Re: last log related question
sorry, forgot to sent it to the list...
----- Forwarded message from Volker Dormeyer -----
Date: Tue, 1 Jan 2002 19:46:40 +0100
Subject: Re: last log related question
To: eim <eim@eimbox.org>
Hello,
On Tue, Jan 01, 2002 at 06:30:56PM +0100,
eim <eim@eimbox.org> wrote:
> First of all Happy new Year to everyone on this list !
thanks, same to you.
> Last time I logged in as root and ran the command 'last'
> I saw that there where no logs, the output was just:
>
> ~# last root
> wtmp begins Tue Jan 1 18:29:15 2002
>
> That's all, anyone has hacked my box and deleted my last logs ?
> Or just some 'crontab-joke' ?
The "last" command looks at /var/log/wtmp. The wtmp log on debian
rotates monthly via logrotate. Take a look at /etc/logrotate.conf
for logrotate configuration. It's started by cron - look at
etc/cron.daily/logrotate.
regards,
Volker
--
Volker Dormeyer # V.Dormeyer@t-online.de
----- End forwarded message -----
--
Volker Dormeyer # V.Dormeyer@t-online.de
Reply to: