[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] Problems with logcheck readout?
- Subject: [cobalt-security] Problems with logcheck readout?
- From: "Simon Wilson" <simon@xxxxxxxxxxxxx>
- Date: Tue, 27 Mar 2001 16:47:54 +0100
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Hi,
I have just installed logcheck and recieved my first e-mail back from it.
It contains hundreds of entries and to be honest I don't understand much of
it.
Can you help?
I have included one example of each entry, although most are featured
many many times.
Mar 27 05:15:03 ns1 sendmail[26811]: NOQUEUE: localhost [127.0.0.1] did not
issue MAIL/EXPN/VRFY/ETRN during connection to MTA
Mar 21 17:15:33 ns1 proftpd[16878]: server name
(ARouen-101-1-1-109.abo.wanadoo.fr[193.251.28.109]) - no such user
'anonymous'
Mar 21 17:15:35 ns1 last message repeated 4 times
Mar 21 17:15:35 ns1 proftpd[16878]: server name
(ARouen-101-1-1-109.abo.wanadoo.fr[193.251.28.109]) - USER anonymous (Login
failed): Can't find user.
Mar 21 17:15:36 ns1 proftpd[16878]: server name
(ARouen-101-1-1-109.abo.wanadoo.fr[193.251.28.109]) - FTP session closed.
This one appears evey few minutes, hundreds of entries
Mar 22 00:00:01 ns1 proftpd[901]: server name (localhost[127.0.0.1]) - FTP
session closed.
Mar 22 00:00:04 ns1 telnetd[914]: ttloop: read: Broken pipe
What does it mean?
Thanks
_________________________________________________________________
Simon Wilson Big Pink New Media
simon@xxxxxxxxxxxxx 27 Sarum Complex, Salisbury Road,
+44 (0)1895 811885 Uxbridge, Middx UB8 2RZ, UK.