Re: syslog messages

2002-02-20 Thread BenoƮt Sibaud
> I have checked this and i am running the recommended version > nfs-common_0.1.9.1-1, also i don't see any obvious signs of access. Dose > this mean i don't need to worry about it or is there something else i > should be doing ? There is a bug in nfs-common_0.1.9.1 in Potato ( #111990 Hi, http:

PPPoverEthernet vs. PPPoverATM

2002-02-20 Thread linux_abbestia
I'm about to turn to ADSL connection to Internet and I'm taking in consideration all the choises the Provider offer. I was surprised in seening they offer an ADSL service not only using the PPP-over-Eth protocol, but also with the PPP-over-ATM. So my question is: if I choose the second system, is

Re: syslog messages

2002-02-20 Thread Alexander List
-BEGIN PGP SIGNED MESSAGE- On Thu, 21 Feb 2002, Marcel Welschbillig wrote: > I have checked this and i am running the recommended version > nfs-common_0.1.9.1-1, also i don't see any obvious signs of access. Dose > this mean i don't need to worry about it or is there something else i > sh

Re: syslog messages

2002-02-20 Thread Marcel Welschbillig
I have checked this and i am running the recommended version nfs-common_0.1.9.1-1, also i don't see any obvious signs of access. Dose this mean i don't need to worry about it or is there something else i should be doing ? Marcel Steve Mickeler wrote: Its an exploit attempt. See http://www.

Re: syslog messages

2002-02-20 Thread Will Wesley, CCNA
Marcel Welschbillig wrote: > Hi, > > Im getting these strange entries in my syslog file. Can anyone shed some > light on what this means ? > > Feb 21 14:03:35 jbeam > Feb 21 14:03:35 jbeam syslogd: Cannot glue message parts together > Feb 21 14:03:35 jbeam /sbin/rpc.statd[198]: gethostbyname erro

Re: syslog messages

2002-02-20 Thread Alexander List
-BEGIN PGP SIGNED MESSAGE- On Thu, 21 Feb 2002, Marcel Welschbillig wrote: > I have checked this and i am running the recommended version > nfs-common_0.1.9.1-1, also i don't see any obvious signs of access. Dose > this mean i don't need to worry about it or is there something else i > s

Re: syslog messages

2002-02-20 Thread Marcel Welschbillig
I have checked this and i am running the recommended version nfs-common_0.1.9.1-1, also i don't see any obvious signs of access. Dose this mean i don't need to worry about it or is there something else i should be doing ? Marcel Steve Mickeler wrote: > Its an exploit attempt. > > See http:/

Re: syslog messages

2002-02-20 Thread Jeremy T. Bouse
Just an attempt at a very old syslog exploit that has since been fix'd... Jeremy On Thu, Feb 21, 2002 at 09:02:13AM +0800, Marcel Welschbillig wrote: > Hi, > > Im getting these strange entries in my syslog file. Can anyone shed some > light on what this means ? > > > Feb 21 14

Re: syslog messages

2002-02-20 Thread Steve Mickeler
Its an exploit attempt. See http://www.debian.org/security/2000/2719a and http://www.cert.org/advisories/CA-2000-17.html for more info On Thu, 21 Feb 2002, Marcel Welschbillig wrote: > Hi, > > Im getting these strange entries in my syslog file. Can anyone shed some > light on what this

syslog messages

2002-02-20 Thread Marcel Welschbillig
Hi, Im getting these strange entries in my syslog file. Can anyone shed some light on what this means ? Feb 21 14:03:35 jbeam Feb 21 14:03:35 jbeam syslogd: Cannot glue message parts together Feb 21 14:03:35 jbeam /sbin/rpc.statd[198]: gethostbyname error for ^X ^X^Y^Y^Z^Z^[ ^[%8x%8x%8x%8x%

Re: Makejail

2002-02-20 Thread Anthony DeRobertis
On Tuesday, February 19, 2002, at 09:05 AM, Davy Gigan wrote: I would also notify another evident thing : due to the fact i'm running two syslog-ng servers on my machine, the configure script killed all of them => normal. No that is normal. The scripts should be using pid files. To quote po

Re: syslog messages

2002-02-20 Thread Will Wesley, CCNA
Marcel Welschbillig wrote: > Hi, > > Im getting these strange entries in my syslog file. Can anyone shed some > light on what this means ? > > Feb 21 14:03:35 jbeam > Feb 21 14:03:35 jbeam syslogd: Cannot glue message parts together > Feb 21 14:03:35 jbeam /sbin/rpc.statd[198]: gethostbyname err

Re: syslog messages

2002-02-20 Thread Jeremy T. Bouse
Just an attempt at a very old syslog exploit that has since been fix'd... Jeremy On Thu, Feb 21, 2002 at 09:02:13AM +0800, Marcel Welschbillig wrote: > Hi, > > Im getting these strange entries in my syslog file. Can anyone shed some > light on what this means ? > > > Feb 21 1

Re: syslog messages

2002-02-20 Thread Steve Mickeler
Its an exploit attempt. See http://www.debian.org/security/2000/2719a and http://www.cert.org/advisories/CA-2000-17.html for more info On Thu, 21 Feb 2002, Marcel Welschbillig wrote: > Hi, > > Im getting these strange entries in my syslog file. Can anyone shed some > light on what this

syslog messages

2002-02-20 Thread Marcel Welschbillig
Hi, Im getting these strange entries in my syslog file. Can anyone shed some light on what this means ? Feb 21 14:03:35 jbeam Feb 21 14:03:35 jbeam syslogd: Cannot glue message parts together Feb 21 14:03:35 jbeam /sbin/rpc.statd[198]: gethostbyname error for ^X ^X^Y^Y^Z^Z^[ ^[%8x%8x%8x%8x%8x

Re: Makejail

2002-02-20 Thread Anthony DeRobertis
On Tuesday, February 19, 2002, at 09:05 AM, Davy Gigan wrote: > I would also notify another > evident thing : due to the fact i'm running two syslog-ng servers > on my machine, the configure script killed all of them => normal. No that is normal. The scripts should be using pid files. To quot

portsentry woes

2002-02-20 Thread Moses Moore
I installed portsentry lately, and I'm being constantly warned about UDP connect attempts that I can't otherwise detect, from a machine that (as far as I can tell) isn't trying to connect. I installed portsentry on the machine 'izzy' with "apt-get portsentry". Default settings. The machine 205.X

portsentry woes

2002-02-20 Thread Moses Moore
I installed portsentry lately, and I'm being constantly warned about UDP connect attempts that I can't otherwise detect, from a machine that (as far as I can tell) isn't trying to connect. I installed portsentry on the machine 'izzy' with "apt-get portsentry". Default settings. The machine 205.

scsi crash??? (oups i forgot the /var/log/message :p)

2002-02-20 Thread Ivan R.
thanks in advance again ;) Ivan R. sysadminFeb 19 17:16:28 myproxy1 kernel: (scsi0:-1:-1:-1) Referenced SCB 0 not valid during SELTO. Feb 19 17:16:28 myproxy1 kernel: SCSISEQ = 0x5a SEQADDR = 0x7 SSTAT0 = 0x15 SSTAT1 = 0x8a Feb 19 17:16:28 myproxy1 kernel: (scsi0:-1:-1:-1) Referenced SC

scsi crash???

2002-02-20 Thread Ivan R.
hi all! i don t know if this is or not a security problem, but it could be because just one of our servers was down... so i join a little part of the /var/log/messages (12KB of 30MB). run on this server a 2.2r5 updated, apache, mysqld, proftpd and sshd. somebody know what arrived? thanks in advan

scsi crash??? (oups i forgot the /var/log/message :p)

2002-02-20 Thread Ivan R.
thanks in advance again ;) Ivan R. sysadmin Feb 19 17:16:28 myproxy1 kernel: (scsi0:-1:-1:-1) Referenced SCB 0 not valid during SELTO. Feb 19 17:16:28 myproxy1 kernel: SCSISEQ = 0x5a SEQADDR = 0x7 SSTAT0 = 0x15 SSTAT1 = 0x8a Feb 19 17:16:28 myproxy1 kernel: (scsi0:-1:-1:-1) Referenced

scsi crash???

2002-02-20 Thread Ivan R.
hi all! i don t know if this is or not a security problem, but it could be because just one of our servers was down... so i join a little part of the /var/log/messages (12KB of 30MB). run on this server a 2.2r5 updated, apache, mysqld, proftpd and sshd. somebody know what arrived? thanks in adva