[CentOS] Today's log - yum entries

Sun May 11 14:24:04 UTC 2008
Ned Slider <ned at unixmail.co.uk>

Filipe Brandenburger wrote:
> Hi,
> 
> On Sun, May 11, 2008 at 5:26 AM, Ned Slider <ned at unixmail.co.uk> wrote:
>>  I have the following entries, below, in today's log file (for yesterday,
>> 10th May).
>>
>>  I don't run the automated yum-updated and didn't run a yum update
>> yesterday, and no packages were installed. Obviously the entries are old.
>>
>>  I was wondering if anyone could offer an explanation?
> 
> Syslog does not print the year on log lines. Once I saw some strange
> behaviour similar to yours. I had a script that grep'd the logs for
> yesterday's date and sent it to me by e-mail. One day, I saw several
> SSH attempts from IPs that were empty, and IPs being resolved to names
> that were not the right ones. Then I logged in to the machine, looked
> at /var/log/secure and realized what happened. The logs were over one
> year old now. Maybe check /var/log/yum.log to see if that is what
> happened.
> 
> By the way, you say "today's log file", but to what log file are you
> referring? The output you show is not from /var/log/yum.log, is it
> some post processing?
> 
> HTH,
> Filipe

Yes, you're absolutely right Filipe, I just noticed it myself.

The logs are from syslog?? emailed to root each day. When I checked 
/var/log/yum.log as Akemi suggested, indeed there were matching entries 
for 10 May, but from 2007 without the year present, so it looks like 
syslog parsed /var/log/yum.log and returned anything matching '10 may'.

Thanks for your help!

Ned