I may be totally wrong on this, but I thought id check is logged when the
output of 'id' is detected within traffic, i.e.: uid=(root), gid=0(wheel).


_________________________________________
John Daniele
Technical Security & Intelligence
Toronto, ON
Voice:  (416) 605-2041
E-mail: [EMAIL PROTECTED]
Web:    http://www.tsintel.com



Reply via email to