Date: Mon, 02 Nov 1998 22:33:07 -0700 From: Brett Glass <brett@lariat.org> To: Jay Nelson <jdn@acp.qiv.com>, security@FreeBSD.ORG Subject: Re: hidden files question Message-ID: <4.1.19981102223232.0470a100@127.0.0.1> In-Reply-To: <Pine.BSF.3.96.981102202326.1860A-100000@acp.qiv.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Look in logs that have turned over. You may see lots of messages related to intrusion attempts. We did. --Brett At 10:56 PM 11/2/98 -0600, Jay Nelson wrote: >We have an office server running 2.2.7-RELEASE doing DNS, Samba and >mail. We have had several intrusion atempts over the past few weeks >that have failed. Today, /var was showing 50 MB and I could only >account for about 5MB. I could find no hidden files. > >Any combination I've used with find hasn't shown anything. Any ideas >on how I can find the missing 45MB? > >Is there a known benign condition that could account for this? > >Thanks > >-- Jay > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.1.19981102223232.0470a100>