[Techtalk] mysterious system halts - how to prevent/fix/detect?

Malcolm-Rannirl rannirl-lc at otherkin.net
Wed Jun 5 11:10:17 EST 2002


On Wednesday 05 June 2002 10:29 am, Mandi wrote:

> You may also want to poke around looking for a cracker, nmap scan the box,
> see if anything weird is open and listening.

I was about to suggest that. We had a cracker get one of the servers I worked 
on (learned a lot about security from that incident), and installed a kernel 
module as part of the rootkit. Having someone deliberately crash the machine 
to force a reboot (and thus a kernel reload) seems plausible.

It does sound more like the power supply problem that someone else suggested. 
(I've had a few PSs die on me with similar results).




-- 
"Let's just say that if complete and utter chaos was lightning, he'd
be the sort to stand on a hilltop in a thunderstorm wearing wet copper
armour and shouting 'All gods are bastards'."
-- Rincewind about Twoflower, The Colour of Magic

<<------------------------------------------------------------------>>
<<  This email is monitored by the US government under the auspice  >>
<< of the USA act. For private communication, ask me for my PGP key >>
<< ----- PGP: envelopes for email - www.pgp.com www.gnupg.org ----- >>



More information about the Techtalk mailing list