Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 1 Dec 1999 15:40:49 -0600 (CST)
From:      Jason Hudgins <thanatos@incantations.net>
Cc:        freebsd-security@freebsd.org
Subject:   Re: logging a telnet session
Message-ID:  <Pine.BSF.4.10.9912011538570.16289-100000@eddie.incantations.net>
In-Reply-To: <Pine.BSF.4.21.9912011334370.26230-100000@hub.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Watching the packet stream is pretty useless if the hacker is using 
ssh however, which in my opinion, it would be pretty stupid not to.

> replace them with false logs - you have to assume they know what you're
> doing and will take steps against it (or they already have). A second
> system watching the packet stream can't be subverted without also breaking
> into _that_ one, which is much more difficult if you configure it
> restrictively.
> 
> Kris
> 
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.9912011538570.16289-100000>