On Wednesday 26 March 2003 14:14, Gerald Waugh wrote: > On Wednesday 26 March 2003 13:47, Gerald Waugh wrote: > > We have a client's RaQ3i > > That stops at "Checking Disk" > > > > The serial console also hangs here! > > > > CSLIP: code copyright 1989 Regents of the University of California > > PPP: version 2.3.7 (demand dialling) > > PPP line discipline registered. > > device eth0 entered promiscuous mode > > > > I don't recall seeing this on other systems! > > I pulled the drive and ran fsck, OK! > > Is this normal, or has the server been hacked? > > BTW its a RaQ4 > Also noticed, recent > /boot/config-2.4.8-26mdk Mar 26 > /boot/vmlinux-2.4.8-26mdk Mar 26 > Are they normal?
NO they are not normal!!! looks like someone tried to install a new kernel. I wonder if the client did that? Gerald -- http://frontstreetnetworks.com | http://store.raqware.com Front Street Networks LLC | Phone: 203-785-0699 229 Front Street, Ste #C, New Haven, CT 06513-3203 _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
