seen from Australia
seen from China
seen from Ireland
seen from United States
seen from United States
seen from China
seen from United States
seen from Syria
seen from China
seen from Ireland
seen from Türkiye
seen from China
seen from New Zealand
seen from Czechia
seen from China
seen from China
seen from China
seen from Czechia
seen from United Kingdom
seen from Czechia
Monitorización en Linux
En el mundo de la ciberseguridad, es fundamental tener una buena monitorización de los sistemas y redes. Esto permite detectar posibles amenazas y actuar de forma preventiva, además de mejorar el rendimiento del sistema. Por eso, en este artículo hablaremos de la monitorización en Linux: herramientas, configuraciones y casos de éxito. La monitorización en Linux se refiere al proceso de recopilar…
View On WordPress
Means of transportation. @alternafilms @grantharder #pnw #seatosky #a7riii #gm2470 #bts #mindthelog #logwatch (at The Georgia Straight)
# pacman -S logwatch
# pacman -S logwatch resolving dependencies... :: There are 2 providers available for cron: :: Repository core 1) cronie :: Repository community 2) fcron Enter a number (default=1): looking for conflicting packages... Packages (3) cronie-1.5.1-1 run-parts-4.8.1-1 logwatch-7.4.3-3 Total Download Size: 0.43 MiB Total Installed Size: 2.38 MiB :: Proceed with installation? [Y/n] :: Retrieving packages... run-parts-4.8.1-1-x86_64 27.8 KiB 2.71M/s 00:00 [########################################] 100% cronie-1.5.1-1-x86_64 68.4 KiB 2.90M/s 00:00 [########################################] 100% logwatch-7.4.3-3-any 344.4 KiB 4.80M/s 00:00 [########################################] 100% (3/3) checking keys in keyring [########################################] 100% (3/3) checking package integrity [########################################] 100% (3/3) loading package files [########################################] 100% (3/3) checking for file conflicts [########################################] 100% (3/3) checking available disk space [########################################] 100% :: Processing package changes... (1/3) installing run-parts [########################################] 100% (2/3) installing cronie [########################################] 100% Optional dependencies for cronie pm-utils: defer anacron on battery power smtp-server: send job output via email [installed] smtp-forwarder: forward job output to email server [installed] (3/3) installing logwatch [########################################] 100% Optional dependencies for logwatch perl-date-manip: human readable dates :: Running post-transaction hooks... (1/1) Arming ConditionNeedsUpdate...
ログのチェック
sshdのエラーログ
Cockpitのlog監視画面で見ているとsshdから，
error: Received disconnect from 192.168.253.11 port 63377:2: disconnected by server request
というエラーログがでていた． こちらによるとTeraTermのバグらしいので，久々にアップデートしてみるとこのエラーはなくなる．
Auditの嫌がらせログ対策
logwatchのメールでAuditのログが大量に送られてきます．昔対処したはずだが，今回のFedora26へのアップデートでデフォルトに戻ってしまったようです．
を見ると，/etc/logwatch/conf/override.confというファイルを変更すれば良いことは分かるが，困ったことにサービス名ってなに？
へ～なるほど，/usr/share/logw…
View On WordPress
Cómo monitorizar los logs de tu servidor con Logwatch en CentOS o Ubuntu
Cómo monitorizar los logs de tu servidor con Logwatch en CentOS o Ubuntu #CentOS #Ubuntu #Linux
Logwatch es un programa que te va a mantener al tanto de todo lo que pase en tu servidor Linux analizando los logs del sistema y mandandote informes diarios a tu e-mail
En este tutorial vamos a ver como instalar Logwtach en Ubuntu y CentOS
Instalamos logwatch
CentOS
yum install logwatch -y
Ubuntu
sudo apt-get install logwatch
Si quieres recibir los informes por e-mail vas a necesitar tener…
View On WordPress
Fixed: Empty/Null Apache request entries in access log #dev #computers #fix
Fixed: Empty/Null Apache request entries in access log #dev #computers #fix
Empty/Null Apache request entries in access log
This entry got logged in a Apache access log:
IP ADDRESS – – [00/00/0000:00:00:00 -0000] ” ” 301 – “-” “-“
It was detected by LogWatch as a null HTTP Response and also got marked as a successful probe..
I am curious about how this request about made and how it is considered a successful probe. Here is what I can decipher with specific questions:
T…
View On WordPress
Answer: What does "Normal Shutdown, Thank you for playing preauth" In SSH logs mean? #fix #answer #programming
Answer: What does "Normal Shutdown, Thank you for playing preauth" In SSH logs mean? #fix #answer #programming
What does "Normal Shutdown, Thank you for playing [preauth]" In SSH logs mean?
Recently, My SSH log summaries for my Ubuntu 12.04 servers in Logwatch have started showing entries for “11: Normal Shutdown, Thank you for playing [preauth]” along with the “11: Bye Bye [preauth]” and “11: disconnected by user” messages they had been showing previously.
I have not seen this message in my logs before…
View On WordPress
How-to: Linux: logwatch(8) is too noisy. How can I control the noise level? #it #development #computers
How-to: Linux: logwatch(8) is too noisy. How can I control the noise level? #it #development #computers
Linux: logwatch(8) is too noisy. How can I control the noise level?
Our Linux systems run logwatch(8) utility by default. On a RedHat/CentOS/SL system, Logwatch is called by the /etc/cron.daily/ cronjob, which then sends a daily email with the results. These emails have a subject like:
Subject: Logwatch for $HOSTNAME
The problem is that by default these daily emails are too noisy and contain a…
View On WordPress
