for Tripwire).
- Original Message -
From: Paul Oster [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, December 03, 2003 10:24 PM
Subject: Re: [Asterisk-Users] Does Asterisk overwrite any libraries?
Looks like your box has been compromised. Try
ls -l `which ps
On Thursday 04 December 2003 08:27 am, PJ Welsh wrote:
On Wed, Dec 03, 2003 at 10:42:40PM -0500, TeleSIP wrote:
A good rootkit will also modify the date and time of the replaced binaries
so they will look the same as the original.
Try to replace your ps command with that from a trusted
Looks like your box has been compromised. Try
ls -l `which ps`
You'll probably find an inapropriate date. Whenever I've diagnosed
problems like this, I've found badly installed rootkits.
To address this on my production machines, I'm going to insruct the
router to only allow traffic that is
-
From: Paul Oster [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, December 03, 2003 10:24 PM
Subject: Re: [Asterisk-Users] Does Asterisk overwrite any libraries?
Looks like your box has been compromised. Try
ls -l `which ps`
You'll probably find an inapropriate date. Whenever I've
I am using a brand new RH9.0 installation. I installed Asterisk afterwards so I am not
sure if Asterisk caused the problem below. The ps doesn't work. It could also be
something else. I also tried installing a some video package. But I thought to ask
here first if someone has seen this before.
