I just received this message from logcheck, on two machines (Debian), at the same minute. They do not share /var/log/ via NFS or anything.
What might this be? Same minute! System Events =-=-=-=-=-=-= *************** *************** This could indicate tampering. *** WARNING ***: Log file /var/log/syslog is smaller than last time checked! -- Tell the truth or trump--but get the trick. -- Mark Twain, "Pudd'nhead Wilson's Calendar"
signature.asc
Description: OpenPGP digital signature