Hi all, My home server has started to exhibit some strange behaviour. Yesterday it worked fine and was actually on-line for about 6 hours on a dial-up connection. Today my wife told me when I got home that the internet was not working - which it wasn't. No mail no web. The server simply refused to dial. Hoever occasionally and for no aparent reason it would dial, make a connection and then drop out. Here is a typical session from the log when it disconnects. May 17 00:24:49 blondie pppd[1032]: LCP: timeout sending Config-Requests May 17 00:24:49 blondie pppd[1032]: Connection terminated. Having spent a long time stopping and re-starting various services I connected a monitor to the server and re-booted. All went normally, the RH GUI screen appeared asking which OS out of the only one listed I wanted, then continued. KUDZU then tried to unistall the modem, which I declined. The bootup continued and everything seemed to start OK. However when it finally booted to the login prompt it pasued for a few seconds then gave the message 'shutting down to run level 3' and shut down various services such as named, squid httpd. Found that interesting so I did it again, same thing except KUDZU didn't popup this time. Then I manually started the stopped services from /etc/rc.d/init.d and suddenly everything is working again. Does anyone recognise this behaviour? Have I been hacked?
_________________________________________ Simon Bryan IT Manager OLMC Parramata ICQ#: 137562751 _________________________________________
<<attachment: winmail.dat>>
