OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 4th quarter (Oct-Dec) 1994: Re: syslog idea (fwd)

Re: syslog idea (fwd)

Bill Broadley (broadleyturing.ucdavis.edu)
Fri, 7 Oct 1994 09:12:41 -0700 (PDT)

> This brought to mind the idea of a "syslog monitor", or a process that would
> just hang out someplace and stat the various log files periodically,
> using some mechanism to warn of excessive size, mysterious shrinkage, and
> maybe some other warning signs.

Wouldn't an append only immutable file be ideal for such things,
assuming you have physical security of course.


-- 
Bill Broadley		Broadleymath.ucdavis.edu	    UCD Math Sys-Admin
Linux is great.		http://ucdmath.ucdavis.edu/~broadley            PGP-ok