[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] PPP line discipline registered ?



On Wednesday 26 March 2003 14:14, Gerald Waugh wrote:
> On Wednesday 26 March 2003 13:47, Gerald Waugh wrote:
> > We have a client's RaQ3i
> > That stops at "Checking Disk"
> >
> > The serial console also hangs here!
> >
> >    CSLIP: code copyright 1989 Regents of the University of California
> >    PPP: version 2.3.7 (demand dialling)
> >    PPP line discipline registered.
> >    device eth0 entered promiscuous mode
> >
> > I don't recall seeing this on other systems!
> > I pulled the drive and ran fsck, OK!
> > Is this normal, or has the server been hacked?
>
> BTW its a RaQ4
> Also noticed, recent
> /boot/config-2.4.8-26mdk       Mar 26
> /boot/vmlinux-2.4.8-26mdk    Mar 26
> Are they normal?

NO they are not normal!!!
looks like someone tried to install a new kernel.
I wonder if the client did that?

Gerald
-- 
http://frontstreetnetworks.com | http://store.raqware.com
Front Street Networks LLC      |  Phone: 203-785-0699
229 Front Street, Ste #C, New Haven, CT 06513-3203