[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] Interpreting Log Files?
- Subject: [cobalt-security] Interpreting Log Files?
- From: Reed Phillips <rphillips@xxxxxxxxxxxxxx>
- Date: Sat, 8 Sep 2001 09:58:31 -0400
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Could you point me to a source that explains how to interpret log
files? For instance did the following person "connect" to my
machine? Is says "opened" and "connected", but also "no user found".
I'm not sure what this means. I get a lot of these from Europe.
Sep 8 06:51:42 ns1 proftpd[24656]: 216.27.65.154
(AMetz-101-1-3-114.abo.wanadoo.fr[80.11.17.114]) - FTP session opened.
Sep 8 06:51:41 ns1 in.proftpd[24656]: connect from 80.11.17.114
Sep 8 06:51:42 ns1 proftpd[24656]: 216.27.65.154
(AMetz-101-1-3-114.abo.wanadoo.fr[80.11.17.114]) - USER anonymous: no
such user found from AMetz-101-1-3-114.abo.wanadoo.fr [80.11.17.114]
to 216.27.65.154:21
Thanks!
Reed