Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 24 Nov 2001 15:52:19 -0500
From:      Pete Fritchman <petef@databits.net>
To:        "Bill A. K." <billak@fox56.tv>
Cc:        freebsd-isp@freebsd.org
Subject:   Re: Attack on server, need help ASAP
Message-ID:  <20011124155219.B80693@databits.net>
In-Reply-To: <000a01c1751e$b4fe5500$6501a8c0@bill>; from billak@fox56.tv on Sat, Nov 24, 2001 at 02:32:07PM -0500
References:  <000a01c1751e$b4fe5500$6501a8c0@bill>

next in thread | previous in thread | raw e-mail | index | archive | help
[ Please wrap lines at 72 characters ]

++ 24/11/01 14:32 -0500 - Bill A. K.:
| My server was just attacked.........someone tried logging in telnet, and
| apparently shut down the telnet daemon from trying (over 400 times)....theres
| NOTHING in the logs, the ips were on the screen, but stupid me started typing
| stuff and now they're gone. Is there a way to get back what was on the
| screen, like a history of stdout? Please, someone help, asap, I would really
| appreciate it.

You might want to look through other logs in /var/log and see if you can
find these messages.  If not, you can add the following line to your
syslog.conf to log all console output:

console.info				/var/log/console.log
(make sure you use tabs)

-pete

--
Pete Fritchman [petef@(databits.net|freebsd.org|csh.rit.edu)]
finger petef@databits.net for PGP key

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011124155219.B80693>