RE: [cobalt-users] Strange RaQ3 Crash...PHP???

[Bradley Caricofe <caricofe@xxxxxxxxxxx>]

> Anything's possible.  Even breakins/hacks that aren't found by
> chkrootkit.
> 
> > The server is probably in need of rebuilding, many, many files located
> > throughout the system have strings of
> > UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU all throughout them. 
>  I'm told by
> > the isp that these are artifacts of a disk restore they had to do?
> 
> Much more likely artifact of a broken hard disk?  I think the hard disk
> is in need of replacement; certainly complete restore from format up
> <frown>.
> 
> > My
> > system was never backed up by these folks that I know of, so 
> I'm not sure
> > what the disk restore process they are referring to entails.
> 
> I presume you'll ask them.  That's the only way to find out.
> 
> > I don't want
> > to rebuild this system until I know what happened.  Logs on the 
> server don't
> > show much at all, they just stop recording when it crashed and 
> start again
> > when it came up 2 hours later.  I did run the latest version of 
> chkrootkit,
> > it says all good.  Can anyone tell me where else to look for 
> info on what
> > caused this?
> 
> At your ISP for information on what they rebuilt it from, for starters.
> 
> My guess is they'll tell you they simply did an fsck and the system came
> back up.
> 
> Sounds like you will be down for long enough to do a complete restore
> <frown>.
> 
> You can use cmu to migrate the sites, then tar up the cmu's directory
> structure and save it somewhere, then move it back and restore... but if
> so you risk loosing a lot of data from those funny looking files.
> 
> Jeff
> -- 
> Jeff Lasman <jblists@xxxxxxxxxxxxx>
> Linux and Cobalt/Sun/RaQ Consulting
> nobaloney.net
> P. O. Box 52672, Riverside, CA  92517
> voice: (909) 778-9980  *  fax: (702) 548-9484
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users