LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 11-26-2007, 12:29 PM   #1
szim90
Member
 
Registered: Nov 2006
Distribution: Debian Testing
Posts: 39

Rep: Reputation: 15
Does strange activity on a system mean it has been hacked?


Hello.

This may seem an odd and probably paranoid question, but does a sound file randomly opening mean that the system has been hacked?

The other day, I was watching a movie in mplayer. The system was connected to the internet through a router (with ssh port forwarding on) and had firefox/iceweasel open. I paused the movie to check my email on another system. Then, after a few seconds, a sound file I had on the desktop began to play. The file was in a different directory than the movie, so I don't think I could have queued the file by accident. Is this some strange system bug or is this evidence of a real problem?

I am running debian testing with a 2.6.18 kernel, and manage the software firewall using firestarter.

Thanks for any help.

Regards,
Sean
 
Old 11-26-2007, 05:01 PM   #2
complich8
Member
 
Registered: Oct 2007
Distribution: rhel, fedora, gentoo, ubuntu, freebsd
Posts: 104

Rep: Reputation: 17
I would probably check the last logs, auth failures, who, netstat, and dmesg, and barring that chalk it up to strange behavior of your wm/de or file browser.

But I'm not an alarmist. YMMV.
 
Old 11-27-2007, 06:14 AM   #3
nx5000
Senior Member
 
Registered: Sep 2005
Location: Out
Posts: 3,307

Rep: Reputation: 57
Start by reading this:
http://www.linuxquestions.org/questi...erences-45261/
 
Old 11-29-2007, 11:44 AM   #4
szim90
Member
 
Registered: Nov 2006
Distribution: Debian Testing
Posts: 39

Original Poster
Rep: Reputation: 15
I searched the logs and nothing seems to be out of place, so I guess it was just an odd bug.

Thank you for your help, and thanks for the guide, it had some very helpful links.

Regards,
Sean
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
hard drive strange activity paind Linux - Hardware 3 07-14-2007 04:22 AM
strange lilo activity tgo Linux - Software 2 12-19-2006 10:29 PM
Strange tcpdump activity. NuxIT Linux - Networking 2 05-18-2006 03:35 AM
Strange PPP activity gauge73 Linux - Networking 0 08-18-2004 06:46 PM
Strange network activity !!!!!! OneManArmy Linux - Newbie 3 07-14-2004 10:19 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 08:08 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration