Alexander~ Thank you for the reply. There's a wealth of information in those two files! I'll definitely make it a point to track them often. btw - I hope I separated this correctly. I didn't want this to confuse the main topic. Regards, John Dangler GenoFit 800-505-4078 (Corporate) 386-767-3730 (Direct) www.genofit.com jdangler@xxxxxxxxxxx -----Original Message----- From: fedora-list-bounces@xxxxxxxxxx [mailto:fedora-list-bounces@xxxxxxxxxx] On Behalf Of Alexander Dalloz Sent: Saturday, July 17, 2004 5:29 PM To: For users of Fedora Core releases Subject: Re: hack attempt on my server...What do you do about this? Am Sa, den 17.07.2004 schrieb John Dangler um 21:53: > As a newbie to this myself, I'm curious to know where you found that > information (what logs). > John Dangler /var/log/messages /var/log/secure Both logfiles are inspected by the daily logwatch run, so at least you will be alarmed by the daily logwatch mail, if not constantly running a "tail -f /var/log/messages" in a terminal window to see what's going on. Alexander -- Alexander Dalloz | Enger, Germany | GPG key 1024D/ED695653 1999-07-13 Fedora GNU/Linux Core 2 (Tettnang) Athlon CPU kernel 2.6.6-1.435.2.3.uml Serendipity 23:26:54 up 4 days, 21:09, load average: 0.62, 0.88, 0.64