Home / Labs / Read the System Log

Read the System Log

Syslog shows what the kernel saw. Find which firewall probe got through.

Open this lab

Commands practised here

• grep 'UFW BLOCK' /var/log/syslogShows all firewall blocks.
• grep 'UFW ACCEPT' /var/log/syslogShows all firewall accepts.
• grep 'crond' /var/log/syslogShows cron job activity.
• cat /var/log/syslog | awk '{print $5}' | sort | uniq -c | sort -rnShows which services generate the most log entries.

Nearby labs

• All labsBrowse the full list.
• Exam prepWhich exams these objectives map to.
• Discover Open Services
• Fingerprint the Target