[real]

Hello, everyone

I would like to find a reference for making sense of the logs. I would just like to know how to read them so i can find the all the problems that I hope I don't have. or intrusions. Thanks for the help.

real

[real]

Anyone anyone?

[Arkham_c]

Which logs? syslog? http logs? Be specific. Here are some logs to consider:

Code:

-rw-r--r--    1 daemon   admin      243115 Sep 18 11:35 cups/access_log
-rw-r--r--    1 daemon   admin       20877 Sep 18 10:52 cups/error_log
-rw-r--r--    1 daemon   admin       25014 Sep 18 10:52 cups/page_log
-rw-r-----    1 root     admin       65733 Sep 18 15:30 ftp.log
-rw-r--r--    1 root     wheel      175406 Sep 18 15:31 httpd/access_log
-rw-r--r--    1 root     wheel       83313 Sep 17 17:46 httpd/error_log
-rw-r--r--    1 root     wheel       65611 Sep 19 14:21 kernel.log
-rw-r-----    1 root     admin       14112 Sep 19 14:27 lastlog
-rw-r-----    1 root     admin       13053 Sep 18 12:15 mail.log
-rw-r-----    1 root     admin      193737 Sep 18 16:48 netinfo.log
-rw-------    1 root     admin        8768 Sep 18 15:15 secure.log
-rw-r-----    1 root     admin       33779 Sep 19 14:21 system.log

Which one(s) did you want to know about?

[real]

Mainly the logs that show network traffic and any logs that have intrusion info. just want to know how to find out if the server has be messed with. I have a website and a backup server that I can access away from home.
Thanks for the help.