RE: ?hack cause?

From: b. nyec (bnyec@yahoo.com)
Date: 03/27/02 

Date: Tue, 26 Mar 2002 16:12:52 -0800 (PST)
From: "b. nyec" <bnyec@yahoo.com>
To: focus-sun@securityfocus.com

  Today we had a bit of NFS trouble, and saw the
following in our logs,

Mar 26 19:42:10 xxx.xxx.xxx.xxx rpcbind: [ID 727407
daemon.error] udp: address in use
Mar 26 19:42:10 xxx.xxx.xxx.xxx rpcbind: [ID 727407
daemon.error] tcp: address in use
Mar 26 19:42:10 xxx.xxx.xxx.xxx rpcbind: [ID 727407
daemon.error] ticlts: address in use
Mar 26 19:42:10 xxx.xxx.xxx.xxx rpcbind: [ID 727407
daemon.error] ticotsord: address in use
Mar 26 19:42:10 xxx.xxx.xxx.xxx rpcbind: [ID 727407
daemon.error] ticots: address in use
Mar 26 19:42:10 xxx.xxx.xxx.xxx rpcbind: [ID 929946
daemon.error] could not find loopback transports

something going on in the wild ?? I haven't really
looked into it further since HUP'ing nfsd/rpcd and our
netapps server seemed to fix any problems we had.

-NC

__________________________________________________
Do You Yahoo!?
Yahoo! Movies - coverage of the 74th Academy Awards®
http://movies.yahoo.com/

Relevant Pages

  • Does fbsd support NAT-Traversal IPSEC VPNs?
    ... Is there any way to get Nat-Traversal run, or whatever thing to encapsulate esp-packets into UDP? ... I'm using racoon, out of the ipsec-tools Port, which has at least such options in racoon.conf. ... Do You Yahoo!? ...
    (freebsd-questions)
  • [Full-Disclosure] Unknown
    ... I am receiving alot of udp ... packets going to port 809, ... Do you Yahoo!? ...
    (Full-Disclosure)
  • Re: TCP vs UDP II
    ... Please do a google on "TCP Hijacking".. ... > It's possible that a intruder could take active part ... > of a TCP connection ... Do you Yahoo!? ...
    (Security-Basics)
  • [Full-Disclosure] Decompression
    ... I recently played with a png decompression bomb and my ... I was wondering if someone who knows about tcp could ... packet. ... Win a $20,000 Career Makeover at Yahoo! ...
    (Full-Disclosure)