[OT] On goats, rootkits and other "beasts" (was: Unknown HZ value! (92) Assume 100.)

2011-11-25 Thread Camaleón
On Fri, 25 Nov 2011 18:19:56 +, Brian wrote: > On Fri 25 Nov 2011 at 16:59:40 +, Camaleón wrote: > >> If his majesty Laius would had the option of doing a Google search, he >> had found his own article (and so what the future reserved for him...) >> written at the "Olympuspedia" :-P > >

Re: Unknown HZ value! (92) Assume 100.

2011-11-25 Thread Brian
On Fri 25 Nov 2011 at 16:59:40 +, Camaleón wrote: > If his majesty Laius would had the option of doing a Google search, he > had found his own article (and so what the future reserved for him...) > written at the "Olympuspedia" :-P Olympuspedia would never capture the imagination. It's not

Re: Unknown HZ value! (92) Assume 100.

2011-11-25 Thread Camaleón
On Thu, 24 Nov 2011 22:18:01 +, Brian wrote: > On Thu 24 Nov 2011 at 18:52:59 +, Camaleón wrote: > >> Ancient Greeks went to Oracle at Delphi to get answers. Now we have >> Google ;-) > > King Laius would have benefitted from a good dose of skeptism too. :) If his majesty Laius would ha

Re: Unknown HZ value! (92) Assume 100.

2011-11-24 Thread Walter Hurry
On Thu, 24 Nov 2011 22:38:05 +, Brian wrote: > On Thu 24 Nov 2011 at 19:11:16 +, Walter Hurry wrote: > >> PMFJI. What is an rkhunter "deep scan"? I use rkhunter but am not aware >> of any "deep scan" option. > > 'deep scan' mode was a planned but unimplemented addition to rkhunter's > ca

Re: Unknown HZ value! (92) Assume 100.

2011-11-24 Thread Brian
On Thu 24 Nov 2011 at 19:11:16 +, Walter Hurry wrote: > PMFJI. What is an rkhunter "deep scan"? I use rkhunter but am not aware > of any "deep scan" option. 'deep scan' mode was a planned but unimplemented addition to rkhunter's capabilities. From the unpublished manual: --deep-scan

Re: Unknown HZ value! (92) Assume 100.

2011-11-24 Thread Brian
On Thu 24 Nov 2011 at 18:52:59 +, Camaleón wrote: > Ancient Greeks went to Oracle at Delphi to get answers. Now we have > Google ;-) King Laius would have benefitted from a good dose of skeptism too. :) > I'm afraid the rootkit is not distribution specific. > > I would run a deep scan with

Re: Unknown HZ value! (92) Assume 100.

2011-11-24 Thread Weaver
Nov 2011 12:00:27 +0100, Andrea Ganduglia wrote: > >>> > >>> > I see this message when I call `top' > >>> > > >>> > Unknown HZ value! (92) Assume 100. > >>> > > >>> > What happen? > >>> > &

Re: Unknown HZ value! (92) Assume 100.

2011-11-24 Thread Walter Hurry
On Thu, 24 Nov 2011 18:52:59 +, Camaleón wrote: > > I'm afraid the rootkit is not distribution specific. > > I would run a deep scan with the mentioned tool (rkhunter) to be sure. PMFJI. What is an rkhunter "deep scan"? I use rkhunter but am not aware of any "deep scan" option. Thanks.

Re: Unknown HZ value! (92) Assume 100.

2011-11-24 Thread Camaleón
> > I see this message when I call `top' >>> > >>> > Unknown HZ value! (92) Assume 100. >>> > >>> > What happen? >>> >>> Wow... found this on Google: >> >> Someone was bound to. :) Ancient Greeks went to Oracle at Delphi to get a

Re: Unknown HZ value! (92) Assume 100.

2011-11-24 Thread Andrea Ganduglia
:- Original post talks abount RHEL and CentOS. http://www.bigismore.com/web-server-security/unknown-hz-value-assume-100-youve-been-hacked/ ??? On Wed, Nov 23, 2011 at 6:48 PM, Brian wrote: > On Wed 23 Nov 2011 at 17:36:40 +, Camaleón wrote: > >> On

Re: Unknown HZ value! (92) Assume 100.

2011-11-23 Thread Brian
On Wed 23 Nov 2011 at 17:36:40 +, Camaleón wrote: > On Wed, 23 Nov 2011 12:00:27 +0100, Andrea Ganduglia wrote: > > > I see this message when I call `top' > > > > Unknown HZ value! (92) Assume 100. > > > > What happen? > > Wow... found this o

Re: Unknown HZ value! (92) Assume 100.

2011-11-23 Thread J. Bakshi
On Wed, 23 Nov 2011 12:00:27 +0100 Andrea Ganduglia wrote: > I see this message when I call `top' > > Unknown HZ value! (92) Assume 100. > > What happen? > > upgrade / reinstall the procps package -- To UNSUBSCRIBE, email to debian-user-requ...@lists.deb

Re: Unknown HZ value! (92) Assume 100.

2011-11-23 Thread Camaleón
On Wed, 23 Nov 2011 12:00:27 +0100, Andrea Ganduglia wrote: > I see this message when I call `top' > > Unknown HZ value! (92) Assume 100. > > What happen? Wow... found this on Google: *** So you got rooted by SHV4 / SHV5 rootkit... http://www.huweb.hu/maques/mblog/?p=153 *

Re: Unknown HZ value! (92) Assume 100.

2011-11-23 Thread Andrea Ganduglia
+0100, Andrea Ganduglia wrote: > >> I see this message when I call `top' >> >> Unknown HZ value! (92) Assume 100. >> >> What happen? > > More information, please. Which version of Debian? What architecture is > being used? Do you only install softwa

Re: Unknown HZ value! (92) Assume 100.

2011-11-23 Thread Brian
On Wed 23 Nov 2011 at 12:00:27 +0100, Andrea Ganduglia wrote: > I see this message when I call `top' > > Unknown HZ value! (92) Assume 100. > > What happen? More information, please. Which version of Debian? What architecture is being used? Do you only install software

Unknown HZ value! (92) Assume 100.

2011-11-23 Thread Andrea Ganduglia
I see this message when I call `top' Unknown HZ value! (92) Assume 100. What happen? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAHEyzgrOo

Re: chkrootkit output question - Unknown HZ value!???

2004-05-27 Thread Derrick 'dman' Hudson
On Tue, May 25, 2004 at 04:03:14PM -0700, August MacBeth wrote: | Derrick, | | supposedly when machines are up for a lng ass time, procps gets | whacked and this error starts popping up.. solution: reboot or upgrade | to a new(er) version of procps. Ok, thanks. I think I'll wait a while an

Re: chkrootkit output question - Unknown HZ value!???

2004-05-25 Thread Micha Feigin
t > | again to see if it went away and it came back with the same info. i > | google'd a bit but couldn't find anything.. > | > | Checking `inetd'... Unknown HZ value! (0) Assume 100. > | not infected > > Run 'bash' as root and you might see the

Re: chkrootkit output question - Unknown HZ value!???

2004-05-25 Thread August MacBeth
st MacBeth wrote: | i'm getting some strange output from chkrootkit on one of my woody | servers. can anyone tell me what this means? i ran chkrootkit | again to see if it went away and it came back with the same info. i | google'd a bit but couldn't find anything.. | | Checking `i

Re: chkrootkit output question - Unknown HZ value!???

2004-05-25 Thread Derrick 'dman' Hudson
t couldn't find anything.. | | Checking `inetd'... Unknown HZ value! (0) Assume 100. | not infected Run 'bash' as root and you might see the same message : # bash Unknown HZ value! (26) Assume 100. I have no idea what is printing this message or why. I do know that o

chkrootkit output question - Unknown HZ value!???

2004-05-25 Thread August MacBeth
i'm getting some strange output from chkrootkit on one of my woody servers. can anyone tell me what this means? i ran chkrootkit again to see if it went away and it came back with the same info. i google'd a bit but couldn't find anything.. Checking `inetd'... Unknown HZ v

Re: Unknown HZ value! (0) Assume 100.

2002-11-10 Thread Patrick Hsieh
ge since it is not really > harmful? Why not send to syslog or somewhere else? Oops! This is not the linux kernel problem, but the "procps" package problem. This is probably a work-around: 1. $ apt-get source procps 2. $ cd procps-VERSION 3. edit proc/sysinfo.c 165c165 < fprin

Re: Unknown HZ value! (0) Assume 100.

2002-11-10 Thread Patrick Hsieh
> > I don't know. But the HZ value is set in /etc/login.defs, in my case > like this: > > ENV_HZ HZ=100 > > > Also, quoted from 'man login.defs': > > ENV_HZ (string) > This parameter specifies a value for an HZ environ� > ment parameter. Example usage is: > >

Re: Unknown HZ value! (0) Assume 100.

2002-11-10 Thread nate
Patrick Hsieh said: > Hello list, > > I began to see this message when I type ps in Debian woody kernel 2.4.16. > I searched the google and was noticed that it could be a bug in libproc. > Is it true? Any way to fix this problem? > not really a bug, just a harmless message. I first enocuntered th

Re: Unknown HZ value! (0) Assume 100.

2002-11-10 Thread Shyamal Prasad
"Patrick" == Patrick Hsieh <[EMAIL PROTECTED]> writes: Patrick> Hello list, I began to see this message when I type ps in Patrick> Debian woody kernel 2.4.16. I searched the google and was Patrick> noticed that it could be a bug in libproc. Is it true? Patrick> Any way to fix

Re: Unknown HZ value! (0) Assume 100.

2002-11-10 Thread Patrick Hsieh
I saw this on linux-kernel mailing list. http://www.cs.helsinki.fi/linux/linux-kernel/2001-21/0756.html So what can I do for my Debian woody? -- Patrick Hsieh<[EMAIL PROTECTED]> GnuPG Pubilc Key at http://www.ezplay.tv/~pahud/pahudatezplay.pubkey MD5 checksum: b948362c94655b74b33e859d58b8de9

Unknown HZ value! (0) Assume 100.

2002-11-10 Thread Patrick Hsieh
Hello list, I began to see this message when I type ps in Debian woody kernel 2.4.16. I searched the google and was noticed that it could be a bug in libproc. Is it true? Any way to fix this problem? My system info: # uname -a Linux luke 2.4.16 #7 SMP Thu Dec 13 09:09:23 CST 2001 i686 unknown #

Re: Unknown HZ value! (16) Assume 100 error

2002-05-03 Thread Stephen Ryan
On Thu, 2002-05-02 at 17:32, Paul Gonsior wrote: > Can I get an idea of what this message means please when I perform a ps x? Let me guess; this is on a machine that's been on for a while, isn't it? It's a known kernel bug, in that there's an arithmetic overflow in calculating the uptime after 2^

Unknown HZ value! (16) Assume 100 error

2002-05-02 Thread Paul Gonsior
Can I get an idea of what this message means please when I perform a ps x? -- This message is intended for the addressee named and may contain confidential information. If you are not the intended recipient, please delete it and notify the sender. -- -- To UNSUBSCRIBE, email to [EMAIL PROTE

Re: Unknown HZ value!

2002-04-23 Thread Stephen Ryan
On Tue, 2002-04-23 at 04:16, Dave Whiteley wrote: > Hello, > > I have a server that has been running sweetly for almost a > year. Yesterday I did my regular upgrade via dselect while installing > inn, and it has now started printing messages:- > > Unknown HZ value! (22) Ass

Unknown HZ value!

2002-04-23 Thread Dave Whiteley
Hello, I have a server that has been running sweetly for almost a year. Yesterday I did my regular upgrade via dselect while installing inn, and it has now started printing messages:- Unknown HZ value! (22) Assume 100. It does this reliably before the output of a 'ps'. I think I have

[WORKED-AROUND] Re: Unknown HZ value

2001-12-03 Thread nate
> mail:~# uptime > Unknown HZ value! (0) Assume 100. > 1:31pm up 249 days, 2:39, 2 users, load average: 0.10, 0.03, > 0.01 did some more research and it seems it is a bug in the kernel, but procps detects it and spits out the message. the procps in woody claims to have a fix t

Unknown HZ value

2001-12-02 Thread nate
that recently passed the 220-230 day uptime. a couple weeks ago the mrtg graphs for a mailserver completly inversed out of nowhere(nothing changed on the system). very odd! here is the error: mail:~# uptime Unknown HZ value! (0) Assume 100. 1:31pm up 249 days, 2:39, 2 users, load average: 0.10