Syslog

ltrain · 06-27-2001, 01:08 PM

Hello all...

I have a weird issue going on with my system. Running RH 7.1, my syslogd is running but /var/log/messages does not have any messages (and it should). /Var is not full and the permissions are rw for root. I was running RH 5.2 and because of this problem I decided to upgrade to 7.1 which did not fix the problem.

Does anyone have any suggestions without formatting and reinstalling my system?

jeremy · 06-27-2001, 01:45 PM

What do you have in /etc/syslog.conf?

gizmola · 06-27-2001, 03:26 PM

Was your 5.1 system possibly hacked/root kitted? A common facility of root kits is the screwing up of the system logging programs.

If so, you may have to reinstall things from scratch as oppossed to simply upgrading, depending on how bad things were screwed up.

Otherwise, you should be checking your syslog config files and anything in cron that is related to log rotation.

ltrain · 06-27-2001, 03:43 PM

Jeremy,

Thank you...you have shinned the light!

The system was set to send log messages to another system - it's fixed now!