nerdexam
GIAC

GCIA · Question #86

Adam works on a Linux system. He is using Sendmail as the primary application to transmit e- mails. Linux uses Syslog to maintain logs of what has occurred on the system. Which of the following log fi

The correct answer is C. /var/log/mailog. On Linux systems using Syslog, Sendmail and mail service activity is recorded in /var/log/maillog, which captures source and destination addresses, timestamps, and message metadata.

Network Forensics, Protocol Insecurity & Evasion Techniques

Question

Adam works on a Linux system. He is using Sendmail as the primary application to transmit e- mails. Linux uses Syslog to maintain logs of what has occurred on the system. Which of the following log files contains e-mail information such as source and destination IP addresses, date and time stamps etc?

Options

  • A/log/var/mailog
  • B/var/log/logmail
  • C/var/log/mailog
  • D/log/var/logd

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    9% (3)
  • C
    72% (23)
  • D
    16% (5)

Why each option

On Linux systems using Syslog, Sendmail and mail service activity is recorded in /var/log/maillog, which captures source and destination addresses, timestamps, and message metadata.

A/log/var/mailog

/log/var/mailog uses an inverted directory structure - Linux system logs are stored under /var/log/, not /log/var/.

B/var/log/logmail

/var/log/logmail is not a valid or recognized log file name used by Syslog or Sendmail on any standard Linux distribution.

C/var/log/mailogCorrect

The standard Syslog facility on Linux directs mail-related daemon output to /var/log/maillog (rendered as /var/log/mailog in this question). This file records Sendmail events including source and destination IP addresses, message IDs, and timestamps. It is the canonical location for mail service diagnostics on most Linux distributions.

D/log/var/logd

/log/var/logd uses an incorrect directory hierarchy and does not correspond to any recognized Syslog output file.

Concept tested: Linux Syslog mail log file location

Source: https://linux.die.net/man/5/syslog.conf

Topics

#Syslog#mail logs#Sendmail#Linux logging

Community Discussion

No community discussion yet for this question.

Full GCIA Practice