Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 29 Apr 2012 17:15:57 +0000 (UTC)
From:      jb <jb.1234abcd@gmail.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: UFS Crash and directories now missing
Message-ID:  <loom.20120429T190931-325@post.gmane.org>
References:  <201204281731.q3SHVaiM061997@mail.r-bonomi.com> <CAHieY7Tcv%2Bo-KbmLtPVHWXSphJX7b5f0QMO46yM-DOju4S9S7Q@mail.gmail.com> <20120428200116.b2f5820e.freebsd@edvax.de> <CAHieY7TpWsCbm8LZFMboWHgXJ2M79TbcK7Jse3=MoVUR2XB5Ow@mail.gmail.com> <4f9ced3a.f7WBDlsMkhxvy%2BeF%perryh@pluto.rain.com> <20120429103740.aa7df743.freebsd@edvax.de> <CAHieY7QCpV0Tz-mJHyNuObnF%2BN%2BnAXGpnxr4D1f8s_2E_No%2BHw@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Alejandro Imass <ait <at> p2ee.org> writes:

> ... 
> And there was a log of a couple of ftp connections the same day this
> happened, the ONLY 3 messages before the reboot at about 6 pm and they
> were NOT from any of our customers. Here are the log entries:
> 
> Apr 27 05:54:37 nune ftp.proxy[2726]: connected to client:
> host-46-50-183-5.bbcustomer.zsttk.net, interface= 207.158.52.74:21
> Apr 27 05:54:37 nune ftp.proxy[2726]: info: monitor mode: off, ccp: <unset>
> Apr 27 05:54:38 nune ftp.proxy[2726]: -ERR: missing hostname
> Apr 27 18:55:42 nune syslogd: kernel boot file is /boot/kernel/kernel
> ...

What you should do right now is to get some recent general or security cd/dvd
with chkrootkit and rkhunter and run them from that external read-only media.  
I would also suggest that you look over config files of all packages involved.
jb





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?loom.20120429T190931-325>