From owner-freebsd-hackers Fri Mar 1 13:39:13 1996 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id NAA11867 for hackers-outgoing; Fri, 1 Mar 1996 13:39:13 -0800 (PST) Received: from digital.netvoyage.net (root@digital.netvoyage.net [205.162.154.10]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id NAA11857 for ; Fri, 1 Mar 1996 13:39:04 -0800 (PST) Received: (from bogawa@localhost) by digital.netvoyage.net (8.6.13/8.6.9) id NAA08753; Fri, 1 Mar 1996 13:38:45 -0800 Date: Fri, 1 Mar 1996 13:38:44 -0800 (PST) From: Bryan Ogawa at Work To: stacy@ey.ca cc: hackers@freebsd.org Subject: Re: Gremlins changing [cm]time on files? In-Reply-To: <9603011814.AA04520@sobeco.sobeco.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-hackers@freebsd.org Precedence: bulk On Fri, 1 Mar 1996, s.millions wrote: > Hi, > > I am running "tripwire" on FBSD 2.1.0-Release system and I have had > a strange problem crop up a couple of times now (it's been running > for ~35 days now) > > The ctime and mtime of some files are changing. It has happened twice > now. I am fairly confident that there was no one on the machine both > times that it happened. There was no modification to the data (the file > sizes didn't change and the file signatures did not change). > > The files in question are /usr/sbin/sendmail and /usr/local/etc/in.nnrpd > > Any suggestions? > > -stacy I've experienced this as well on a 2.0.5-RELEASE machine. I have less certainty that no one did the deed, but the md5 signatures seem to be identical, so I don't think this is the problem. bryan > > -- > "I will finish what I st..." stacy@ey.ca > - Bart Simpson > Bryan K. Ogawa Questions or Problems with NetVoyage? help@netvoyage.net Check out the NetVoyage HelpWeb at..