Date: Fri, 21 May 2004 15:57:46 -0400 From: "Peter C. Lai" <sirmoo@cowbert.net> To: RazorOnFreeBSD <yann.luppo@attglobal.net> Cc: freebsd-security@freebsd.org Subject: Re: Hacked or not ? Message-ID: <20040521195746.GE46542@cowbert.net> In-Reply-To: <021f01c43f3a$e7eb7f40$0f01a8c0@razor> References: <021f01c43f3a$e7eb7f40$0f01a8c0@razor>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --]
> ioctl(1,TIOCGETA,0xbfbff534) = 0 (0x0)
> ioctl(1,TIOCGWINSZ,0xbfbff5a8) = 0 (0x0)
> getuid() = 0 (0x0)
> readlink("etc/malloc.conf",0xbfbff490,63) ERR#2 'No such file or directory' #SUSPICIOUS
> mmap(0x0,4096,0x3,0x1002,-1,0x0) = 671666176 (0x2808d000)
> break(0x809b000) = 0 (0x0)
> break(0x809c000) = 0 (0x0)
> break(0x809d000) = 0 (0x0)
> break(0x809e000) = 0 (0x0)
> ...........................................................................................and so on!
Looks normal to me here...not really sure why that is suspicious to you.
(it's just trying to load malloc.conf for malloc options).
--
Peter C. Lai
University of Connecticut
Dept. of Molecular and Cell Biology
Yale University School of Medicine
SenseLab | Research Assistant
http://cowbert.2y.net/
[-- Attachment #2 --]
0 *H
01 0 + 0 *H
00: 0
*H
0b1 0 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA0
040414064257Z
050414064257Z0D1 0 UThawte Freemail Member1!0 *H
sirmoo@cowbert.net0"0
*H
0
n͛= 3
Zos$us];HT MJ5- z ړշhK@n!,@:CEu> ޅd/ 'i:ؔ3n7Wh}H1H нdb&TU7 Z#9iˤ$݅(:^*O.}'8`+(V# *DZqFT-r%ʸU1~XWq^'pLNv5 /0-0 U 0sirmoo@cowbert.net0 U 0 0
*H
VD+PyfPQdA2Z
LH˳`
|,̀5']JDU5 KW62[ 2^9-Rpu沎680?0
0
*H
01 0 UZA10U Western Cape10U Cape Town10U
Thawte Consulting1(0&U Certification Services Division1$0"UThawte Personal Freemail CA1+0) *H
personal-freemail@thawte.com0
030717000000Z
130716235959Z0b1 0 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA00
*H
0 Ħ<UsUNʙZ hup [v :aQP
0cZ,p+Z?qV˯< 6$*+w=+>@dקe*TH<a@ dr` 00U 0 0CU <0:08642http://crl.thawte.com/ThawtePersonalFreemailCA.crl0 U 0)U "0 0 10UPrivateLabel2-1380
*H
HP .
fgCL!6 -6/ P p<ab:~ t%Pb'qW%ݩ9 Oe_N4[5MwV!x!5$ F]_eO1D0@0i0b1 0 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA 0 + 0 *H
1 *H
0 *H
1
040521195746Z0# *H
1gy+;3z2e0R *H
1E0C0
*H
0*H
0
*H
@0+0
*H
(0
*H
_°qסv wYU>(%[7Xy'Lo)
xXN ԭv%LtK@NtfS)bl/|QAID%>| '
kPk90X:NW6T: M H!\*OOj5-49$W gX}#UOm TB[8Q!3g7bX2/$Ò`Z> ' y4i(Y I zKy
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040521195746.GE46542>