Audit Logs Source Of Account Triggering It.

Home » CentOS » Audit Logs Source Of Account Triggering It.
CentOS 1 Comment

Hi.

The auditd logs are full of lines referencing 28756E6B6E6F776E207573657229
, but I can’t identify this account

type=USER_LOGIN msg=audit(1364926580.306:249814): user pid”565 uid=0
auidB94967295 sesB94967295 msg=’op=login acct(756E6B6E6F776E207573657229 exe=”/usr/sbin/sshd” hostname=?
addr7.0.0.1 terminal=ssh res

One thought on - Audit Logs Source Of Account Triggering It.

  • Am 08.04.2013 07:04, schrieb Gregory Machin:

    Looks like a hex dump of an ASCII string:

    28756E6B6E6F776E207573657229
    ( u n k n o w n u s e r )

    HTH
    T.

LEAVE A COMMENT