Koozali.org: home of the SME Server

correctly reading log files

G Sissala

correctly reading log files
« on: September 25, 2001, 09:21:49 AM »
I have seen the following two entries in my secure log files in sme 5.0.  What I'm wondering, are this successful intrusions into my system, the ip addresses are not from my network.  Also, can anyone direct to a source explaining the various log files in 5.0?

Sep 22 16:19:53 xxx01 xinetd[1380]: START: ftp pid=4321 from=xxx.251.70.169

Sep 24 18:21:11 xxx01 xinetd[873]: START: ftp pid=1605 from=xxx.46.9.243

I've also got this smtp message in the secure log.  Can anyone explain what this is?

Sep 24 17:33:41 xxx01 xinetd[873]: START: smtp pid=1571 from=xxx.175.21.22

Meert

Re: correctly reading log files
« Reply #1 on: January 12, 2002, 12:12:17 AM »
Can anyone answer this question? I'm having the same sort of entries in my /var/log/secure