cron log?

Erik Hemdal ehemdal at townisp.com
Mon May 9 00:08:48 UTC 2005


> Actually I should have said the cron log email!
> 
> k...
> 
> >Below is my cron log.  Anybody know what it means?
> >
> >Thanks,
> >
> >knute...
> >
> >/etc/cron.daily/00webalizer:
> >
> >Error: Skipping oversized log record
> >Error: Skipping oversized log record
> >Error: Skipping oversized log record
> >Error: Skipping oversized log record
> >Error: Skipping oversized log record
> >Error: Skipping oversized log record
> >Error: Skipping oversized log record
> >Error: Skipping oversized log record
> >Error: Skipping oversized log record
> >-- 
> >Knute Johnson
> >Molon Labe...
> >

I've seen this when I set up a web server on port 80, and I got hit by a
script kiddie.  This looks like it's from logwatch's daily mail, and
logwatch is trying to report an HTTP request that is malformed trying to
crack your server.  Since the request is deliberately broken....oversized to
try to exploit a buffer overrun weakness, the log records get too long for
webalizer to deal with.  So this is all that logwatch can report.

Erik

> >
> >
> >-- 
> >fedora-list mailing list
> >fedora-list at redhat.com
> >To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
> >
> >
> 
> -- 
> Knute Johnson
> Molon Labe...
> 
> 
> 
> 
> 
> ------------------------------
> 
> --
> fedora-list mailing list
> fedora-list at redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-list
> 
> End of fedora-list Digest, Vol 15, Issue 76
> *******************************************





More information about the fedora-list mailing list