Hacked?

Brett Glass brett at lariat.org
Fri May 9 10:01:37 PDT 2003


At 08:25 AM 5/9/2003, Bjoern A. Zeeb wrote:

>this asumes that truss is ok ;-) perhaps take the truss from your
>other 4.7 machine ...

Yes, you do have to be careful of this. I recently investigated a
machine that had been "owned," and when truss was applied to some
commands (e.g. netstat) it produced no output.

--Brett



More information about the freebsd-security mailing list