[lug] Linux boxes drop off the net? Router problem?

D. Stimits stimits at idcomm.com
Mon Feb 5 11:37:21 MST 2001


Sebastian Sobolewski wrote:
> 
...
> 
> 5.  Are you running any "strange" services on your linux boxes.  Check
> /var/log/messages for any entries specifying that your Ethernet is in
> promiscuous mode.  If you find it most likely means your boxes have
> been compromised.
> 
...

FYI, my email a few minutes ago suggested ntop as a monitor. If you use
it, you will see promiscuous mode while it runs (same with other
sniffing software, which is why it would be something to worry about if
you are not the one running it).



More information about the LUG mailing list