RedHat 6.2, kernel 2.2.16. . .[...?]
Last night I left my computer online downloading a file. This morning, when I
jumped on my computer, whenever I tried to change directory, using TAB command
completion, I would get error messages to the effect of (I have since
rebooted and the problem has gone, and I'm afraid this was pre-coffee, thus
very vague): can't find symlink *, where '*' was the beginning of the command
with extra unusual stuff on the end. (sorry if this is not as clear as it
should be).
System-sent mail for last night contained some messages that I'm not sure if I
should be concerned about. I have been through all /var/log/*'s and have found
nothing that I thought out of the ordinary, but I don't know where else to look
to track down what _might_ have gone down last night. In my naivity, I don't
know if I should be concerned about what follows:
From: root <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Port Denial noted in.ftpd-193.159.103.162
Date: Wed, 19 Jul 2000 07:36:34 +1000
[193.159.103.162]
----------------------------------------------------------------
From: root <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: LogWatch for localhost.localdomain
Date: Thu, 20 Jul 2000 04:02:03 +1000
[..truncated..]
---------------- Connections (secure-log) Begin -------------------
Refused Connections:
Service in.ftpd:
pC19F67A2.dip0.t-ipconnect.de (193.159.103.162): 1 Time(s)
----------------- Connections (secure-log) End --------------------
--------------------------------------------------------------------
From: (Cron Daemon) <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Cron <root@localhost> run-parts /etc/cron.daily
Date: Thu, 20 Jul 2000 04:30:02 +1000
[...truncated...]
All Connections (/var/log/secure):
Connections for Jul:
1 connections(s) by 19
0 connections(s) by 07:36:31
0 connections(s) by localhost
0 connections(s) by in.ftpd[3698]:
0 connections(s) by refused
0 connections(s) by connect
0 connections(s) by from
0 connections(s) by 193.159.103.162
Connections for 19:
0 connections(s) by Jul
1 connections(s) by 07:36:31
0 connections(s) by localhost
0 connections(s) by in.ftpd[3698]:
0 connections(s) by refused
0 connections(s) by connect
0 connections(s) by from
0 connections(s) by 193.159.103.162
Connections for 07:36:31:
0 connections(s) by Jul
0 connections(s) by 19
1 connections(s) by localhost
0 connections(s) by in.ftpd[3698]:
0 connections(s) by refused
0 connections(s) by connect
0 connections(s) by from
0 connections(s) by 193.159.103.162
Connections for localhost:
0 connections(s) by Jul
0 connections(s) by 19
0 connections(s) by 07:36:31
0 connections(s) by in.ftpd[3698]:
0 connections(s) by refused
0 connections(s) by connect
0 connections(s) by from
0 connections(s) by 193.159.103.162
Connections for in.ftpd[3698]::
Connections for refused:
0 connections(s) by Jul
0 connections(s) by 19
0 connections(s) by 07:36:31
0 connections(s) by localhost
0 connections(s) by in.ftpd[3698]:
1 connections(s) by connect
0 connections(s) by from
0 connections(s) by 193.159.103.162
Connections for connect:
0 connections(s) by Jul
0 connections(s) by 19
0 connections(s) by 07:36:31
0 connections(s) by localhost
0 connections(s) by in.ftpd[3698]:
0 connections(s) by refused
1 connections(s) by from
0 connections(s) by 193.159.103.162
Connections for from:
0 connections(s) by Jul
1 connections(s) by 19
0 connections(s) by 07:36:31
0 connections(s) by localhost
0 connections(s) by in.ftpd[3698]:
0 connections(s) by refused
0 connections(s) by connect
1 connections(s) by 193.159.103.162
My isp assigns dynamic ip address' and this address looks like nothing I
would usually be allocated.
Should I be concerned here? what should I be looking for?
takcq.
d.
__________________________________________________
Do You Yahoo!?
Talk to your friends online with Yahoo! Messenger.
http://im.yahoo.com
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.linux-learn.org/faqs
