Possible compromise ?

Peter Rosa prosa at pro.sk
Tue Jan 27 08:45:30 PST 2004


Hello,

please, is there some way to list ALL users, who connect remotely to my
machine ? It is our gateway, so it should be one-user machine, but if I list
/var/log/lastlog binary file, there are some lines showing usage of ttyp0.
That console I have disabled in ttys, so why there are that lines ? How
could I make FreeBSD to show that file in readable way ?

Was my machine compromised ?

Peter Rosa



More information about the freebsd-security mailing list