Re: strangelog

[bxf4@psu.edu (Brian P. Flaherty)]

Rudy Gevaert <webworm@zeus.rug.ac.be> writes:

> Hello,
> 
> This weekend I got a strange log:
> 
> Unusual System Events
> =-=-=-=-=-=-=-=-=-=-=
> Aug 11 06:25:03 alhandra su[3584]: + ??? root-nobody
> Aug 11 06:25:03 alhandra PAM_unix[3584]: (su) session opened for user
> nobody by
> +(uid=0)

I also saw this recently when SAS (a statistics package) opened up a
TCP port to listen for data shares.  Since noticing it, I have seen it
several more times for other tasks, like the cron jobs mentioned
earlier.

-- 
Brian P. Flaherty

      /"\
      \ /     ASCII RIBBON CAMPAIGN
       X        AGAINST HTML MAIL  
      / \