The following message was received by our admin account after finding an intrusion (followed by rotating shell account passwords). Can anyone tell me how to find out what devices are referenced in this message? ----- Original Message ----- > User 501 tried to run dev 773 ino 278048 in place of dev 774 ino 310316! > (Filename of set-id script was ./none > > > , uid 501 gid 501.) > > Sincerely, > perl