0
votes
0answers
25 views

Apache2 access.log interpretation

I'm pretty new to apache in general. It's a LAMP installation on Ubuntu server 14.04 and all is up to date. I'm also running a squid proxy on the same box(not transparent) with success in my ...
-3
votes
1answer
49 views

Keeping your server safe [closed]

I have a typical vps server with some custom sites on it running on port 80, a mail server, I don't have a DNS server and it is a default ubuntu 12.04. I don't have any admin panel, I am doing all the ...
0
votes
2answers
97 views

nginx access.log only kept for a day

I'm using goaccess on Ubuntu Server 12.04 to view my analytics on my web server. I just run the following utility: goaccess -f /var/log/nginx/access.log However I'm only seeing one days worth of ...
2
votes
2answers
445 views

Fail2ban log filled with entries saying “fail2ban.filter : WARNING Determined IP using DNS Lookup:..”

My fail2ban log at /var/log/fail2ban.log is completely filled with entries saying: fail2ban.filter : WARNING Determined IP using DNS Lookup: [IP address] I think this may have begun after I changed ...
0
votes
4answers
625 views

remote server log viewer/analyzer

I have an rsyslog server running Ubuntu 12.04 which stores logs from different clients also running Ubuntu 12.04. Now I want to view those logs from my machine which also runs Ubuntu 12.04. One way ...
0
votes
1answer
1k views

How can I automatically delete old apache error log files?

My /var/log/apache2 folder is getting out of hand. It has loads of old compressed error.log files that I want to get rid of before my server runs out of space and explodes. Firstly - Is it safe to ...
0
votes
1answer
134 views

the network dropped on ubuntu 12.04 server but came back

I have a ubuntu server, type 12.04 that serves as a mysql box and intranet server. Without notice it dropped all packets (www, ping and mysql). What logs should i check - the messages log is not in ...
1
vote
1answer
2k views

Ubuntu EC2 Apache 2 : Access Log only shows Internal Dummy Connection

I'm running a micro instance on Amazon Cloud Services, and a recent spike made our web server unresponsive, I'm trying to do a little research to determine if this was a DOS attack, or which process ...
0
votes
1answer
274 views

strange Postfix logwatch log summary on my ubuntu vps [closed]

Hi I would be very thankful if someone could help me on explaining this logwatch summary of my postfix installation on my ubuntu 10.04 vps. I dont really know if this might be a normal log file ...
0
votes
2answers
1k views

kern.log bandwidth and syslog filling up with bandwidth lines

I'm using Ubuntu 11.04 and my kern.log, bandwidth, and syslog files are filling(And completely consuming my hard drive) with this stuff Apr 18 20:20:23 main kernel: [1886527.503932] BANDWIDTH_OUT:IN= ...
4
votes
2answers
1k views

Why has my auth.log file emptied - is this normal?

Just took a look at my server auth.log file for the first time in a few days, and noticed that it has no entries before 6:47 this morning. This is really odd because I dumped that logfile to my ...
0
votes
3answers
589 views

Where to see logs of a program that crashes on Ubuntu Server?

I have been running a service (a python script using twistd library) as a non-root user that stays in the background. I've been noticing that it crashes at random times and I want to understand why. ...
3
votes
1answer
3k views

Most functional log analysis tools? [closed]

I am curious as to what others find to be the most useful log analysis tools for *nix. Presently I am simply tailing output and grepping through things, however I'd like to use something that would ...
0
votes
0answers
171 views

Ubuntu power management logfiles? Forensics (maybe?)?

I'm in the unfortunate position where I need to determine what happened to a remote server of ours. I only have SSH access to it and it's a netbook running ubuntu 10.04 32 bit. It dropped offline for ...
3
votes
1answer
2k views

How to check why reboot command failed and machine was instead stopped?

I issued a reboot command but the server failed to reboot instead we lost communication with it, and we had to call the company to reset it. I am not an advanced users, but I want to check the log ...
0
votes
2answers
116 views

Fast, reliable, open source encryption for large logs

I intend to use cloud storage for some of my application logs. These logs might contain confidential business data, so I would like to encrypt them prior to upload. For security reasons, I prefer ...
1
vote
3answers
816 views

Break-in attempts on Ubuntu VPS box [duplicate]

Possible Duplicates: Is it normal to get hundreds of break-in attempts per day? What should I do if I find someone is brute forcing my server password? I have an Ubuntu 10.04 VPS box. ...
1
vote
0answers
95 views

My Linux server crashes twice; Apache and system logs have portions of other text files

I have a web server that has been running pretty smoothly for years. Twice recently it has gone down for no apparent reason - the monit logs don't show any particularly high anything going on. CPU ...
0
votes
3answers
655 views

Can't do Chmod on Apache error logs in Ubuntu

I am trying to clear the logs and I do not have permission since the file permissions on Apache error logs are like this: -rw-r----- When I tried to do something like chmod 777 error.log I got this ...
0
votes
2answers
523 views

Please explain--getty[7857]: /dev/tty6: cannot open as standard input: No such device--from my auth.log

I'm running a ubuntu server 8.10, and have a ton of these lines in my auth.log Edit: crw------- 1 root root 4, 0 May 27 2010 /dev/tty1 crw-rw---- 1 root dialout 4, 1 May 27 2010 /dev/tty2 ...
1
vote
2answers
2k views

What is the proper setup for “anacron”? (Ubuntu 9.10, 10.04)

I am running Ubuntu 9.10 and 10.04 on MediaTemple (ve) servers. On both of them, the anacron setup is broken, ... and they have been broken since I first installed Ubuntu. It has only come to my ...
4
votes
1answer
6k views

How can I log iptables in Ubuntu just in /var/log/firewall with rsyslogd

I am using ubuntu 10.10. with iptables! I want to log my firewall drops in the file /var/log/firewall and NOT in any other logfile. So I added the following line to my file: ...
1
vote
1answer
290 views

/var/log/btmp not readable format?

Systemlogviewer in Ubuntu states that btmp is no usual file that can be opened. I don't know what happened. Some hours ago this problem hasn't yet occured? how can i fix it. when i delete btmp file. ...
2
votes
2answers
382 views

My server's security was breached… I need help - Ubuntu/Linux

I'm using Ubuntu 10.04. An unknown person has logged in several times through SSH using postgres user account. I'm having a hard time finding logs with any related acitivty, probably because such ...
0
votes
1answer
195 views

Will logzilla installation stop the old log file

I have installed logzilla for monitoring the logs and its is storing logs in mysql database. I want to know that will my logs now only get entered in mysql or i can access them as normal as well ...
0
votes
3answers
283 views

Log Size Management

What do you guys use to manage your log size? How long do you keep logs archived? I realize this ultimately depends upon site traffic and the server hardware. I have 4GB of RAM on my server with 2x ...
2
votes
3answers
464 views

My access.log is 10.5GB - What are good log management procedures?

We don't have any log management aside from every now and then going in and clearing it out. We have a server that doesn't get too much traffic (most logs are from our live chat). But it made me ...
3
votes
5answers
6k views

nginx error log was huge, so I deleted and created a new one, now nginx won't start

I deleted the /var/log/nginx/error.log file, and then created a new one using: sudo nano error.log Doinga ls -la shows that the error.log and access.log have the same permissions. When I try and ...
1
vote
5answers
4k views

Ubuntu 9.10: how do I troubleshoot a startup script that doesn't appear to run?

I've created a bash script 'foo'. I've made that script executable with chmod+x and added it the the start-up by running sudo update-rc.d foo defaults 80 Despite that, it doesn't appear to be ...
1
vote
1answer
1k views

Apache Custom Log Format

I am trying to write a reward system wherein users will be given reward points if they download complete files, So what should be my log format. After searching alot this is what I understand its my ...
5
votes
6answers
4k views

Why would anacron not be running?

I have a Ubuntu system that has anacron installed. However I'm pretty sure it's not running. It's not running the commands in /etc/cron.daily to rotate the syslog files (I'm using sysklog, which has ...
1
vote
3answers
2k views

A script to geo-locate ip addresses in auth.log

Is there a way to automatically geo-locate an ip-address on Ubuntu linux? I'm looking to do this for errors in my auth.log.
0
votes
3answers
588 views

Ubuntu Recover Deleted Email

Just wondering if someone can help. I have a customer email and website hosted on my server and a customer logged into their squirrel mail account (via my server) and deleted an email that arrived ...
4
votes
2answers
2k views

iptables logging flooding /var/log/messages

I am running Ubuntu Server, pretty recent, which is set up as a NAT router. I have an iptables script that runs during boot to set up NAT, port forwarding etc. I am trying to diagnose an unrelated ...
3
votes
3answers
2k views

Is there any way to exclude specific entries from Linux log files?

Specifically, I'm trying to keep a nice clean cron.log under Ubuntu Server (hardy LTS). In addition to the 4 or 5 cron jobs that come pre-installed, I've added 4 of my own jobs (using the cron.d ...
12
votes
3answers
10k views

what is sensible-mda and do i need it?

I'm running Ubuntu Intrepid, and have been seeing the following my logs: Aug 23 16:01:03 wp1 sm-mta[13700]: n7NFJIad013566: Warning: program /usr/sbin/sensible-mda unsafe: No such file or directory ...
16
votes
7answers
16k views

Can cron write job output to a log *by default* (instead of mail)?

We all know the right way to handle output from cron jobs is to redirect it to a file: 0 * * * * /bin/date >> /var/log/date.log 2>&1 However, sometimes admins are lazy, forgetful, or ...
11
votes
4answers
776 views

Which logs to track regularly

I run my own server at home for my personal website running Ubuntu Server with Apache, Bind9 and Django. What logs would you suggest are best to keep track of on a regular basis? (rather than on a ...
1
vote
3answers
529 views

Log-file inspection and management on a LAMP stack

I'm engaged in a handful web-development projects running on a LAMP stack. My present tool-set for inspecting and bugfixing is: the softwares built-in log-viewer and the like, and running "sudo tail ...
2
votes
4answers
2k views

What are these strange entries in dmesg?

Running Ubuntu Linux 9.04, and I see these odd log lines in dmesg: [ 18.673752] type=1505 audit(1240159967.221:2): operation="profile_load" name="/usr/share/gdm/guest-session/Xsession" ...