogd a.b.c: restart. Anyway my question to the group is does syslogd in the normal course of operation restart? Thanks Mark _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
