Date: Tue, 27 Jan 2004 22:15:10 +0100 From: "Peter Rosa" <prosa@pro.sk> To: "security at FreeBSD" <freebsd-security@freebsd.org> Subject: Re: Possible compromise ? Message-ID: <014f01c3e51a$a5a302e0$3501a8c0@peter> References: <003001c3e4f4$dbba7910$3501a8c0@peter><20040127165741.GA1700@sheol.localdomain><002801c3e513$774a4040$3501a8c0@peter> <4016CAE5.6080808@centtech.com><00c401c3e516$4f1bf7a0$3501a8c0@peter> <20040127210015.GA12328@pc5.i.0x5.de>
next in thread | previous in thread | raw e-mail | index | archive | help
Thanks for pointing me. But lastlogin returns only local and only few last connects. If I understand well, the bottom of lastlogin is the oldest. So may be, that connections was done in the deep past. Anyway, I will reinstall this weekend :-( Just to be sure. Many thanks to everybody who spent time with me. Peter Rosa ----- Original Message ----- From: "Nicolas Rachinsky" <list@rachinsky.de> To: "Peter Rosa" <prosa@pro.sk> Cc: "security at FreeBSD" <freebsd-security@freebsd.org> Sent: Tuesday, January 27, 2004 10:00 PM Subject: Re: Possible compromise ? > * Peter Rosa <prosa@pro.sk> [2004-01-27 21:44 +0100]: > > As Mr. Anderson wrote, I tried last -f /var/log/lastlog and get, what is in > > attachment. > > Unreadable chaos, bad dates. May be, lastlog has not exact structure for > > last, isn't it ? > > The program to show /var/log/lastlog is lastlogin. > > Nicolas > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?014f01c3e51a$a5a302e0$3501a8c0>