Date: Mon, 2 Oct 2017 02:11:40 +0200 From: Polytropon <freebsd@edvax.de> To: The Doctor <doctor@doctor.nl2k.ab.ca> Cc: freebsd-questions@freebsd.org Subject: Re: Weird turnoff Message-ID: <20171002021140.931f17de.freebsd@edvax.de> In-Reply-To: <20171001232531.GA18260@doctor.nl2k.ab.ca> References: <20171001232531.GA18260@doctor.nl2k.ab.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 1 Oct 2017 17:25:31 -0600, The Doctor wrote: > Could be an attack. > > All right. > > As of this morning (3 p.m. UTC) my seconday FreeBSD 11.1 server > has been going intreface down then up and then unable to route. > > Rebooted this system 2 times today. > > > What should I bee looking for? Primarily the system's log files in /var/log: messages, auth.log, security. Also check the output of the periodic scripts (mailed to root or another user), do they contain hints to something that looks suspicious (SUID changes, system file modifications, etc.)? -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ...
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20171002021140.931f17de.freebsd>