From owner-freebsd-security  Thu Aug 23  3:55:48 2001
Delivered-To: freebsd-security@freebsd.org
Received: from smtp9.xs4all.nl (smtp9.xs4all.nl [194.109.127.135])
	by hub.freebsd.org (Postfix) with ESMTP id 0710437B40A
	for <freebsd-security@FreeBSD.ORG>; Thu, 23 Aug 2001 03:55:45 -0700 (PDT)
	(envelope-from b.lefevere@copernicus-it.nl)
Received: from dragoneer8 ([213.73.181.20])
	by smtp9.xs4all.nl (8.9.3/8.9.3) with SMTP id MAA00287
	for <freebsd-security@FreeBSD.ORG>; Thu, 23 Aug 2001 12:55:43 +0200 (CEST)
Message-ID: <010901c12bc0$18e6ab10$0b01a8c0@dragoneer8>
From: "Bob Lefevere" <b.lefevere@copernicus-it.nl>
To: <freebsd-security@FreeBSD.ORG>
References: <20010823122027.P88176-100000@hq1.tyfon.net>
Subject: Re: Compromised system.
Date: Thu, 23 Aug 2001 12:40:58 +0200
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

> An easy way to find out what exactly is in the directory one could use the
> below perl one-liner:
>
> % cd /suspiscious/directory
> % perl -we '$d=".";opendir(D,$d);while($_=readdir(D)){print"($_)
"}closedir(D);print"\n"'

Er.. Shouldn't ls -la suffice ?

Bob Lefevere
Copernicus Interchange Technology


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message