[Chugalug] /var/log/messages not sorted correctly

Lynn Dixon boodaddy at gmail.com
Sat Nov 10 20:15:27 UTC 2012


Check the system clock for drift and then try restarting rsyslog

Is it setup for ntp? I I can tell you if it's running on VMware and getting
it's time from what the os thinks is the "hardware", clock its going to
drift. Vmware has a hard time keeping time especially on vmotion hosts.
On Nov 10, 2012 2:39 PM, "Stephen Kraus" <ub3ratl4sf00 at gmail.com> wrote:

> Sounds compromised, either way seems like its going to need to be re-done,
> so might as well push the client onto a more supportable back end
> On Nov 10, 2012 2:30 PM, "David White" <dwrudy at gmail.com> wrote:
>
>> I inherited the task to support a large website running on a cPanel
>> server (I hate cpanel and refuse to touch it as much as possible) that is
>> hosted and managed by a different company (not me).
>>
>> After today, it might be time for me to convince the site owners to
>> switch to me. =)
>>
>> Anyone ever heard of a CentOS /var/log/messages file showing entries that
>> are completely (and randomly) out of order?
>>
>> I've engaged the web hosting provider, as the website is currently giving
>> off 500s. I manually went through the access_log, and discovered it has
>> been that way since a little after 1:45am this morning.
>>
>> /var/log/messages look fine before and after a chunk of time in that
>> range, but right around thing, things look really screwed up.
>>
>> I'm thinking either...
>> * cPanel sucks
>> * This server has been compromised (good thing I took backups of
>> everything just about a week ago)
>> * Both
>>
>> Thoughts?
>>
>> --
>> - David White -
>> Smooth Stone Services *(soon to be CENTS)*
>> *Computing, Equipping, Networking, Training & Supporting *
>> *Nonprofit Organizations Worldwide*
>>
>> Existing Website: http://www.smoothstoneservices.com
>> New Website (coming soon): http://developCENTS.com
>>
>>
>> _______________________________________________
>> Chugalug mailing list
>> Chugalug at chugalug.org
>> http://chugalug.org/cgi-bin/mailman/listinfo/chugalug
>>
>>
> _______________________________________________
> Chugalug mailing list
> Chugalug at chugalug.org
> http://chugalug.org/cgi-bin/mailman/listinfo/chugalug
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://chugalug.org/pipermail/chugalug/attachments/20121110/7ba49b93/attachment.html>


More information about the Chugalug mailing list