logwatch entry interpretation.....
Thomas Walter <[email protected]> Fri, 30 Apr 2004 10:31:08 -0400 (EDT)
| Newsgroups | gmane.linux.admin.managers |
|---|---|
| Message-ID | <Pine.LNX.4.44.0404301028290.7538-100000@earth.geo.hunter.cuny.edu> |
I have the following logwatch entry and I need someone to help interpret the info: Apr 29 11:12:47 machinename sshd(pam_unix)[4077]: 2 more authentication failures; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=icsdhcp166-201.xxxx.xxxx.edu user=ngtran Does "logname= uid=0" mean the person is trying to log on as root? TIA. Tom ================================================================================== Thomas Walter Geography & Computer Science Departments Hunter College of the City University of New York 695 Park Avenue New York, NY 10021 (212)772-5457 Office (212)772-5268 Fax [email protected] http://geography.hunter.cuny.edu/~tbw _______________________________________________ LinuxManagers mailing list - http://www.linuxmanagers.org submissions: LinuxManagers-35TzE1X9F6582KRnZfj+bdi2O/[email protected] subscribe/unsubscribe: http://www.linuxmanagers.org/mailman/listinfo/linuxmanagers