Unusual activity in the log
-
I considered posting to to the proxy board, but I wanted a wider opinion in case it could be intrusion related.
When I logged in to the GUI a few minutes ago I notice the last config change was today - which surprised me because I've not logged in today. Looking at the log, there seems to be a repeated task over the last 4 days which does not show many other times in the last 30 log entries.
Is there an easy explanation for this? Notice there are none between 10/31 and 11/14. I've not removed any lines:
11/16/15 18:38:01 11.9 151 KB (system): Installed cron task 'squidGuard_logrotate' for 'squidGuard' package
11/15/15 11:06:52 11.9 151 KB (system): Installed cron task 'squidGuard_logrotate' for 'squidGuard' package
11/14/15 15:06:41 11.9 151 KB (system): Installed cron task 'squidGuard_logrotate' for 'squidGuard' package
11/14/15 15:06:37 11.9 151 KB (system): Installed cron task 'squidGuard_logrotate' for 'squidGuard' package
10/31/15 11:06:35 11.9 151 KB (system): Installed cron task 'squidGuard_logrotate' for 'squidGuard' packageAny thoughts or comments on this activity?
thanks
andy -
Whenever a package resync is triggered, the cron tasks are recreated. No intrusion in there.