[BlueOnyx:06995] Re: Find remote ip in logs

[Richard Morgan]

Hi

Most of these are the system checking certain services are running or 
failing.  Do they appear quite regularly throughtout the log?  The swatch 
script runs every 15 mins.

Regards, Richard

----- Original Message ----- 
From: "Maurice de Laat" <mdlaat at muisnetwerken.nl>
To: <blueonyx at blueonyx.it>
Sent: Saturday, April 09, 2011 1:45 PM
Subject: [BlueOnyx:06933] Find remote ip in logs


> Hi list,
>
> More and more I see these kind of security warnings in my
> /var/log/messages:
> Apr  8 11:08:29 arie saslauthd[3489]: do_auth         : auth failure:
> [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
>
>
> However, there is no remote ip given. It also can't be found in maillog.
>
> Does anybody know how I can find the offending remote ip?
>
> Thanks
> -- 
> Maurice de Laat
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at blueonyx.it
> http://www.blueonyx.it/mailman/listinfo/blueonyx