From owner-freebsd-security Wed Jul 14 11: 4:26 1999 Delivered-To: freebsd-security@freebsd.org Received: from entic.net (shell.entic.net [209.157.122.66]) by hub.freebsd.org (Postfix) with SMTP id 32FAD14DF4 for ; Wed, 14 Jul 1999 11:04:24 -0700 (PDT) (envelope-from aj@entic.net) Received: (qmail 13080 invoked by uid 1000); 14 Jul 1999 18:05:14 -0000 Date: Wed, 14 Jul 1999 11:05:13 -0700 (PDT) From: Anil Jangity To: "Childers, Richard" Cc: "'freebsd-security@freebsd.org '" Subject: RE: weird w report? In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org |"I have a weird user logon." | | | |I don't mean to sound like an old grouch, here, but trouble reports that are |not accompanied by simple ASCII cut-and-paste examples of the 'here's what I |do, here's what I see' variety are worth almost nothing. Richard, I don't see how different this is from my explanation post but here goes: -------------------------------------------------------------------------- [root@shell:~] w |grep drenica root p6 fiber.entic.net 10:57AM - grep drenica drenica pj 98CC44E1.ipt.aol Thu07PM 5days - [root@shell:~] ls -la /dev/ttypj crw-rw-rw- 1 root wheel 5, 19 Jul 8 19:31 /dev/ttypj [root@shell:~] w | grep drenica root p6 fiber.entic.net 10:57AM - grep drenica drenica pj 98CC44E1.ipt.aol Thu07PM 5days - [root@shell:~] last drenica | grep pj drenica ttypj 152.204.68.225 Thu Jul 8 19:24 still logged in [root@shell:~] ping 152.204.68.225 PING 152.204.68.225 (152.204.68.225): 56 data bytes ^C36 bytes from 205.188.192.98: Destination Host Unreachable Vr HL TOS Len ID Flg off TTL Pro cks Src Dst 4 5 00 5400 24de 0 0000 f0 01 7c3d 209.157.122.66 152.204.68.225 --- 152.204.68.225 ping statistics --- 1 packets transmitted, 0 packets received, 100% packet loss [root@shell:~] su -l drenica [drenica@shell:~] ps PID TT STAT TIME COMMAND 12865 p6 S 0:00.08 -su (bash) 12868 p6 R+ 0:00.00 ps [drenica@shell:~] kill -9 -1 su: kill: (-1) - No such pid [drenica@shell:~] exit logout [root@shell:~] ps auxU drenica USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND [root@shell:~] [drenica@shell:~] ps PID TT STAT TIME COMMAND 12865 p6 S 0:00.08 -su (bash) 12868 p6 R+ 0:00.00 ps [drenica@shell:~] kill -9 -1 su: kill: (-1) - No such pid oh and: [root@shell:/var/log] uname -r 2.2.8-STABLE ;-) -------------------------------------------------------------------------- I think a reboot will fix it, but I am not going to reboot over this. So, looking for other alternatives. Kind regards, Anil Jangity To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message