somebody logged in my PC?

kpachopoulos · 07-17-2006, 10:58 AM

Hi,
i was doing some coding and using tcpdump to find out how the application is going. I found out, that ssh packets where entering and leaving from my PC. "ps -A | grep ssh" showed me 3 ssh processes and one ssh-agent process, which i killed. I am looking for an ssh log file; i have looked in /var/log (find /var/log -name "*ssh*") and have found nothing. Where can i find logging info? Any other advice?

Thanks

Matir · 07-17-2006, 11:17 AM

Look for an auth.log or something similar. Many distros also have an 'everything' log as a fallback.