similar to: Did i get hacked?

Hi list Several people have physical access to my FreeBSD box and I have the feeling that somebody try to get access with boot -s options . Can I log activity after boot -s option (change user password, install software and etc.). I use boot -s and change user password, but after reboot i can't find this atcivity in log files. The BSD box is shutdown and run again many time at day. Best

Hi Samba, I hope you are doing well. I run a cifs / nfs CTDB clustered NAS solution, and I find that when I reboot any of the nodes in the cluster, I must re-export the nfs mounts so they show up properly. Perhaps this is a general linux nfs bug and I am barking up the wrong tree, but I haven't found any problem / solution mentioning this as of yet besides my own known workaround

I have call center PCs that switch between an IBEAM SIP softphone and a NEBU IAX softphone (for reasons that aren't germane here). The SIP softphones work fine, but the IAX softphones get a fast busy unless I give them an IAX trunk to use, instead of the PRI trunks that all the other phones are using. I am using Asterisk 1.2.3. svn rev 47264. I've appended a sample call trace. The

I just discovered two directories with the same number of files and the same number of hard links but different size: # stat /home/david/linuxburg/fax.old/docq_ps.nnnn \ /hdsync/home/david/linuxburg/fax.old/docq_ps.nnnn File: `/home/david/linuxburg/fax.old/docq_ps.nnnn' Size: 8192 Blocks: 16 IO Block: 4096 directory Device: 801h/2049d Inode: 52060

Hi, Somewhere in the Wiki I read that the best way to adjust the rxgain and txgain is to dial a "type 102 milliwatt test line". This line is usually found in xxx-958-nnnn or xxx-959-nnnn ranges. I'm in area code 323 in Los Angeles. Does anybody know the test number here?? Thanks, -N

Hi folks, I find that nmblookup seems to be receiving responses to name queries, but ignoring them. Here's what's happening: # nmblookup somehost querying somehost on x.y.255.255 name_query failed to find name somehost But watching the transaction with ethereal on the local host, I see that: 1. nmblookup on local udp port nnnn (some random number above 1024) sends an nbns

Would it be a usefull addition to memdisk's "pause" parameter if it showed the loading speed for the specified disk image file? The idea is to verify if a device is really loading an operating system's data at the intended device/controller/interface/bus (etc) speed. My own system has a habit of setting usb2.0 interface to 1.1-speeds for example. With (hopefully) bootable

Hi, I have a 4.9-STABLE FreeBSD box apparently hacked! Yesterday I ran chkrootkit-0.41 and I don't like some of the outputs. Those are: chfn ... INFECTED chsh ... INFECTED date ... INFECTED ls ... INFECTED ps ... INFECTED But all the rest is NOT PROMISC, NOT INFECTED, NOTHING FOUND, NOTHING DELETED, or NOTHING DETECTED. I know by the FreeBSD-Security archives that

I''m trying to do some userspace tracing on a server-process with the pid provider. My problem is, that the only probes the pid-provider lists for the server-process (to which I attach dtrace with "-p nnnn") are coming from "ld.so.1". There''s not a single one from my modules. If I''m specifying "a.out" (or any of our shared-objects) as the

Full_Name: Jens Oehlschl?gel Version: 2.5.1 OS: Windows Submission from: (NULL) (62.159.183.42) Even when specifying the full path, the output of fc is not sent to R (neither shown nor returned). For example > system('c:\\WINDOWS\\system32\\fc.exe /?',intern=TRUE) character(0) When I do the same from python 2.3, I get >>> import os >>>

Hello, I'm planning to convert my phone system to Asterisk, as I've outgrown my TalkSwitch system. I have a few questions for experienced * users, most of which can be answered yes/no. Current Setup: - Talkswitch 48NLS (4CO/8Ext) phone system. - One CO line, two Vonage lines, one Voicepulse line connected to phone system - A third Vonage line directly connected to a fax machine - A

My hardware is Sun V65x servers, (6GB RAM/2xXeon3GHZ/36GB SCSI disk). I have NFS repositories of Centos 3.1, Centos 3.4, Centos 4 & RedHat 9.0 ISO distros set up. I use boot floppies for each o/s with the same kickstart file which is of course altered to point at the desired distro. With Centos 4 I have to use a boot CDROM, of course, rather than floppy disk. I wish to set up servers with

Complete the hotplug ABI document, and add SR-IOV HOWTO. Signed-off-by: Yu Zhao <yu.zhao at intel.com> Signed-off-by: Eddie Dong <eddie.dong at intel.com> --- Documentation/ABI/testing/sysfs-bus-pci | 67 ++++++++++++ Documentation/DocBook/kernel-api.tmpl | 3 + Documentation/PCI/pci-iov-howto.txt | 177 +++++++++++++++++++++++++++++++ 3 files changed, 247 insertions(+),

Complete the hotplug ABI document, and add SR-IOV HOWTO. Signed-off-by: Yu Zhao <yu.zhao at intel.com> Signed-off-by: Eddie Dong <eddie.dong at intel.com> --- Documentation/ABI/testing/sysfs-bus-pci | 67 ++++++++++++ Documentation/DocBook/kernel-api.tmpl | 3 + Documentation/PCI/pci-iov-howto.txt | 177 +++++++++++++++++++++++++++++++ 3 files changed, 247 insertions(+),

Complete the hotplug ABI document, and add SR-IOV HOWTO. Signed-off-by: Yu Zhao <yu.zhao at intel.com> Signed-off-by: Eddie Dong <eddie.dong at intel.com> --- Documentation/ABI/testing/sysfs-bus-pci | 67 ++++++++++++ Documentation/DocBook/kernel-api.tmpl | 3 + Documentation/PCI/pci-iov-howto.txt | 177 +++++++++++++++++++++++++++++++ 3 files changed, 247 insertions(+),

Hi There, It seems the default installer with Centos 4, enables DACs and the extra ACLs which DUMP cannot handle.... so I get errors like "DUMP: ACLs in inode #nnnn won't be dumped" since DUMP and RESTORE is integral to my back policy for some 30+ machines I would like to know if its possible to turn off the extra ACLs in the file system as I really don't need them... Can

On 2013-07-23 18:14, "Daniel P. Berrange" <berrange@redhat.com> wrote: >>On Tue, Jul 23, 2013 at 04:56:30PM +0800, hzguanqiang wrote: >> Hi Guys, >> When I created a lxc container by libvirt, I logged into the lxc >> container and noticed that info under /proc/ dir did not match the >> lxc container resource. Is the /proc dir in lxc container just

Has anyone else seen chkrootkit (version 0.43) on 4.10-prerelease or later report chfn, chsh, and date as infected? I built world yesterday, and my nightly chkrootkit reports this on run. I've replaced the binaries with their 4.9 equivalents, and things don't report as infected. I upgrade the 4.9 machine to 4.10, and chkrootkit reports them as infected again. Is this similar to the

I ran chkrootkit ( v. chkrootkit-0.43 ) earlier and noticed that chfn, date, and chsh showed as being infected. I remember reading post from the past that right now chkrootkit is giving alot of false positives, so I suspected that these 3 binaries are not bad. However, to be on the safe side, I deleted the 3 binaries, removed /usr/src and did a 'make world' to 4.10-STABLE. But, chfn,

Hi, just tried memdisk - it works, even with token-ring network cards! I've some problems with dos 6.22 on one machine, though. This one doesn't have a floppy controller (e.g. linux reports that it didn't find any controller). The Dos 6.22 boot disk is loaded, then the boot sector is started and tells me that it can't load the system (German message: 'Kein System oder