Mailinglist Archive: opensuse-security (465 mails)

< Previous Next >
Re: [suse-security] Attack or not?
  • From: johannes.marloth@xxxxxxxxxxx (Johannes Marloth)
  • Date: Sun, 30 Dec 2001 12:04:00 +0100
  • Message-id: <PM-CH.20011230120400.E2ECD.1.1D@xxxxxxxxxxxxxxxxxx>
Hi Erwin,

* Sun, 30 Dec 2001 11:38:48 +0100 Erwin Zierler wrote:
> Hi all,
>
> I have recently found the following lines in /var/log/messages on
one of
> my servers running SuSE 7.0, kernel 2.2.16, openssh-2.1.1p1-19:
>
> Dec 28 09:21:10 server -- MARK --
> ^@^@^@^@^@^@^@^@^@^@^[...] [many many more of this]
> Dec 28 14:34:46 server syslogd 1.3-3: restart.

I hope that this isn't an attack, as I see it, the server had a
systemfailure?! 2 or 3 months ago my system had a kernel panic with
the ^@^@.... in the messages-file, so perhaps it's the same....
Perhaps you'll check with find / -mtime 2 what was changed in the
last 2 days...

HTH
Johannes


< Previous Next >
This Thread
  • No further messages