Auth.log date issue?
Mark
admin at asarian-host.net
Wed Mar 9 02:24:57 PST 2005
Running FreeBSD 4.10, today I saw this in my log:
asarian-host.net login failures:
Mar 8 22:11:20 asarian-host sshd[32810]: Failed password for asarian from
192.168.0.8 port 3535 ssh2
Mar 8 22:11:36 asarian-host sshd[32812]: Failed password for asarian from
192.168.0.8 port 3536 ssh2
Mar 8 22:11:39 asarian-host sshd[32814]: Failed password for asarian from
192.168.0.8 port 3537 ssh2
Which is curious, as the IP address no longer has a machine on it. Then I
checked, and after a while I suddenly noticed /var/log/auth.log was dated
March 8, 2004! Apparently, the security script just checks the date, but
not the year? Is it supposed to work this way? It gave me a good scare,
all for nothing. :)
Thanks,
- Mark
More information about the freebsd-questions
mailing list