On 03/05/02 12:57 +0530, Arvind wrote:
<snip> 
> i keep seeing ssh-agent1 and ssh-askpass1 and files like that.
> ssh-agent is a symbolic link to ssh-agent1  and respectively for the other
> files as well.
> 
> could i have been hacked ?
Standard questions:
Do you have wierd running processes? Using a known clean static build of
ps.
Do you have unusual ports open and listening? Using nmap from another
box.
Have the md5sums of any binaries changed? Using clean copies of md5sum.
Did you install those binaries in /usr/local/bin?
Did another administrator install them?
Were you unpatched for stuff?

LART:
Don't use hacked when you mean cracked.
Crackers break into systems, hackers will only break into their own.
(wrt security, not cryptography).

Devdas Bhagat

_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: [EMAIL PROTECTED]
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to