Linux log - para

[Kubanka Peter]

Debian etch, auth.log -ban találtam furcsaságot. Nemvagyok linux guru,
most kezdem kapisgálni csak hogy mi micsoda. De ezt nem értem
pontosan. 5 percenként fut egy cron parancs, az ok. 06.25 kor viszont
történt valami, az amit nem értek pontosan. A syslogd is újraindult,
tömörítette a logokat. Emiatt lehet a Succesful su for nobody by root?
Nemtudom. Segítsetek pls.

Előre is köszönöm.


/var/log/auth.log részlet

Feb  6 06:20:01 szerver CRON[19107]: (pam_unix) session opened for
user root by (uid=0)
Feb  6 06:20:17 szerver CRON[19107]: (pam_unix) session closed for user root
Feb  6 06:25:01 szerver CRON[19119]: (pam_unix) session opened for
user root by (uid=0)
Feb  6 06:25:01 szerver CRON[19121]: (pam_unix) session opened for
user root by (uid=0)
Feb  6 06:25:01 szerver su[19165]: Successful su for nobody by root
Feb  6 06:25:01 szerver su[19165]: + ??? root:nobody
Feb  6 06:25:01 szerver su[19165]: (pam_unix) session opened for user
nobody by (uid=0)
Feb  6 06:25:01 szerver su[19165]: (pam_unix) session closed for user nobody
Feb  6 06:25:01 szerver su[19169]: Successful su for nobody by root
Feb  6 06:25:01 szerver su[19169]: + ??? root:nobody
Feb  6 06:25:01 szerver su[19169]: (pam_unix) session opened for user
nobody by (uid=0)
Feb  6 06:25:01 szerver su[19169]: (pam_unix) session closed for user nobody
Feb  6 06:25:01 szerver su[19171]: Successful su for nobody by root
Feb  6 06:25:01 szerver su[19171]: + ??? root:nobody
Feb  6 06:25:01 szerver su[19171]: (pam_unix) session opened for user
nobody by (uid=0)
Feb  6 06:25:02 szerver su[19171]: (pam_unix) session closed for user nobody
Feb  6 06:25:05 szerver CRON[19119]: (pam_unix) session closed for user root
Feb  6 06:25:17 szerver CRON[19121]: (pam_unix) session closed for user root
Feb  6 06:30:01 szerver CRON[19253]: (pam_unix) session opened for
user root by (uid=0)
Feb  6 06:30:17 szerver CRON[19253]: (pam_unix) session closed for user root
Feb  6 06:25:01 fortress su[19169]: (pam_unix) session opened for user
nobody by (uid=0)
Feb  6 06:25:01 fortress su[19169]: (pam_unix) session closed for user nobody
Feb  6 06:25:01 fortress su[19171]: Successful su for nobody by root
Feb  6 06:25:01 fortress su[19171]: + ??? root:nobody
Feb  6 06:25:01 fortress su[19171]: (pam_unix) session opened for user
nobody by (uid=0)
Feb  6 06:25:02 fortress su[19171]: (pam_unix) session closed for user nobody
Feb  6 06:25:05 fortress CRON[19119]: (pam_unix) session closed for user root
Feb  6 06:25:17 fortress CRON[19121]: (pam_unix) session closed for user root
Feb  6 06:30:01 fortress CRON[19253]: (pam_unix) session opened for
user root by (uid=0)
Feb  6 06:30:17 fortress CRON[19253]: (pam_unix) session closed for user root

/var/log/messages
Feb  6 05:37:06 fortress -- MARK --
Feb  6 05:57:06 fortress -- MARK --
Feb  6 06:17:07 fortress -- MARK --
Feb  6 06:25:04 fortress syslogd 1.4.1#18: restart.
Feb  6 06:37:07 fortress -- MARK --
Feb  6 06:57:07 fortress -- MARK --
-- 
----------------------------------------------
Kubánka Péter
kubanka.peter at gmail.com