RE: It was bound to happen - suspected hack

-----Original Message----- From: kclug-bounces@kclug.org [mailto:kclug-bounces@kclug.org] On Behalf Of Matt Graham Sent: Thursday, October 21, 2004 10:10 AM To: kclug@kclug.org Subject: Re: It was bound to happen - suspected hack Where does one find a security log on their system, and how does one monitor it for possible problems?

Have a look at the contents of /var/log, particularly: messages secure maillog

You can peruse them with something like: less /var/log/messages

Hope that gets you started - there are complete volumes of information one should acquaint themselves with if really serious.

D.