Possible compromise ?
Eric Anderson
anderson at centtech.com
Tue Jan 27 08:56:31 PST 2004
Peter Rosa wrote:
> Hello,
>
> please, is there some way to list ALL users, who connect remotely to my
> machine ? It is our gateway, so it should be one-user machine, but if I list
> /var/log/lastlog binary file, there are some lines showing usage of ttyp0.
> That console I have disabled in ttys, so why there are that lines ? How
> could I make FreeBSD to show that file in readable way ?
man last
> Was my machine compromised ?
More information and a more clearly worded question would help.
Eric
--
------------------------------------------------------------------
Eric Anderson Sr. Systems Administrator Centaur Technology
Today is the tomorrow you worried about yesterday.
------------------------------------------------------------------
More information about the freebsd-security
mailing list