14 Jun
2024
14 Jun
'24
2:26 a.m.
On Thu, 13 Jun 2024, Arrigo Triulzi via TUHS wrote:
Binary logs, ’nuff said.
Ugh...
Good sysadmins live & die by grep and being able
to visually detect
departures from the norm by just looking at the “shape” of logs
scrolling down a screen (before), terminal window now.
Which is exactly what I do: one window with "tail -F /var/log/maillog" and
another with "tail -F /var/log/httpd-access.log"; I've spotted lots of
attacks that way (followed by a quick update to my firewall).
-- Dave