What does question mark symbol (?) mean in audictl/aureport as host or user?

0 投票
最新提问 用户: 匿名

By executing

aureport -au

on a CentOS7 machine, I noticed many failed connection attempts from '?' host and '?' user. What does '?' mean?

This is a piece of output:

============================================
# date time acct host term exe success event
============================================
250. 08/02/2016 22:30:12 ? ? pure-ftpd /usr/sbin/pure-ftpd no 123918
251. 08/02/2016 22:30:19 ? ? pure-ftpd /usr/sbin/pure-ftpd no 123919
252. 08/02/2016 22:30:24 ? ? pure-ftpd /usr/sbin/pure-ftpd no 123920
253. 08/02/2016 22:30:30 ? ? pure-ftpd /usr/sbin/pure-ftpd no 123921

登录 或者 注册 后回答这个问题。

欢迎来到 Security Q&A ,有什么不懂的可以尽管在这里提问,你将会收到社区其他成员的回答。
...