Unusual activity in the log



  • I considered posting to to the proxy board, but I wanted a wider opinion in case it could be intrusion related.

    When I logged in to the GUI a few minutes ago I notice the last config change was today - which surprised me because I've not logged in today.  Looking at the log, there seems to be a repeated task over the last 4 days which does not show many other times in the last 30 log entries.

    Is there an easy explanation for this?  Notice there are none between 10/31 and 11/14. I've not removed any lines:

    11/16/15 18:38:01 11.9 151 KB (system): Installed cron task 'squidGuard_logrotate' for 'squidGuard' package
    11/15/15 11:06:52 11.9 151 KB (system): Installed cron task 'squidGuard_logrotate' for 'squidGuard' package
    11/14/15 15:06:41 11.9 151 KB (system): Installed cron task 'squidGuard_logrotate' for 'squidGuard' package
    11/14/15 15:06:37 11.9 151 KB (system): Installed cron task 'squidGuard_logrotate' for 'squidGuard' package
    10/31/15 11:06:35 11.9 151 KB (system): Installed cron task 'squidGuard_logrotate' for 'squidGuard' package

    Any thoughts or comments on this activity?

    thanks
    andy


  • Banned

    Whenever a package resync is triggered, the cron tasks are recreated. No intrusion in there.


Log in to reply