The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

mod_security audit_log empty file truncated

Discussion in 'Security' started by ramprage, May 17, 2006.

  1. ramprage

    ramprage Well-Known Member

    Joined:
    Jul 21, 2002
    Messages:
    667
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Canada
    While tail -f audit_log to watch for some recent rules I added, It just showed up this message:

    tail: audit_log: file truncated

    NowI see the log file is completely empty...

    -rw-r--r-- 1 root root 0 May 17 18:01 audit_log

    Anyone see this happening before, and know why?
     
  2. mctDarren

    mctDarren Well-Known Member

    Joined:
    Jan 6, 2004
    Messages:
    664
    Likes Received:
    2
    Trophy Points:
    18
    Location:
    New Jersey
    cPanel Access Level:
    Root Administrator
    Tail textinfo:
    Saw this once before, still don't know why. Maybe as you tailed the file it was hit by the restarted service and somehow tail read the file as shrinking. Wondering if tail itself might be nulling the file on some glitch when this happens...

    [edit]Hmmm, maybe restart of mod_security triggers a truncate/rewrite of the log for some reason... it's late and the brain is crawling...[edit]
     
    #2 mctDarren, May 18, 2006
    Last edited: May 18, 2006
Loading...

Share This Page