OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Hacked?

From: Brett Glass (brettlariat.org)
Date: Fri May 09 2003 - 12:01:21 CDT


At 08:25 AM 5/9/2003, Bjoern A. Zeeb wrote:

>this asumes that truss is ok ;-) perhaps take the truss from your
>other 4.7 machine ...

Yes, you do have to be careful of this. I recently investigated a
machine that had been "owned," and when truss was applied to some
commands (e.g. netstat) it produced no output.

--Brett

_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"