Re: [cobalt-users] Hackers File?

[flash22@xxxxxxx]

On Wed, 7 Mar 2001, Cobalt wrote:

> Hi everyone,
> 
> Below are the files that exist in my RaQ3 /var/log directory. There are 6
> files which I find suspicious.
> boot.log,  sendmail.st, spooler, lastlog,  xferlog & xferlog.1
> Are these files suppose to be there?
> I deleted sendmail.st yesterday but now its back again.
> lastlog was empty when I use vi to see the file.

Yes, these all appear reasonable, the .1 files are what you get after the
logs are rotated once...(the original becomes orig.1, and a new file is
created)
sendmail.st has statistics from sendmail, stop deleting it ;)
run mailstats to see what's in it

lastlog looked empty because it's a binary file ;) 
run the program 'last' to
dump it out (just type last, it knows where to look, that's all it does,
list the last logins)
(as a general rule, deleting things because you don't know what they are
is evil ;)

gsh