Re: Are these breakin attempts?

Yes, they are likely breakin attempts. Why in the *world* are you running rpc.statd (or portmap, or...nevermind...some people can't be helped) on a publicly accessable machine. That's flat out stupid. Ken Seefried, CISSP Christian Jaeger writes: Hello, I run a pc with potato

Re: Are these breakin attempts?

Yes, they are likely breakin attempts. Why in the *world* are you running rpc.statd (or portmap, or...nevermind...some people can't be helped) on a publicly accessable machine. That's flat out stupid. Ken Seefried, CISSP Christian Jaeger writes: Hello, I run a pc with potato

Re: other mysterious port things

as you indicate difficult. An acurrate assessment requires more than a single tool. Ken Seefried, CISSP -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: other mysterious port things

, successful detection of a compromise is a multi-layered problem, and no one tool is a silver bullet. Ken Seefried, CISSP -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: other mysterious port things

indicate difficult. An acurrate assessment requires more than a single tool. Ken Seefried, CISSP

Re: other mysterious port things

, successful detection of a compromise is a multi-layered problem, and no one tool is a silver bullet. Ken Seefried, CISSP

Re: hi, any help ? about an evil mysterious crazy Open tcp port ?

quote me; check your local man page. P.S. - you might need to install lsof. Ken Seefried, CISSP -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: hi, any help ? about an evil mysterious crazy Open tcp port ?

quote me; check your local man page. P.S. - you might need to install lsof. Ken Seefried, CISSP

Re: Got root?

didn't exist back then). Anyone remeber that? Ken Seefried, CISSP -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: Got root?

didn't exist back then). Anyone remeber that? Ken Seefried, CISSP

Re: Followup: Syslog

symlinked to /mnt/floppy ;) Other arguments about the utility of append-only aside, why not use ext2 floppies? There's not too much space overhead. If you are going to go to that much trouble, use a CD writer for logging. Ken Seefried, CISSP -- To UNSUBSCRIBE, email to [EMAIL PROTECTED

Re: Followup: Syslog

to /mnt/floppy ;) Other arguments about the utility of append-only aside, why not use ext2 floppies? There's not too much space overhead. If you are going to go to that much trouble, use a CD writer for logging. Ken Seefried, CISSP