[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] proftpd log entries
- Subject: Re: [cobalt-security] proftpd log entries
- From: "Carrie Bartkowiak" <ravencarrie@xxxxxxxx>
- Date: Tue, 22 May 2001 23:37:42 -0400
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
> After installing the last RaQ2 software update, I have been seeing
> in my log several times each hour messages such as the following:
> May 21 22:15:04 www proftpd[24474]: www.keller.com
(www.keller.com[192.100.68.5]) - FTP session opened.
The Active Monitor will check this every 15 minutes to make sure it is
running. You'll see that line, then immediately a line saying that the
FTP session was closed. If that's what you're seeing, it's fine. You
can tell logcheck.ignore to stop reporting this to you.
If what you're seeing is more often than every 15 minutes, it might be
something different.
(As always, your mileage may vary with any of my advice. *s*)
CarrieB