Date: Thu, 23 Aug 2001 07:30:57 -0700 (PDT) From: Laurence Berland <stuyman@confusion.net> To: Bob Lefevere <b.lefevere@copernicus-it.nl> Cc: freebsd-security@FreeBSD.ORG Subject: Re: Compromised system. Message-ID: <Pine.NEB.3.96.1010823072912.8958B-100000@euphoria.confusion.net> In-Reply-To: <Pine.NEB.3.96.1010823072440.8958A-100000@euphoria.confusion.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Sorry, that should be
ls -la .??*
the a because I figure there might be hidden files in there somewhere, the
second ? mark because I'm hoping it's got at least two characters after
the ., otherwise, use one ? (but then you also get .., which may or may
not bother you a lot.
On Thu, 23 Aug 2001, Laurence Berland wrote:
> umm... ls -l .?* perhaps?
>
> On Thu, 23 Aug 2001, Bob Lefevere wrote:
>
> > > An easy way to find out what exactly is in the directory one could use the
> > > below perl one-liner:
> > >
> > > % cd /suspiscious/directory
> > > % perl -we '$d=".";opendir(D,$d);while($_=readdir(D)){print"($_)
> > "}closedir(D);print"\n"'
> >
> > Er.. Shouldn't ls -la suffice ?
> >
> > Bob Lefevere
> > Copernicus Interchange Technology
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-security" in the body of the message
> >
>
> Laurence Berland
> http://www.isp.northwestern.edu
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>
Laurence Berland
http://www.isp.northwestern.edu
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96.1010823072912.8958B-100000>