Hi Peter, Yep, forgot to mention that I have run chkrootkit over the machines as well.
Thanks, Campbell Peter Hardy [EMAIL PROTECTED] wrote: > On Mon, 2004-07-12 at 13:52, [EMAIL PROTECTED] wrote: > > We have an unusual problem with files that are invisible (sort of) to 'ls' and > > other programs. This shows up when using the standard versions of these > > programs that are shipped with Debian 'Woody' (up to date via > > security.debian.org). However, the files are visible when using > > statically linked versions of 'ls' such as that shipped with some ftp > > servers. This has been happening sporadically on a couple of machines in > > a couple of directories (all running Woody with updates from security). > > Long shot, but have you looked in to the possibly that the machines have > been cracked? Might be worth running chkrootkit over them. > > -- > Pete > > -- > SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ > Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
