Filipe Brandenburger wrote:
Hi,
On Sun, May 11, 2008 at 5:26 AM, Ned Slider <ned@xxxxxxxxxxxxxx> wrote:
I have the following entries, below, in today's log file (for yesterday,
10th May).
I don't run the automated yum-updated and didn't run a yum update
yesterday, and no packages were installed. Obviously the entries are old.
I was wondering if anyone could offer an explanation?
Syslog does not print the year on log lines. Once I saw some strange
behaviour similar to yours. I had a script that grep'd the logs for
yesterday's date and sent it to me by e-mail. One day, I saw several
SSH attempts from IPs that were empty, and IPs being resolved to names
that were not the right ones. Then I logged in to the machine, looked
at /var/log/secure and realized what happened. The logs were over one
year old now. Maybe check /var/log/yum.log to see if that is what
happened.
By the way, you say "today's log file", but to what log file are you
referring? The output you show is not from /var/log/yum.log, is it
some post processing?
HTH,
Filipe
Yes, you're absolutely right Filipe, I just noticed it myself.
The logs are from syslog?? emailed to root each day. When I checked
/var/log/yum.log as Akemi suggested, indeed there were matching entries
for 10 May, but from 2007 without the year present, so it looks like
syslog parsed /var/log/yum.log and returned anything matching '10 may'.
Thanks for your help!
Ned
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
