Date: Sun, 1 Oct 2017 19:59:02 -0500 From: Adam Vande More <amvandemore@gmail.com> To: The Doctor <doctor@doctor.nl2k.ab.ca> Cc: Polytropon <freebsd@edvax.de>, FreeBSD Questions <freebsd-questions@freebsd.org> Subject: Re: Weird turnoff Message-ID: <CA%2BtpaK1skAYYePOizsVrPduQEoS9XrB9k1vr8aPu8XsUYM4GzA@mail.gmail.com> In-Reply-To: <20171002002506.GA42212@doctor.nl2k.ab.ca> References: <20171001232531.GA18260@doctor.nl2k.ab.ca> <20171002021140.931f17de.freebsd@edvax.de> <20171002002506.GA42212@doctor.nl2k.ab.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Oct 1, 2017 at 7:25 PM, The Doctor <doctor@doctor.nl2k.ab.ca> wrote: > On Mon, Oct 02, 2017 at 02:11:40AM +0200, Polytropon wrote: > > On Sun, 1 Oct 2017 17:25:31 -0600, The Doctor wrote: > > > Could be an attack. > Perhaps by a mouse... > > > All right. > > > > > > As of this morning (3 p.m. UTC) my seconday FreeBSD 11.1 server > > > has been going intreface down then up and then unable to route. > > > > > > Rebooted this system 2 times today. > > > > > > > > > What should I bee looking for? > > > > Primarily the system's log files in /var/log: messages, auth.log, > > security. Also check the output of the periodic scripts (mailed > > to root or another user), do they contain hints to something that > > looks suspicious (SUID changes, system file modifications, etc.)? > > > > exactly what I am looking for > Punctuation, like question marks, for a start. Otherwise, I'd look into why it appears the switch the system is plugged into is losing connectivity. What it rebooted or something? -- Adam
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CA%2BtpaK1skAYYePOizsVrPduQEoS9XrB9k1vr8aPu8XsUYM4GzA>