Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
 |
01-20-2005, 08:46 AM
|
#1
|
LQ Newbie
Registered: Jan 2005
Posts: 5
Rep:
|
Error log in /var/log/messages
Hi all. Need your help .. thx.
I am using Redhat 9 2.4.26
I found the following logs in /var/log/messages these days... (occurs 3~4 times this week.. no other log is found in the same time as these log:
kernel: NET: 1 messages suppressed.
kernel: NET: 2 messages suppressed.
kernel: NET: 1 messages suppressed.
kernel: NET: 6 messages suppressed.
kernel: NET: 1 messages suppressed.
kernel: NET: 2 messages suppressed.
Anyone knows what are they ?
Any bad impact to my linux box?
what should I do ??
Thanks !!
|
|
|
01-21-2005, 10:24 AM
|
#2
|
LQ Newbie
Registered: Aug 2004
Location: Dendermonde, Belgium
Distribution: Ubuntu latest
Posts: 28
Rep:
|
Can you launch ethereal or tcpdump.
you can match the timestamps and see what's going on..
|
|
|
01-21-2005, 10:43 AM
|
#3
|
LQ Newbie
Registered: Jan 2005
Posts: 5
Original Poster
Rep:
|
thx...
but... how to post it out ???
|
|
|
01-21-2005, 10:53 AM
|
#4
|
LQ Newbie
Registered: Aug 2004
Location: Dendermonde, Belgium
Distribution: Ubuntu latest
Posts: 28
Rep:
|
Installing iptables and log all packets is also an option...
Then you'll have to see where they come from..
success
|
|
|
01-21-2005, 11:13 AM
|
#5
|
LQ Newbie
Registered: Jan 2005
Posts: 5
Original Poster
Rep:
|
sorry , I am new to Linux..
any command / any specific files I can try to see ?
Thx for your kind help !
|
|
|
01-22-2005, 05:47 AM
|
#6
|
LQ Newbie
Registered: Jan 2005
Posts: 11
Rep:
|
Hello,
I got an other problem in the log file /var/log/message which I don't understand what it is.
------------------------------
Jan 19 09:32:15 myhost userhelper: pam_timestamp: `/' permissions are lax
------------------------------
I tried: #ls -ld /
It returned: drwxrwx--x 20 root root 4096 Jan 12 12:51
What's happend? And How do I do now?
Thank you,
|
|
|
01-24-2005, 06:02 AM
|
#7
|
LQ Newbie
Registered: Aug 2004
Location: Dendermonde, Belgium
Distribution: Ubuntu latest
Posts: 28
Rep:
|
|
|
|
01-24-2005, 06:06 AM
|
#8
|
LQ Newbie
Registered: Aug 2004
Location: Dendermonde, Belgium
Distribution: Ubuntu latest
Posts: 28
Rep:
|
Hey vhh
your root dir seems to be group writable.
do a:
success
|
|
|
01-26-2005, 07:56 AM
|
#9
|
LQ Newbie
Registered: Jan 2005
Posts: 11
Rep:
|
Thanks wimdh! I've done it already.
Why did it show me the notice under username "userhelper"? Did someone hack at me?
Anyway, thank you.
|
|
|
01-26-2005, 08:17 AM
|
#10
|
LQ Newbie
Registered: Aug 2004
Location: Dendermonde, Belgium
Distribution: Ubuntu latest
Posts: 28
Rep:
|
Hi vhh
userhelper is a part of PAM
try man userhelper.
PAM reported the error when someone autenticated I think...
|
|
|
All times are GMT -5. The time now is 10:00 AM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|