Doesn't seem to be any new users here, and nothing else seems to be happening. It only 
happens in multi-user mode, so my guess is some service is not working right.

Jones D \(ISaCS\) writes:
 > Not as likely as it would be if you had a permanent connection to
 > the net, but still possible.
 > 
 > regards,
 > 
 > Dave.
 > 
 > > How likely is this when your running over ppp to an isp?
 > > > The attack we had came from outside our lan and was traced to an isp's
 > > > customer in another state.
 > > > > I don't think that's the case as this is a home system with only 3
 > users,
 > > > > 4 if you include root.
 > > > > > While you're at it, check to see if you have any new user's you
 > don't
 > > > > > know about.  I've seen a server break-in where the first clue was
 > the
 > > > > > TERM being set to dumb.  The /bin/login file had been changed and
 > the
 > > > > > cracked version set the TERM that way.
 > > > > > Hope it's not the case.
 > > > > > > > It must have done something. When I set vt100 as terminal type,
 > that 
 > > > > > > > problem goes away, but then my arrow keys don't work properly.
 > > > > > > > It is a plain text console.
 > > > > > > The consoles should be of type 'linux', which I understand is
 > pretty
 > > > > > > close to vt100, but not quite.  Is that not their default setting?
 > > > > > > Also, perhaps you should verify the integrity of the termcap
 > package
 > > > > > > (rpm -V termcap)
 > 
 > 
 > 
 > -- 
 > To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
 > as the Subject.
 > 

-- 
Jacob Schmude
MailTo:[EMAIL PROTECTED]
ICQ: 53401220


-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to