sorry, forgot to sent it to the list...
----- Forwarded message from Volker Dormeyer ----- Date: Tue, 1 Jan 2002 19:46:40 +0100 Subject: Re: last log related question To: eim <[EMAIL PROTECTED]> Hello, On Tue, Jan 01, 2002 at 06:30:56PM +0100, eim <[EMAIL PROTECTED]> wrote: > First of all Happy new Year to everyone on this list ! thanks, same to you. > Last time I logged in as root and ran the command 'last' > I saw that there where no logs, the output was just: > > ~# last root > wtmp begins Tue Jan 1 18:29:15 2002 > > That's all, anyone has hacked my box and deleted my last logs ? > Or just some 'crontab-joke' ? The "last" command looks at /var/log/wtmp. The wtmp log on debian rotates monthly via logrotate. Take a look at /etc/logrotate.conf for logrotate configuration. It's started by cron - look at etc/cron.daily/logrotate. regards, Volker -- Volker Dormeyer # [EMAIL PROTECTED] ----- End forwarded message ----- -- Volker Dormeyer # [EMAIL PROTECTED]
