From owner-freebsd-security Fri Oct 8 7:25:29 1999 Delivered-To: freebsd-security@freebsd.org Received: from lariat.lariat.org (lariat.lariat.org [206.100.185.2]) by hub.freebsd.org (Postfix) with ESMTP id 5C2D214DD9 for ; Fri, 8 Oct 1999 07:25:26 -0700 (PDT) (envelope-from brett@lariat.org) Received: from mustang (IDENT:ppp0.lariat.org@lariat.lariat.org [206.100.185.2]) by lariat.lariat.org (8.9.3/8.9.3) with ESMTP id IAA03491; Fri, 8 Oct 1999 08:25:21 -0600 (MDT) Message-Id: <4.2.0.58.19991008082156.04464450@localhost> X-Sender: brett@localhost X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.0.58 Date: Fri, 08 Oct 1999 08:24:39 -0600 To: Adam From: Brett Glass Subject: Re: Random malfunction or hack? Cc: security@FreeBSD.ORG In-Reply-To: References: <4.2.0.58.19991007104520.043fbbb0@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org At 02:00 PM 10/7/99 -0400, Adam wrote: >What version of FreeBSD? >Do you think you might have run low or out of swap just before these >messages started appearing? Nope; the machine is very lightly loaded memory-wise. It mostly works as a terminal server. However, that particular subnet is seeing lots of skript kiddie attacks lately, so I wondered at first if an attempted exploit -- possibly one that didn't let the hacker in but messed up a crucial process or two -- was to blame. Eivind's theory is the most plausible I've seen so far. --Brett To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message