possible intrusion?
n0n4m3
n0n4m3 at icn.pl
Tue Jul 1 11:56:34 PDT 2003
whats this ?
On Tue, 1 Jul 2003, Sergei Vyshenski wrote:
> Today discovered the following in /var/log:
>
> -rw-r--r-- 1 root wheel 176 Jul 1 14:37 wtmp
> -rw-r--r-- 1 root wheel 0 Jul 1 05:20 wtmp.0
> -rw-r--r-- 1 root wheel 0 Jul 1 05:00 wtmp.1
> -rw-r--r-- 1 root wheel 20460 Jul 1 00:19 wtmp.2
> -rw-r--r-- 1 root wheel 0 Jun 1 05:20 wtmp.3
>
> While file /etc/newsyslog says:
>
> /var/log/wtmp root.wheel 644 3 * @01T05 B
>
> The system is 4.8-STABLE FreeBSD 4.8-STABLE #0: Tue Jun 17 22:09:23 MSD 2003
>
> Could this mean the sign of intrusion?
>
> Thank you very much for any comment ahead of time,
> Sergei
>
> _______________________________________________
> freebsd-stable at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "freebsd-stable-unsubscribe at freebsd.org"
>
More information about the freebsd-stable
mailing list