On Wednesday 26 March 2003 14:50, Eugene Crosser wrote:
>
> ... having got root access for that... with ptrace exploit maybe?
> try to match `last' output with the modification times of the files.
>
The hard drive is on a Linux PC, is there some file i can look at.
I looked at most of the log files didn't see anything obvious.
I am begining to wonder if it wasn't the server admin that did it.
Gerald
--
http://frontstreetnetworks.com | http://store.raqware.com
Front Street Networks LLC | Phone: 203-785-0699
229 Front Street, Ste #C, New Haven, CT 06513-3203
_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security
