----- Original Message -----
> Message-ID: <00c501bfd7b5$66370f00$[EMAIL PROTECTED]>
> From: "Johnny Dedon" <[EMAIL PROTECTED]>
> To: "John Neiberger" <[EMAIL PROTECTED]>
> Subject: Re: Help me catch a Hacker
> Date: Fri, 16 Jun 2000 12:07:42 -0500
>
> One idea I can think of to document this is to set all the passwords
> encrypted with service-password encryption and when he hacks in and
changes
> the password, he will not know what to change it back to.
> ----- Original Message -----
> From: "John Neiberger" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> Sent: Friday, June 16, 2000 11:39 AM
> Subject: Re: Help me catch a Hacker
>
>
> > You could wait until it reboots again (if you're aware of exactly when
it
> > occurs) and then telnet in yourself if see if he's using the console
port.
> > If so, send him a message via telnet to get the heck off of there.
> Catching
> > him in the act would probably be a good deterrent. I believe the
command
> is
> > "send <line #>" to send a message. This all is assuming that he's not
> > changing the vty passwords while he's in there.
> >
> > Good luck!
> >
> > John Neiberger, CCNA/CCDA
> >
> > > Greetings,
> > >
> > > I've a 7000 router in a remote location and it seems
> > > the local admin hacking in by using the power outage
> > > excuse. He changes the password by rebooting the
> > > router and peeks around. I'm trying to catch him in
> > > the act or log his activities, any ideas?????
> > >
> > > Thanks,
> > >
> > > Nabil
> > >
> > > ___________________________________
> > > UPDATED Posting Guidelines:
http://www.groupstudy.com/list/guide.html
> > > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > > Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]
> >
> >
> >
> >
> >
> > _______________________________________________________
> > Get 100% FREE Internet Access powered by Excite
> > Visit http://freelane.excite.com/freeisp
> >
> > ___________________________________
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
_______________________________________________________
Get 100% FREE Internet Access powered by Excite
Visit http://freelane.excite.com/freeisp
___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]