Re: mysterious MySQL-connect

[Andreas Vent-Schmidt <a.vent@procommerz.de>]

Hi,

thanks folks a lot for all hints.

Now I found that the connects came indeed from the other.host.name 
(192.168.0.2), but I didn't find out which user it was.

However, I'm no longer sure wether it was was some kind of code 
injection, as more as I do not know how the guys did it exactly.

And yes: Christian may be right as he guessed it wouldn't be a new 
problem, but I never noticed it before (because of 
ignoring /var/log/mysql/mysql.err).

After all, I'm very interested in answering the following questions:
- Is there anybody else out there with the same kind of log messages?
- How about a "normal" connection loss because of capacity reasons, 
malfuntion of the network interface or something like that?

Thanks again and have a good week,
Andreas

Am Freitag, 24. September 2004 13:13 schrieb Christian Hammers:
>
> BTW: You're using backports you said? Please note that I changed the
>      scripts only recently (4.0.20-x) to log to syslog. Before that
>      all messages went to the mostly ignored /var/log/mysql/mysql.err
>      so you probably don't suffer from a "new" problem but just never
>      noticed it before.


-- 
procommerz - Internet fuer Unternehmen
www.procommerz.de | 033925-90710