Re: history of connections

From: Jonathan Portman (Jonathan.Portman_at_MPRC.CO.UK)
Date: 09/24/03

  • Next message: John Jolet: "Re: File Integrity and Security Checker Evaluation" 
    Date:         Wed, 24 Sep 2003 14:25:03 +0100
To: aix-l@Princeton.EDU

    More than likely it would be a skulker script.

    Check your cron by using crontab -e or -l.

    Have a look for any scripts that may have been stored to do this.

    As I am aware there are no Daemons that do this.

    -----Original Message-----
    From: AUBINEAU Cyril [mailto:caubineau@SIGMA.FR]
    Sent: 24 September 2003 14:13
    To: aix-l@Princeton.EDU
    Subject: Re: history of connections

    The /var/adm/wtmp file is deleted at 04h05 on my server.
    So i only have a one day history.

    Can you tell me which daemon did that ?

    Cyril AUBINEAU

    -----Message d'origine-----
    De : Matthieu RENONCOURT - Micro Informatique
    [mailto:mrenoncourt@FRAM.FR]
    Envoyé : mercredi 24 septembre 2003 14:56
    À : aix-l@Princeton.EDU
    Objet : Re: history of connections

    Hello,

    Try :
    last | more

    ----- Original Message -----
    From: "AUBINEAU Cyril" <caubineau@SIGMA.FR>
    Newsgroups: bit.listserv.aix-l
    To: <aix-l@Princeton.EDU>
    Sent: Wednesday, September 24, 2003 2:35 PM
    Subject: history of connections

    > Hello,
    >
    > I want to know which users (logins) accessed to an aix 4.3 since 2 or
    more
    > days....
    >
    > Can you help ?
    >
    > Best regards.
    >
    > Cyril AUBINEAU

    ***************************************************************
    Disclaimer :-
    This email is confidential and intended solely for the use of the
    individual to whom it is addressed. Any views or opinions are solely
    those of the author and do not necessarily represent those of
    20:20 Logistics Ltd, Dextra Accessories Ltd,
    The Discovery Store Ltd, The Mobile Phone Repair Company Ltd and
    Caudwell Group.
    If you are not the intended recipient, be advised that you have
    received this email in error and that any use, dissemination,
    forwarding, printing or copying is strictly prohibited. If you
    have received this email in error please delete it from your system
    and notify the sender immediately.
    ***************************************************************

  • Next message: John Jolet: "Re: File Integrity and Security Checker Evaluation"

    Relevant Pages