Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #205590

Re: Strange attacks in my log

From Reco <recoverym4n@enotuniq.net>
Newsgroups linux.debian.user
Subject Re: Strange attacks in my log
Date 2019-02-21 16:50 +0100
Message-ID <xtYLM-7RI-9@gated-at.bofh.it> (permalink)
References <xtSZH-4w1-3@gated-at.bofh.it> <xtTCp-4XR-11@gated-at.bofh.it> <xtYsp-7LG-7@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


	Hi.

On Thu, Feb 21, 2019 at 04:29:11PM +0100, Hans wrote:
> Hmm, tried "auditctl -a always,exit -S connect -F arch=b64

auditctl -a always,exit -S connect

Ignore 'syscall mismatch' warning, it will work anyway.

> Tha manual told nothing about a logfile. 

It's /var/log/audit/audit.log.
Red Hat documentation at it's finest.

Reco

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Strange attacks in my log Hans <hans.ullrich@loop.de> - 2019-02-21 10:40 +0100
  Re: Strange attacks in my log Reco <recoverym4n@enotuniq.net> - 2019-02-21 11:20 +0100
    Re: Strange attacks in my log Hans <hans.ullrich@loop.de> - 2019-02-21 11:50 +0100
      Re: Strange attacks in my log Reco <recoverym4n@enotuniq.net> - 2019-02-21 13:10 +0100
    Re: Strange attacks in my log Hans <hans.ullrich@loop.de> - 2019-02-21 16:30 +0100
      Re: Strange attacks in my log Reco <recoverym4n@enotuniq.net> - 2019-02-21 16:50 +0100
        Re: Strange attacks in my log Hans <hans.ullrich@loop.de> - 2019-02-21 17:40 +0100
          Re: Strange attacks in my log Reco <recoverym4n@enotuniq.net> - 2019-02-21 18:30 +0100
  Re: Strange attacks in my log Dan Purgert <dan@djph.net> - 2019-02-21 11:30 +0100

csiph-web