[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

AIDE output after unclean shutdown



Hi folks!

I'm wondering if you can offer me some advice like you so kindly have a 
couple of times in the past.

This morning, my cocoon2 installation took off unexpectedly, exhausting 
all the resources of the box (which isn't too big...). I could connect 
to all the open ports, but nothing happened when I did. 

I had no option but to call the folks that host the server and tell them 
to go to the cooler room and push The Button. Arrrggh!

While I think I have understood what caused the catastrophy, my AIDE log 
had the following output:

changed:/lib/modules/2.4.19/modules.dep
changed:/lib/modules/2.4.19/modules.generic_string
changed:/lib/modules/2.4.19/modules.pcimap
changed:/lib/modules/2.4.19/modules.isapnpmap
changed:/lib/modules/2.4.19/modules.usbmap
changed:/lib/modules/2.4.19/modules.parportmap
changed:/lib/modules/2.4.19/modules.ieee1394map
changed:/lib/modules/2.4.19/modules.pnpbiosmap

Detailed information about changes:

File: /lib/modules/2.4.19/modules.dep
  Mtime    : 2002-11-04 21:16:56               , 2002-11-14 15:18:29
  Ctime    : 2002-11-04 21:16:56               , 2002-11-14 15:18:29

[snip]

The latter time is exactly when the computer was so unelegantly shut 
down, so I assume that it has something to do with that, and not 
actually an intrusion attempt, but just to be sure:

Are these modules known to change if a computer is shut down like this? 
(BTW, I'm hardly using any of them). 

Cheers,

Kjetil
-- 
Kjetil Kjernsmo
Astrophysicist/IT Consultant/Skeptic/Ski-orienteer/Orienteer/Mountaineer
kjetil@kjernsmo.net  webmaster@skepsis.no  editor@learn-orienteering.org
Homepage: http://www.kjetil.kjernsmo.net/



Reply to: