Re: Recommendations on a daily script to check syslog (or other) server security

2009-04-15 Thread Dan Carley
2009/4/14 LeRoy, Ted > Hello folks, > > I'm pretty new to OpenBSD and BSD in general, but I have an OpenBSD > Syslog server up and receiving data. I'd like to have the system be > pretty secure, and I'd like to monitor its security via a simple script > that runs daily. > > Here's what I have in

Re: Recommendations on a daily script to check syslog (or other) server security

2009-04-14 Thread Stuart Henderson
On 2009-04-14, LeRoy, Ted wrote: > Here's what I have in the script at the present time: > > { uptime ; date ; who ; ps -al ; cat /var/log/adduser ; cat > /var/log/authlog ; cat /var/log/messages ; cat /var/log/secure ; cat > /var/log/router ; } > daily-log.txt you might be interested to check ou

Re: Recommendations on a daily script to check syslog (or other)server security

2009-04-14 Thread LeRoy, Ted
Last was a cool command to learn. Sincerely, Ted -Original Message- From: Ingo Schwarze [mailto:schwa...@usta.de] Sent: Tuesday, April 14, 2009 4:11 PM To: LeRoy, Ted Cc: misc@openbsd.org Subject: Re: Recommendations on a daily script to check syslog (or other)server security Hi Ted,

Re: Recommendations on a daily script to check syslog (or other) server security

2009-04-14 Thread Ingo Schwarze
Hi Ted, LeRoy, Ted wrote on Tue, Apr 14, 2009 at 03:28:51PM -0400: > I'm pretty new to OpenBSD and BSD in general, In that case, welcome, but don't forget to read the fine manuals. Have a look at apropos(1) in particular. > but I have an OpenBSD Syslog server up and receiving data. > I'd like t

Re: Recommendations on a daily script to check syslog (or other) server security

2009-04-14 Thread Ted Unangst
On Tue, Apr 14, 2009 at 3:28 PM, LeRoy, Ted wrote: > Hello folks, > > I'm pretty new to OpenBSD and BSD in general, but I have an OpenBSD > Syslog server up and receiving data. I'd like to have the system be > pretty secure, and I'd like to monitor its security via a simple script > that runs dai

Re: Recommendations on a daily script to check syslog (or other) server security

2009-04-14 Thread Joe Gidi
> Hello folks, > > I'm pretty new to OpenBSD and BSD in general, but I have an OpenBSD > Syslog server up and receiving data. I'd like to have the system be > pretty secure, and I'd like to monitor its security via a simple script > that runs daily. > > Here's what I have in the script at the pres

Re: Recommendations on a daily script to check syslog (or other) server security

2009-04-14 Thread Cezary Morga
LeRoy, Ted wrote: > Can some of you BSD pro's out there recommend some additions or changes > or other things that should be checked to help ensure the system isn't > compromised? For log monitoring try logsentry. > Is there a way to see who has logged into the system over a given period > for ex

Re: Recommendations on a daily script to check syslog (or other) server security

2009-04-14 Thread Matheus Weber da Conceição
Hello... w = show who is logged on last -5 = show listing of last logged in users (the -5 parameters will show the last 5 logged in users) Cya On Tue, Apr 14, 2009 at 4:28 PM, LeRoy, Ted wrote: > Hello folks, > > I'm pretty new to OpenBSD and BSD in general, but I have an OpenBSD > Syslog serv

Recommendations on a daily script to check syslog (or other) server security

2009-04-14 Thread LeRoy, Ted
Hello folks, I'm pretty new to OpenBSD and BSD in general, but I have an OpenBSD Syslog server up and receiving data. I'd like to have the system be pretty secure, and I'd like to monitor its security via a simple script that runs daily. Here's what I have in the script at the present time: { u