Re: [expert] Possible Hack? -- Change in Suid Root files found

[Ron Stodden]

David Rankin wrote:

    I need help. Something went whacko with eth0 and with my system just
before my nightly cron job ran and I got a lot of weird messages in my
log files. I don't know if this was a successful hack or if it was just
a noral response from the system after eth0 went bonkers. The log
entries are as follows:

Dec 26 03:54:01 Nemesis kernel: eth0: Tx hung, 2256843 vs. 2256833.
Dec 26 03:54:01 Nemesis kernel: eth0: PNIC2 transmit timed out, status

Assuming you have > 1 NICs...

The rules by which the kernel assigns eth numbers to the NICs are not published.

In my experience, you cannot preset what eth number is assigned. Nor can you depend on a NIC always being assigned the same eth number (maybe what has happened to you?).

I believe the arp command probably has the ability to change the eth number based on the MAC address of the NIC.

--
Ron. [Melbourne, Australia]
troels... now updated to use ftp.sunet.se server.
See: http://members.optusnet.com.au/ronst/

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com