ŠŸŠp”Ò„ü‡¯†E1

Size: px

Start display at page:

Download "ŠŸŠp”Ò„ü‡¯†E1"

なごみよしくに
5 years ago
Views:

1 [25/May/2003:07:03: ] ``GET /default.ida?xxxxxxx XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u780 90%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003% u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0''

2 /var/log/ more less jless lv apt-get /var/log/syslog syslogd % sudo more /var/log/syslog /var/log/syslog tail -f % sudo tail -f /var/log/syslog tail C Jun 1 06:18:49 debian syslogd 1.4.1#10: restart. Jun 1 06:18:50 debian kernel: klogd 1.4.1#10, log source = /proc/kmsg started. Jun 1 06:18:50 debian kernel: Inspecting /boot/system.map Jun 1 06:18:50 debian kernel: Loaded symbols from /boot/system.map Jun 1 06:18:50 debian kernel: Symbols match kernel version Jun 1 06:18:50 debian kernel: Loaded 74 symbols from 7 modules. Jun 1 06:18:50 debian kernel: Linux version (nisimura@debian) (gcc version (Debian prerelease)) #1 Sun Mar 9 12:30:59 JST 2003 Jun 1 06:38:49 debian -- MARK -- Jun 1 06:58:49 debian -- MARK -- Jun 1 07:18:49 debian -- MARK --

3 Jun 1 06:18:49 debian % dmesg -- MARK -- /var/log/syslog postfix May 31 16:45:39 debian postfix/smtpd[6197]: connect from localhost[ ] May 31 16:45:39 debian postfix/smtpd[6197]: 4F9B053E4F: client=localhost[ ] May 31 16:45:39 debian postfix/cleanup[6198]: 4F9B053E4F: message-id=<0000@example.ac.jp> May 31 16:45:39 debian postfix/smtpd[6197]: disconnect from localhost[ ] syslogd syslogd syslogd /var/log/apache/ syslogd syslogd syslogd syslogd syslogd syslogd

4 syslogd syslogd syslogd syslogd syslogd syslogd syslogd syslogd/etc/syslog.conf <TAB> auth,authpriv.* /var/log/auth.log /etc/syslog.conf #. mailerr

5 auth,authpriv.* *.*;auth,authpriv.none #cron.* daemon.* kern.* lpr.* mail.* user.* uucp.* mail.info mail.warn mail.err /var/log/auth.log -/var/log/syslog /var/log/cron.log -/var/log/daemon.log -/var/log/kern.log -/var/log/lpr.log -/var/log/mail.log -/var/log/user.log /var/log/uucp.log -/var/log/mail.info -/var/log/mail.warn /var/log/mail.err mail syslogd syslogdopenlog() syslog() openlog() mail syslogd

6 daemon daemon local1 local7 local1 local7 warning warn err error emerg panic

7 syslogd mail.info mail.warnmail.err info warn err mail.err err crit alert emerg err mail.=err = ; *.*;auth,authpriv.none *.* auth,authpriv.none *.* * *.* auth,authpriv.none, auth.none authpriv.none none auth,authpriv.none ; *.*;auth,authpriv.none info *.*;auth,authpriv.none;auth,authpriv.=info! news infoalert news.info;news.!alert syslogd

8 /var/log auth,authpriv.* *.*;auth,authpriv.none /var/log/auth.log -/var/log/syslog auth,authpriv.* /var/log/auth.log *.*;auth,authpriv.none /var/log/syslog / /dev/console mkfifo

9 /dev/ttyp?? bash csh syslogd syslog /etc/syslogd.conf/dev/console tail syslogd /etc/syslog.conf mail loghost loghostsyslogd *.alert root,nisimura

10 wall * *.=emerg * mkfifo syslog.conf mkfifo /etc/syslog.conf mail.*;mail.!=info /var/log/mail.log info mail /var/log/mail.log / *.=info;*.=notice; mail newsinfo noticeloghost / /etc/syslog.conf /etc/syslog.conf syslogd /etc/init.d/sysklogdsyslogd % sudo /etc/init.d/sysklogd restart

11 Stopping system log daemon: syslogd. Starting system log daemon: syslogd syslogd-r syslogd /etc/init.d/sysklogd # Options for start/restart the daemons # For remote UDP logging use SYSLOGD="-r" # SYSLOGD="" SYSLOGD="-r" % sudo /etc/init.d/sysklogd restart syslogdsyslogd syslogd syslogd syslogd syslogd syslogd iptables # iptables -A block -p udp --dport 514 -j DROP # iptables -A block -p udp -s /32 --dport 514 -j ACCEPT iptables

12 syslogd syslogd /var/log/syslog % sudo cp /dev/null /var/log/syslog % sudo /etc/init.d/sysklogd restart syslogd /var/log/syslog /var/log/syslog.0 /var/log/syslog/var/log/syslog.0 /var/log/syslog.1 /var/log/syslog.1 /var/log/syslog.2 /var/log/syslog /var/log/syslog.0 /var/log/syslog.1/var/log/syslog.2 /var/log/syslog.2 % sudo apt-get install cron logrotate cron logrotate croncron

13 apt-get exim exim (5) No configuration cron /etc/cron.weekly/sysklogd /etc/cron.daily/sysklogd /usr/sbin/syslogdlistfiles/usr/bin/savelog /var/log/syslog syslogd /etc/cron.weekly/sysklogd /etc/cron.daily /sysklogdsavelog -c cronlogrotate syslogd /etc/logrotate.d /etc/logrotate.d/ syslogd sshnisimura /var/log/auth.log PAM_unix[14689]: (ssh) session opened for user nisimura by (uid=1000) ssh PAM_unix[14694]: 1 more authentication failure; (uid=0) -> nisimura for ssh service PAM_unix[14696]: authentication failure; (uid=0) -> nisimura for ssh service sshd[14696]: Failed password for nisimura from port ssh2

14 nisimura ssh sudo: nisimura : TTY=pts/0 ; PWD=/home/nisimura ; USER=root ; COMMAND=/usr/bin/apt-get update sudo ssh/var/log/auto.log telnet/var/log/syslog in.telnetd[14751]: connect from Jun 1 03:25:23 wu-ftpd[14773]: connect from Jun 1 03:25:27 wu-ftpd[14773]: FTP LOGIN FROM dhcp100.example.ac.jp [ ], nisimura Jun 1 03:25:43 wu-ftpd[14773]: FTP session closed wu-ftpd syslogd

Microsoft PowerPoint - Linux入門 pptx

Microsoft PowerPoint - Linux入門 pptx Linux 入門サーバー OS としての Linux July, 13, 2009(Mon) 総合情報センター Linux 入門サーバー OS としての Linux 講座の目的 Linuxのインストールを体験する Linuxのサーバーとしての利用を体験する講座を始める前に時間の都合のためさっそくLinuxのインストールを始めます Linux のインストール (Ubuntu 8.10) CD-Rを入れてパソコンを起動