Is my sytem hacked/ Suddenly some serious problem

root (root@goat.up.nic.in)
Wed, 16 Dec 1998 16:27:30 +0530 (IST)


Hi all,

I am using RH 5.0, kernel 2.0.36. Every thing was OK for 2 months but a
week earlier I found my machine behaving indiffrently. Pine shows my mails
readonly and system stopped giving signals for new mails. No line after
login and ps ae command shows permission denied. My root gets follwing
mails. Hundreds os similar mails I got in root. Pl ease let me know what
has happend with my system.

Also let me know How can I know about my system being hacked?

---------- Forwarded message ----------
Date: Mon, 7 Dec 1998 01:02:01 +0530
From: Cron Daemon <root@goat.up.nic.in>
To: root@goat.up.nic.in
Subject: Cron <root@goat> run-parts /etc/cron.daily

touch: /tmp/doex1256: Permission denied
chmod: /tmp/doex1256: No such file or directory
/usr/lib/news/bin/news.daily: /tmp/doex1256: Permission denied
Server status:
No innd.pid file; did server die?
Can't send "mode" command (sendto failure) No such file or directory.

Disk usage:
/dev/sda1 3701511 948793 2561231 27% /

Batch file sizes:

Log file sizes:
0 errlog 0 news 0 news.err 81 nntpsend.log
24 expire.log 0 news.crit 0 news.notice 0 unwanted.log

Innwatch is not running

Server connections:
No innd.pid file; did server die?
Can't send "name" command (sendto failure) No such file or directory.

No innd.pid file; did server die?
Can't send "logmode" command (sendto failure) No such file or directory.
No innd.pid file; did server die?
Can't send "pause" command (sendto failure) No such file or directory.
No innd.pid file; did server die?
Can't send "flushlogs" command (sendto failure) No such file or directory.
Cannot flush logs.
Post expiration status:

Server status:
No innd.pid file; did server die?
Can't send "mode" command (sendto failure) No such file or directory.

Disk usage:
/dev/sda1 3701511 948795 2561229 27% /

Batch file sizes:

Log file sizes:
0 errlog 0 news 0 news.err 81 nntpsend.log
25 expire.log 0 news.crit 0 news.notice 0 unwanted.log

Lock files:
LOCK.news.daily

Server connections:
No innd.pid file; did server die?
Can't send "name" command (sendto failure) No such file or directory.

Renumbering active file.
No innd.pid file; did server die?
Can't send "renumber" command (sendto failure) No such file or directory.

-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.rutgers.edu