On Mon, 2004-07-12 at 13:52, [EMAIL PROTECTED] wrote: > We have an unusual problem with files that are invisible (sort of) to 'ls' and > other programs. This shows up when using the standard versions of these > programs that are shipped with Debian 'Woody' (up to date via > security.debian.org). However, the files are visible when using > statically linked versions of 'ls' such as that shipped with some ftp > servers. This has been happening sporadically on a couple of machines in > a couple of directories (all running Woody with updates from security).
Long shot, but have you looked in to the possibly that the machines have been cracked? Might be worth running chkrootkit over them. -- Pete -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
