Robert Nichols wrote:
Filipe Brandenburger wrote:
Hi,
On Sun, May 11, 2008 at 5:26 AM, Ned Slider ned@unixmail.co.uk wrote:
I have the following entries, below, in today's log file (for yesterday, 10th May).
I don't run the automated yum-updated and didn't run a yum update yesterday, and no packages were installed. Obviously the entries are old.
I was wondering if anyone could offer an explanation?
Syslog does not print the year on log lines. Once I saw some strange behaviour similar to yours. I had a script that grep'd the logs for yesterday's date and sent it to me by e-mail. One day, I saw several SSH attempts from IPs that were empty, and IPs being resolved to names that were not the right ones. Then I logged in to the machine, looked at /var/log/secure and realized what happened. The logs were over one year old now. Maybe check /var/log/yum.log to see if that is what happened.
I fixed that problem for yum by editing /etc/logrotate.d/yum and changing "size 30k" to "size 10k". For CentOS, a 10 kilobyte log file is enough to hold several months of yum activity, but small enough that the file will be rotated before a year passes. You might also explore the "monthly" or "yearly" options in logrotate. Right now I don't recall what I didn't like about using those with the yum logs.
Thanks for that Bob. My yum.log was 28K so I've knocked the size setting down to 20K and will see how that goes.
Thanks again,
Ned