From owner-freebsd-questions Thu Jul 30 19:19:42 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id TAA15990 for freebsd-questions-outgoing; Thu, 30 Jul 1998 19:19:42 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from free1.cetinc.com ([206.240.124.40]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA15968 for ; Thu, 30 Jul 1998 19:19:33 -0700 (PDT) (envelope-from brian@free1.cetinc.com) Received: (from brian@localhost) by free1.cetinc.com (8.8.8/8.8.8) id WAA14541 for freebsd-questions@freebsd.org; Thu, 30 Jul 1998 22:22:08 GMT (envelope-from brian) Date: Thu, 30 Jul 1998 22:22:08 GMT From: Brian Neal Message-Id: <199807302222.WAA14541@free1.cetinc.com> To: freebsd-questions@FreeBSD.ORG Subject: Logfile question Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I have a question regarding logfile rotation and removal. Specifically, my messages and ftpd files have disappeared. This is 2.2.6-STABLE. I was wondering if they would be deleted to free up space? There was an incident on this machine a few days ago, someone got ahold of a username and password and got into the system via ftp. This individual did not, however, have permissions necessary to delete any of these files, however, since I have no logs, I can't tell what did happen. If this individual used some kind of password dictionary to get in (obviously generating a very large amount of unsuccessfull login attempts), could the messages log have been deleted to conserve space? Thanks in advance, Brian Neal To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message