RE: ?hack cause?

From: b. nyec (bnyec@yahoo.com)
Date: 03/27/02


Date: Tue, 26 Mar 2002 16:12:52 -0800 (PST)
From: "b. nyec" <bnyec@yahoo.com>
To: focus-sun@securityfocus.com


  Today we had a bit of NFS trouble, and saw the
following in our logs,

Mar 26 19:42:10 xxx.xxx.xxx.xxx rpcbind: [ID 727407
daemon.error] udp: address in use
Mar 26 19:42:10 xxx.xxx.xxx.xxx rpcbind: [ID 727407
daemon.error] tcp: address in use
Mar 26 19:42:10 xxx.xxx.xxx.xxx rpcbind: [ID 727407
daemon.error] ticlts: address in use
Mar 26 19:42:10 xxx.xxx.xxx.xxx rpcbind: [ID 727407
daemon.error] ticotsord: address in use
Mar 26 19:42:10 xxx.xxx.xxx.xxx rpcbind: [ID 727407
daemon.error] ticots: address in use
Mar 26 19:42:10 xxx.xxx.xxx.xxx rpcbind: [ID 929946
daemon.error] could not find loopback transports

something going on in the wild ?? I haven't really
looked into it further since HUP'ing nfsd/rpcd and our
netapps server seemed to fix any problems we had.

-NC

__________________________________________________
Do You Yahoo!?
Yahoo! Movies - coverage of the 74th Academy Awards®
http://movies.yahoo.com/