[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] xferlog & xferlog.1 = 0 bytes?



On June 18 Todd Kirk wrote:
> 
> Is this normal that my xferlog files are 0 bytes and contain nothing?
> Although my root log file that is emailed to me shows FTP connetions
> happening only 1 day ago?

I'd check when the last rotation happened on the ftp logs, the modtime of /var/log/xferlog.1.
It is also possible that some connections were made without any actual 
file transfers.

Gergo

> 
> Does this mean someone deleted these files to cover their logs?
> 
> 
> 
> regards,
> 
> Todd Kirk
> 
> 
> 
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com