LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - General (http://www.linuxquestions.org/questions/linux-general-1/)
-   -   Help: I think my system has been compromised! (http://www.linuxquestions.org/questions/linux-general-1/help-i-think-my-system-has-been-compromised-68880/)

Comatose51 06-29-2003 04:39 PM

Help: I think my system has been compromised!
 
My current outgoing rate is 240 kbits/sec.

There's nothing on my network that should be uploading anything.

How can I check what is sending all this traffic and to where? I'm on RedHat 8.0.

It stopped as soon as I stopped xinetd. The only service I think xinetd runs is vsftpd. But I checked my log for vsftpd and there's nothing. So now, how do I root out the problem and secure it?

Thanks in advance.

Edited: Problem solved. Someone was in fact downloading from but vsftpd didn't log it until after it was over.

tr4nce 06-29-2003 04:52 PM

maybe a NODE is down and you are actually the Supernode of your zone?

Comatose51 06-29-2003 05:00 PM

What are you talking about??? Kazaa? It's not running on any of my systems and xinetd and it's services seem to be the cause of it. I'm guessing it's vsftpd.


All times are GMT -5. The time now is 05:08 AM.