My mistake. The 11 different hash sums are not random, they happened in sequence.
On Mon, Jul 13, 2009 at 17:11, John Peter Loh<[email protected]> wrote: > Hi all, > > I remember reading on the list where a server got attacked with a root > kit. It made me really paranoid and I think one of our servers got > attacked with a root kit too! > > I checked with S.M.A.R.T. and the HDs are reported to be working fine. > I checked the serial number of the disks with Seagate and it seems > that the disks were only manufactured last year. > > The problem is files sometime fail to get written properly. I tried > copying a file 500 times and getting the md5 hash of the copied file. > Out of 500 writes, 11 returned different hashes. Is there a known root > kit attack that randomly modifies files? > > What else could cause this? Are there other tests that I can do? I'm > hoping to rule out a breach in the system. > > Thanks, > JP > _________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List http://lists.linux.org.ph/mailman/listinfo/plug Searchable Archives: http://archives.free.net.ph
