[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] Re: corrupt ifconfig
- Subject: [cobalt-users] Re: corrupt ifconfig
- From: Bruce Timberlake <bruce@xxxxxxxxxx>
- Date: Sat Mar 22 09:32:01 2003
- Organization: BRTNet.org
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> ifconfig is a binary, how could he edit or change it.
> I doubt that it is corrupt, if it is get a copy and replace it.
Could it be a trojaned binary? Someone might have hacked the box to
run a traffic sniffer or something (putting eth0 in promisc etc) and
the modified ifconfig was meant to hide that fact...?
Might want to install chkrootkit and see if it shows anything...
(www.cobaltfaqs.com)
- --
Bruce Timberlake
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE+fJ3hvLA2hUZ9kgwRAtwdAJ4xNG8yUYmdg6LTaojohM1jwKrSMACfUwDL
0TpDqVTn5+l8Ov56txTBUvs=
=Cf74
-----END PGP SIGNATURE-----