On Sat, 20 Sep 2003, mike wrote: > recently I have noticed a lot of small traffic thru my internet > connection ( eth1 ) even when I'm not surfing. How Can I determine if > I'm being used as a zombie, or have otherwise been compromised? > > I use a cable modem, and share this with my wifes windoze box. I run > firestarter as the firewall.
Besides watching the traffic, installing and running chkrootkit is a good way to test for whether or not your system has been compromised. There is an MDK RPM for it for the recent (9.x) releases; it's in contribs, IIRC. -- Bill Mullen [EMAIL PROTECTED] MA, USA RLU #270075 MDK 8.1 & 9.0 "Listen, here's the thing. If you can't spot the sucker in your first half hour at the table, then you *are* the sucker." - Mike McDermott
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
