Re: Mail for Root

2001-12-06 Thread Aaron Konstam
On Wed, Dec 05, 2001 at 06:37:06PM -0800, Mark Seven Smith wrote: On Wednesday 05 December 2001 06:35 am, Aaron wrote: Running tripwire is a disaster until you know how to configure it and run it. It will produce more output then you willl know what to do with. I don't recognise the

Re: Mail for Root

2001-12-05 Thread Mark Seven Smith
On Tuesday 04 December 2001 01:42 pm, you wrote: SNIP! What alert program are you using? I have no idea! And I don't know how to find out...this is all what came set up...I DID run something to start something called tripwire (and now I'm sorry)...a mail came as soon as I booted RH7.1 for

RE: Mail for Root

2001-12-05 Thread Antti Hakulinen
- From: Mark Seven Smith [mailto:[EMAIL PROTECTED]] Sent: 5. joulukuuta 2001 10:25 To: [EMAIL PROTECTED] Subject: Re: Mail for Root On Tuesday 04 December 2001 01:42 pm, you wrote: SNIP! What alert program are you using? I have no idea! And I don't know how to find out...this is all what came

Re: Mail for Root

2001-12-05 Thread Aaron Konstam
On Wed, Dec 05, 2001 at 12:25:18AM -0800, Mark Seven Smith wrote: On Tuesday 04 December 2001 01:42 pm, you wrote: SNIP! What alert program are you using? I have no idea! And I don't know how to find out...this is all what came set up...I DID run something to start something

RE: Mail for Root

2001-12-05 Thread Taylor, ForrestX
On Tuesday 04 December 2001 01:42 pm, you wrote: SNIP! What alert program are you using? I have no idea! And I don't know how to find out...this is all what came set up...I DID run something to start something called tripwire (and now I'm sorry)...a mail came as soon as I booted

Re: Mail for Root

2001-12-05 Thread Steven J. Yellin
Some places to look for what jobs are automatically periodically run are 1) /var/spool/cron has everybody's crontab files. If root has one, the file will be named root, for example. The crontab files say what each user who has one wants to be run and when it should be run. 2) /etc/crontab

Re: Mail for Root

2001-12-05 Thread Devon
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 05 December 2001 09:37 pm, Mark Seven Smith wrote: Erm, yeppers, I've noticed! So: since my work on the flux capacitor is still ongoing, and therefore I cannot go back in time and undo my tripwire initialization, how do I stop it?

Re: Mail for Root

2001-12-05 Thread Mark Seven Smith
On Wednesday 05 December 2001 10:25 am, Forrest wrote: This is not from tripwire. The original message had this line: X-Mailer: /usr/lib/mon/alert.d/mail.alert Try rpm -q --whatprovides /usr/lib/mon/alert.d/mail.alert o see if it is an rpm package. Otherwise, do you remember installing

Re: Mail for Root

2001-12-05 Thread Devon
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 05 December 2001 10:04 pm, Mark Seven Smith wrote: I looked: there are a handful of PERL files: alert.template mail.alert qpage.alert snpp.alert trap.alert file.alert netpage.alert remote.alert test.alert I did the rpm

Re: Mail for Root

2001-12-05 Thread Mark Seven Smith
On Wednesday 05 December 2001 07:08 pm, Devon wrote: Your not using it anyway, so: 'rpm -e mon' should solve the problem nicely. Heh! I LIKE the way you are thinking! :-) Good enough! Thanks, --Mark VII ___ Seawolf-list mailing list [EMAIL

Re: Mail for Root

2001-12-05 Thread Steven J. Yellin
To find out about the mon service, one place to start is by typing rpm -ql mon. It will show there's a file /etc/rc.d/init.d/mon, which probably means mon is known by chkconfig. The command chkconfig --list mon will tell you the status of mon; it's probably on in levels 3, 4, and 5. The

Re: Mail for Root

2001-12-05 Thread Mark Seven Smith
On Wednesday 05 December 2001 11:52 am, Forrest wrote: The easiest way to check the cron entries in /etc/ for telnet is to do this: # cd /etc # grep -r telnet cron* This will show the file(s) and the line that contained the telnet command. WHOA! What a powerful command! I have been

Re: Mail for Root

2001-12-05 Thread Mark Seven Smith
Extremely useful information here. There is no MAN page anywhere that would tell all of this; I've been trying to figure this out, but not even knowing where to start. Thank you very much for this. Regards, Mark VII [EMAIL PROTECTED] On Wednesday 05 December 2001 07:31 pm, Steven J. Yellin