Re: [CentOS] secure file not updating

2008-12-14 Thread Filipe Brandenburger
Hi, On Sun, Dec 14, 2008 at 21:25, Mike -- EMAIL IGNORED wrote: > Very interesting analysis. swatch uses tail -f, or something > that mimics it to watch the file. I would then guess that as > per your explanation, swatch contilues to watch the "old file". Yes, actually using "tail -f" in a ter

Re: [CentOS] secure file not updating

2008-12-14 Thread Mike -- EMAIL IGNORED
On Sun, 14 Dec 2008 20:47:36 -0500, Filipe Brandenburger wrote: > Hi, > > On Sun, Dec 14, 2008 at 15:26, Mike -- EMAIL IGNORED > wrote: >> If I do a vi on the secure file and write it from vi, it stops >> recording. > > Yes, that's the expected behaviour, because "vi" will actually write a > ne

Re: [CentOS] secure file not updating

2008-12-14 Thread Filipe Brandenburger
Hi, On Sun, Dec 14, 2008 at 15:26, Mike -- EMAIL IGNORED wrote: > If I do a vi on the secure file and write it from vi, it stops recording. Yes, that's the expected behaviour, because "vi" will actually write a new file and rename it to /var/log/secure, so syslog will no longer be writing to tha

Re: [CentOS] secure file not updating

2008-12-14 Thread Mike -- EMAIL IGNORED
On Sun, 14 Dec 2008 02:25:17 +, Mike -- EMAIL IGNORED wrote: > Further examination shows numerous log lines that were detected on Dec > 12 by swatch using tail on the secure file but do not presently appear > in the secure file. However, they do appear in the messages file. > > Mike. Here a

Re: [CentOS] secure file not updating

2008-12-13 Thread Mike -- EMAIL IGNORED
Further examination shows numerous log lines that were detected on Dec 12 by swatch using tail on the secure file but do not presently appear in the secure file. However, they do appear in the messages file. Mike. ___ CentOS mailing list CentOS@centos.

Re: [CentOS] secure file not updating

2008-12-13 Thread Mike -- EMAIL IGNORED
On Sat, 13 Dec 2008 11:33:06 -0600, Barry Brimer wrote: On my Centos 5 server, the secure file has not updated since Dec 10. This despite the fact that I run an sshd server that I access many times per day. Most peculiar is the fact that a swatch monitor that I run on the secu

Re: [CentOS] secure file not updating

2008-12-13 Thread Barry Brimer
>>> On my Centos 5 server, the secure file has not updated since Dec 10. >>> This despite the fact that I run an sshd server that I access many >>> times per day. Most peculiar is the fact that a swatch monitor that I >>> run on the secure file catches plenty of lines. It is as if when >>> swatch

Re: [CentOS] secure file not updating

2008-12-13 Thread Mike -- EMAIL IGNORED
On Fri, 12 Dec 2008 22:43:46 -0600, Barry Brimer wrote: >> On my Centos 5 server, the secure file has not updated since Dec 10. >> This despite the fact that I run an sshd server that I access many >> times per day. Most peculiar is the fact that a swatch monitor that I >> run on the secure file

Re: [CentOS] secure file not updating

2008-12-12 Thread Barry Brimer
> On my Centos 5 server, the secure file has not updated > since Dec 10. This despite the fact that I run an > sshd server that I access many times per day. Most > peculiar is the fact that a swatch monitor that I run > on the secure file catches plenty of lines. It is > as if when swatch catche

[CentOS] secure file not updating

2008-12-12 Thread Mike -- EMAIL IGNORED
On my Centos 5 server, the secure file has not updated since Dec 10. This despite the fact that I run an sshd server that I access many times per day. Most peculiar is the fact that a swatch monitor that I run on the secure file catches plenty of lines. It is as if when swatch catches a line in