Re: [cobalt-security] Disk space being eaten up

["Steve Werby" <steve-lists@xxxxxxxxxxxx>]

"Paul Harvey" <paul@xxxxxxxxxxxxx> wrote:
> I had a warning e-mail from sys that said I was running out of disk space.
> On checking the site usage on the GUI it said that I was using nearly all
> the space on the home directory, although if I total up all the sites
usage
> I get only 507Mb used out of 17Gb total.

Login to the shell and type:

df -h

and paste the output into a reply to the list.  This command will tell you
which partitions are running out of space.

> On checking the space through Telnet I found a directory called 'cain'
that
> does not show up on the GUI.  I have deleted this directory and all its
> contents.

Use SSH instead of telnet.  It sends traffic encrypted.  Using telnet is a
big security risk.

> Checking the logs I found a link to the following:
> ftp://ftp.technotronic.com/unix/network-sniffers/linsniffer.c
> also noticed this link www.hack.co.za

Paste the output from the log in question that is relevant.  Others can tell
you what else to do from here, but I don't have time right now.  If you were
hacked my advice is to restore the system from the OS restore CD.  Any other
solution is likely less secure and will take more time and cost more $ now
or in the future.

--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/