[ossec-list] Integrity checksum changed for: '/usr/bin/from'

2014-06-04 Thread PAL 18
I just got this a few minutes ago and i wasn't logged into the box. Should i be worried? Has my server been hacked? Rule: 550 fired (level 7) - Integrity checksum changed. Portion of the log(s): Integrity checksum changed for: '/usr/bin/from' Old md5sum was: '24dc25d90a3eca83ee42f2532f33e174'

Re: [ossec-list] Integrity checksum changed for: '/usr/bin/from'

2014-06-04 Thread Steven Stern
Check your package updater's logs. On 06/04/2014 07:51 AM, dan (ddp) wrote: On Wed, Jun 4, 2014 at 4:53 AM, PAL 18 pal...@ftwgamer.com wrote: I just got this a few minutes ago and i wasn't logged into the box. Should i be worried? Has my server been hacked? You have to investigate the

Re: [ossec-list] Integrity checksum changed for: '/usr/bin/from'

2014-06-04 Thread PAL 18
Looks like its safe; 30 minutes before the email was sent out, i installed a package. I got thrown off because i thought the crc check was in real time. update-alternatives: using /usr/bin/frm.mailutils to provide /usr/bin/frm (frm)$ update-alternatives: using /usr/bin/from.mailutils to