LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian
User Name
Password
Debian This forum is for the discussion of Debian Linux.

Notices


Reply
  Search this Thread
Old 02-07-2006, 09:41 AM   #1
beebelo
Member
 
Registered: Mar 2005
Location: USA
Distribution: Ubuntu Studio 13.1, Debian Stable (Wheezy)
Posts: 68

Rep: Reputation: 15
security question: did I have an intruder?


This topic is something I'm concerned about, but mostly feel ignorant, incompetent, and inadequate.

I was at the system console viewing packages in Aptitude. X was not running. Nothing was installing at the moment. I was just reading. Seemingly out of the blue a message popped up, saying "sysadm: /dev/Xconsole does not exist".

This freaked me out because I just got DSL last week and I've actually been trying to learn as much as I can about firewalls and intrusion detection apps like Snort. But I'm not ready to be invaded!

Anyway, I am a single workstation behind an ADSL modem/router. Is it possible the message was innocuous, or did it mean someone tried to log into my machine? Which log would it be in?

Just to make this more fun: Supposedly, GuardDog was running, but I'm not sure. I tried KDE for a week to check it out. (I hated it, btw <G>). I was in Aptitude, starting to remove it one piece at a time, beginning with the 'extras'.)

Last edited by beebelo; 02-07-2006 at 09:46 AM.
 
Old 02-07-2006, 09:49 AM   #2
TigerOC
Senior Member
 
Registered: Jan 2003
Location: Devon, UK
Distribution: Debian Etc/kernel 2.6.18-4K7
Posts: 2,380

Rep: Reputation: 49
Check /var/log/auth.log to see if anyone has gained privileges.
 
Old 02-07-2006, 09:57 AM   #3
beebelo
Member
 
Registered: Mar 2005
Location: USA
Distribution: Ubuntu Studio 13.1, Debian Stable (Wheezy)
Posts: 68

Original Poster
Rep: Reputation: 15
Thank you.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Intruder detection system nethunter Linux - Security 9 12-31-2005 01:00 AM
rkhunter --update & Helix 1.5 (intruder nabbed!) t3gah Linux - Security 0 04-14-2005 07:54 PM
How to track who's helping intruder pass through firewall pingu Linux - Security 8 08-10-2004 07:47 AM
intruder into my system? What can I do? Y0jiMb0 Linux - Security 18 01-31-2004 11:10 AM
How do you kick some intruder out? hubergeek Linux - Networking 1 04-23-2002 03:59 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian

All times are GMT -5. The time now is 03:16 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration