Re: [cobalt-users] Chkrootkit anomalie

["John D. Gorena" <Support@xxxxxxxxxxxxxxxxxxx>]

Yes, I have logged in and when I logged in today, it listed the last time I logged it and it was
about right.

What should I look for?

John




Jeroen Wunnink wrote:
> 
> Depends
> 
> Have you actually ever logged in as root ?, and IF you did that, did you
> use the bash shell ?
> 
> That file simply holds a history of entered commands by root.., hackers
> tend to erase the file in order to mask their actions..
> 
> At 06:55 AM 4/24/2003 -0500, you wrote:
> >The daily chkroot kit gave this warning:
> >
> >Searching for anomalies in shell history files... Warning:
> >`//root/.bash_history' file size is zero
> >nothing found
> >
> >What should I be concerned about?
> >
> >
> >John
> >
> >_____________________________________
> >cobalt-users mailing list
> >cobalt-users@xxxxxxxxxxxxxxx
> >To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> >http://list.cobalt.com/mailman/listinfo/cobalt-users
> 
> Met vriendelijke groet,
> 
> Jeroen Wunnink,
> systeembeheer@xxxxxxxxxxxxxx
> 
> telefoon:+31 (035) 6285455              Postbus 1332
> fax: +31 (035) 6838242                  1200 BH Hilversum
> 
> http://www.easyhosting.nl
> 
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      \\|//     John D. Gorena, PC Services & Internet Marketing
     \\\|///    http://www.JMG-Enterprises.com
    \\ ~ ~ //   Office: 972-315-5377
    (\ @ @ /)   John.Gorena@xxxxxxxxxxxxxxxxxxx
~~oOOo~(_)~oOOo~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~