Re: Hacked or not ?
From: Alexander Yeremenko (ay_at_wnet.ua)
Date: 06/13/04
- Previous message: Oliver Eikemeier: "FYI: new port security/portaudit-db"
- In reply to: Alex Povolotsky: "Re: Hacked or not ?"
- Next in thread: jon.mercer_at_achean.com: "Re: Hacked or not ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 13 Jun 2004 19:17:14 +0300 To: Alex Povolotsky <tarkhil@webmail.sub.ru>
On Sat, Jun 12, 2004 at 05:50:35PM +0400, Alex Povolotsky wrote:
> On Sat, 12 Jun 2004 14:39:21 +0200
> "Peter Rosa" <prosa@pro.sk> wrote:
>
> PR> But what about the /var/log/messages logs absence ?
> PR> And, how to test the machine, if it is healthy ?
>
> Boot from CD and compare md5 checksums on system files. That's the first step.
I'm running a frequent script, evaluating md5 for binaries, libs
etc, and reports isn't something changed
-- AY7-UANIC || AY15-RIPE _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
- Previous message: Oliver Eikemeier: "FYI: new port security/portaudit-db"
- In reply to: Alex Povolotsky: "Re: Hacked or not ?"
- Next in thread: jon.mercer_at_achean.com: "Re: Hacked or not ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|