On Fri, Apr 07, 2000 at 03:16:18PM -0400, Burke, Thomas G. wrote:
> I have gone through my box, and I see no evidence of a successful
> break-in, except for the fact that my machine is talking to some
> other machine. So, here are the questions:
Assuming there has been a break in, and the guy (gal) is not a
complete idiot, likely that you now have trojanized binaries installed
as replacements for ls, ps, top, netstat, etc. He may have a base
setup on your box that is completely invisible to these modified
versions.
http://www.redhat.com/support/docs/tips/urls/txt/intruder_detect_checklist
--
Hal B
[EMAIL PROTECTED]
--
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
