Date: Wed, 12 Aug 1998 09:27:01 -0400 (EDT) From: Ben Hockenhull <benh@jpj.net> To: "sysadmin@mfn.org" <sysadmin@mfn.org> Cc: "'freebsd-questions@freebsd.org'" <freebsd-questions@FreeBSD.ORG> Subject: Re: "Intruder Alert"??? Message-ID: <Pine.BSI.3.95.980812092538.4929B-100000@blues.jpj.net> In-Reply-To: <01BDC59B.56235200@noc.mfn.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Chances are you have fortune turned on at login. That's one of the more, um, interesting fortunes. :) % grep -i intruder /usr/share/games/fortune/* will show you the light. Ben -- Ben Hockenhull benh@jpj.net On Wed, 12 Aug 1998, sysadmin@mfn.org wrote: > While sniffing my network in the middle of the night, > trying to figure out what the $^&*^ is going on here > with the crazy NFS problems here, I got the following > on my telnet login (prefaced with a couple of beeps): > > measl@smaug$ su -l root > su: kerberos: not in root's ACL. > Password: > ccd /Security check: INTRUDER ALERT! > > Where does this *come from*? I've never seen nor > heard of it before, so I have no way of trying to > look at whatever triggered it (probably me, but > who knows?). BTW: all looks normal in terms > of who is on and where they are on (as well as what > they are doing). > > <ponder> > > J.A. Terranson > sysadmin@mfn.org > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSI.3.95.980812092538.4929B-100000>