From owner-freebsd-security  Tue Feb  5 10:53:41 2002
Delivered-To: freebsd-security@freebsd.org
Received: from elvis.mu.org (elvis.mu.org [192.203.228.196])
	by hub.freebsd.org (Postfix) with ESMTP id 2F32937B419
	for <freebsd-security@freebsd.org>; Tue,  5 Feb 2002 10:53:21 -0800 (PST)
Received: by elvis.mu.org (Postfix, from userid 1192)
	id 025E110DDF9; Tue,  5 Feb 2002 10:53:20 -0800 (PST)
Date: Tue, 5 Feb 2002 10:53:20 -0800
From: Alfred Perlstein <bright@mu.org>
To: Kevin Kinsey <k_a_kinsey@netzero.net>
Cc: daleco@daleco.biz, freebsd-security@freebsd.org
Subject: Re: Is this evidence of a break-in attempt?
Message-ID: <20020205105320.I59017@elvis.mu.org>
References: <EB513E68D3F5D41191CA000255588101B4379A@mailserv.xpert.com> <002001c1ae74$dc2f20c0$29f25b41@daleco>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <002001c1ae74$dc2f20c0$29f25b41@daleco>; from k_a_kinsey@netzero.net on Tue, Feb 05, 2002 at 12:42:23PM -0600
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

* Kevin Kinsey <k_a_kinsey@netzero.net> [020205 10:43] wrote:
> From: "Yonatan Bokovza" <Yonatan@xpert.com>
> 
> 
> > > From: Alfred Perlstein [mailto:bright@mu.org]
> > > * Victor Grey <victor@customdynamic.net> [020205 09:53] wrote:
> > 
> > Presenting: "Perlstein. Alfred Perlstein! BOFH!!" ;-)
> > 
> > Reagrds,
> > Yonatan.
> 
> Well, maybe.   How 'bout "XA that made me ROTFLMAO!!"
> <read "xcellent authority" and most of you know the rest....)
> 
> And, on a related tangent ... are we assuming that since the reboot
> occurred around midnight someone was attempting to circumvent the
> logs due to their rollover time?  (Pardon me if I seem an idiot, I'm 
> still laughing....)

I think you guys are seriously giving the NOC more credit than
they are due.  :-)

As per-phk's .sig:
 "Never attribute to malice what can easily be explained by incompetance."

-- 
-Alfred Perlstein [alfred@freebsd.org]
'Instead of asking why a piece of software is using "1970s technology,"
 start asking why software is ignoring 30 years of accumulated wisdom.'
Tax deductable donations for FreeBSD: http://www.freebsdfoundation.org/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message