Mailing List Archive
Support open source code!
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [tlug] Have I been hacked?
- To: tlug@example.com
- Subject: Re: [tlug] Have I been hacked?
- From: Christopher SEKIYA <wileyc@example.com>
- Date: Sat, 2 Mar 2002 14:22:39 +0900
- Content-disposition: inline
- Content-type: text/plain; charset=us-ascii
- In-reply-to: <200203020504.g2254HE09253@example.com>
- References: <200203020504.g2254HE09253@example.com>
- User-agent: Mutt/1.3.25i-ja.1
On Sat, Mar 02, 2002 at 04:04:17PM +1100, Jim Breen wrote: > 15:55:51.083588 eth0 > 0:0:0:0:0:0 0:10:a4:11:30:2a 66: CPE-144-132-16-104.vic.bigpond.net.au.1333 > proximity.globalgold.co.uk.www: tcp 0 (DF) Huh. That's not good. > Any suggestions what I should look for, if there are any nasty surprises > installed? Boot from a rescue floppy, use its included ls and cat, see what binaries on your hard drive have been altered recently. You can no longer trust any binary on your system. -- Chris "tripwire would have prevented this" Sekiya
- References:
- [tlug] Have I been hacked?
- From: Jim Breen
- [tlug] Have I been hacked?
- Prev by Date: [tlug] Have I been hacked?
- Next by Date: Re: [tlug] Have I been hacked?
- Previous by thread: [tlug] Have I been hacked?
- Next by thread: Re: [tlug] Have I been hacked?
- Index(es):
| Home Page | Mailing List | Linux and Japan | TLUG Members | Links |