freebsd at edvax.de
Mon Oct 2 00:11:51 UTC 2017
On Sun, 1 Oct 2017 17:25:31 -0600, The Doctor wrote:
> Could be an attack.
> All right.
> As of this morning (3 p.m. UTC) my seconday FreeBSD 11.1 server
> has been going intreface down then up and then unable to route.
> Rebooted this system 2 times today.
> What should I bee looking for?
Primarily the system's log files in /var/log: messages, auth.log,
security. Also check the output of the periodic scripts (mailed
to root or another user), do they contain hints to something that
looks suspicious (SUID changes, system file modifications, etc.)?
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
More information about the freebsd-questions