Date: Tue, 3 Nov 1998 17:03:31 +1100 (EDT) From: Darren Reed <avalon@coombs.anu.edu.au> To: jdn@acp.qiv.com (Jay Nelson) Cc: security@FreeBSD.ORG Subject: Re: hidden files question Message-ID: <199811030603.WAA18736@hub.freebsd.org> In-Reply-To: <Pine.BSF.3.96.981102202326.1860A-100000@acp.qiv.com> from "Jay Nelson" at Nov 2, 98 10:56:24 pm
next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from Jay Nelson, sie said: > > We have an office server running 2.2.7-RELEASE doing DNS, Samba and > mail. We have had several intrusion atempts over the past few weeks > that have failed. Today, /var was showing 50 MB and I could only > account for about 5MB. I could find no hidden files. > > Any combination I've used with find hasn't shown anything. Any ideas > on how I can find the missing 45MB? > > Is there a known benign condition that could account for this? Files still open which have been removed. This is often the case with log files. Darren To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199811030603.WAA18736>