Possible compromise ?

Eric Anderson anderson at centtech.com
Tue Jan 27 08:56:31 PST 2004

Peter Rosa wrote:
> Hello,
> please, is there some way to list ALL users, who connect remotely to my
> machine ? It is our gateway, so it should be one-user machine, but if I list
> /var/log/lastlog binary file, there are some lines showing usage of ttyp0.
> That console I have disabled in ttys, so why there are that lines ? How
> could I make FreeBSD to show that file in readable way ?

man last

> Was my machine compromised ?

More information and a more clearly worded question would help.


Eric Anderson     Sr. Systems Administrator    Centaur Technology
Today is the tomorrow you worried about yesterday.

More information about the freebsd-security mailing list