Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 11 Dec 1996 12:53:23 +1030 (CST)
From:      Michael Smith <msmith@atrad.adelaide.edu.au>
To:        taob@io.org (Brian Tao)
Cc:        brian@saturn.net, freebsd-security@freebsd.org
Subject:   Re: URGENT: Packet sniffer found on my system
Message-ID:  <199612110223.MAA21192@genesis.atrad.adelaide.edu.au>
In-Reply-To: <Pine.BSF.3.95.961210201448.9494A-100000@nap.io.org> from Brian Tao at "Dec 10, 96 08:40:46 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Brian Tao stands accused of saying:
> 
>     I did find the following three files on one of the shell servers,
> which suggests the original compromise started there:
> 
> -rw-r--r-- speff/user     2363 Dec  1 17:37 1996 usr/include/net/nit_buf.h
> -rw-r--r-- speff/user     2628 Dec  1 17:37 1996 usr/include/net/nit_if.h
> -rw-r--r-- speff/user     3016 Dec  1 17:37 1996 usr/include/sys/stropts.h

*snort* Amusing to note that none of these are BSD-relevant (NIT is
the Sun equivalent of BPF, and stropts?).  One can hope that your
hacker was less than genius material.  8)

> Brian Tao (BT300, taob@io.org, taob@ican.net)

-- 
]] Mike Smith, Software Engineer        msmith@gsoft.com.au             [[
]] Genesis Software                     genesis@gsoft.com.au            [[
]] High-speed data acquisition and      (GSM mobile)     0411-222-496   [[
]] realtime instrument control.         (ph)          +61-8-8267-3493   [[
]] Unix hardware collector.             "Where are your PEZ?" The Tick  [[



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199612110223.MAA21192>