Marcelo Roccasalva wrote:> On Tue, Jan 30, 2018 at 3:26 PM, <m.roth at 5-cent.us> wrote: >> >> This is.... odd. >> >> We're seeing a *lot* of >> sshd[8400]: Timeout, client not responding. > > Is it possible you are testing ssh availability from nagios, monit, or > some other software that connects to the port 22 without logging in? >Ok, I guess I wasn't clear. First, selinux is in permissive mode. Second, I, my manager, and another user have all logged into the server. Yet lastlog | grep -v Never shows only root and the years-old security account. It doesn't show any of us. mark
Interesting. lastlog was always my go-to. However, at least in C6, last
gets it, while lastlog does not.
How odd.
mark
On 01/30/18 16:21, m.roth at 5-cent.us wrote:> Interesting. lastlog was always my go-to. However, at least in C6, last > gets it, while lastlog does not. > > How odd.Did you check /var/log/secure ? last command not mentioning logged i9n users will raise very big red flag for me. I also would check for something benign, like full filesystem. And hard drive errors. But the very first thing I would do: check the integrity of your box - whichever host integrity tool you use... Good luck. Valeri> > mark > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/listinfo/centos >-- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++