It was bound to happen - suspected hack

[Dustin Decker]

> -----Original Message-----
> From: kclug-bounces at kclug.org [mailto:kclug-bounces at kclug.org] On Behalf
> Of Matt Graham
> Sent: Thursday, October 21, 2004 10:10 AM
> To: kclug at kclug.org
> Subject: Re: It was bound to happen - suspected hack
> Where does one find a security log on their system, and how does one
> monitor it for possible problems?

Have a look at the contents of /var/log, particularly:
messages
secure
maillog

You can peruse them with something like:
less /var/log/messages

Hope that gets you started - there are complete volumes of information one
should acquaint themselves with if really serious.

D.