Date: Mon, 05 May 1997 22:19:30 +0400 From: Alex Povolotsky <root@asteroid.intermedia.ru> To: security@freebsd.org Subject: User since epoch??? Message-ID: <199705051819.WAA09603@asteroid.intermedia.ru>
next in thread | raw e-mail | index | archive | help
I've just noticed WERY strange output from w: asteroid#/var/log/squid 202_> w 10:18PM up 12:11, 7 users, load averages: 0.96, 1.23, 1.26 USER TTY FROM LOGIN@ IDLE WHAT root v1 - 1:33PM 8:43 xinit /root/.xinitrc -- /root/.xser root p0 :0.0 5:29PM 2 irc NiteWalk irc.voicenet.com (irc- root p1 :0.0 1:39PM 3:23 -tcsh (tcsh) root p2 :0.0 5:38PM 1 -tcsh (tcsh) tarkhil p3 :0.0 8:45PM 2 tin root p4 :0.0 7:20PM - w 5 - 01Jan70 7:48 - User "5" doesn't exists in /etc/passwd, nor UID 5. It doesn't have any processes. It looks VERY much like intrusion, but I just can't understand how can it be :-E FreeBSD-2.2.1-Release. Alex.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199705051819.WAA09603>