[1881] in linux-security and linux-alert archive

home help back first fref pref prev next nref lref last post

[linux-security] Re: Help with : telnetd[...]: ttloop: peer died: Success

daemon@ATHENA.MIT.EDU (Kevin Vajk)
Tue Jun 16 02:31:54 1998

Date: Mon, 15 Jun 1998 08:55:48 -0700 (PDT)
From: Kevin Vajk <kvajk@ricochet.net>
To: linux-security@redhat.com
In-Reply-To: <3.0.5.32.19980614135527.0089ed80@eagleone.dynip.com>
Resent-From: linux-security@redhat.com
Resent-Reply-To: linux-security@redhat.com


On Sun, 14 Jun 1998, Eagle One wrote:
> What can cause this
> 	telnetd[...]: ttloop:  peer died: Success

Being port-scanned might cause this.  In /var/log/secure there ought to be
a telnetd entry to correspond to this.  (i.e. same date and PID.)  It
should have the IP address the connection was initiated from.

> I have discovered that "top" no longer will display any task activity.

This is worrisome.  Maybe your new friend got in.  Were you up to date on
the latest security fixes?  I would recommend a fresh install, personally.
Also, do "ps aux" and look for any weird processes.

- Kevin Vajk
  <kvajk@ricochet.net>

-- 
----------------------------------------------------------------------
Please refer to the information about this list as well as general
information about Linux security at http://www.aoy.com/Linux/Security.
----------------------------------------------------------------------

To unsubscribe:
  mail -s unsubscribe linux-security-request@redhat.com < /dev/null


home help back first fref pref prev next nref lref last post