Re: Strange entries in apache/access.log
Andrew Alsup wrote:
> Is it normal to see 'ypbind' and 'sudo' entries in the
> /var/log/apache/access.log file? I have tcpspy enabled and I see entries
> for it as well. Here's a sample of what I've got:
> Jan 27 15:32:48 localhost ypbind: broadcast: RPC: Timed out.
> Jan 27 15:32:54 localhost sudo: andy : TTY=pts/2 ; PWD=/var/log/apache ;
> USER=root ; COMMAND=/usr/bin/vi access.log
> These are things I would expect to see the the syslog file, not in the
> apache access.log. I think I've got something dorked up somewhere. I'm
> trying to get webalizer working, and when it choked and said 'No valid log
> entries', I decided to look at the contents of the file. Yuck.
Do you also see any normal access.log entries in the same file? If not, I'd
suspect a filesystem issue - try unmounting and fscking the file
system /var/log is on.
Out of curiosity, what is in /var/log/syslog?