AIDE output after unclean shutdown
Hi folks!
I'm wondering if you can offer me some advice like you so kindly have a
couple of times in the past.
This morning, my cocoon2 installation took off unexpectedly, exhausting
all the resources of the box (which isn't too big...). I could connect
to all the open ports, but nothing happened when I did.
I had no option but to call the folks that host the server and tell them
to go to the cooler room and push The Button. Arrrggh!
While I think I have understood what caused the catastrophy, my AIDE log
had the following output:
changed:/lib/modules/2.4.19/modules.dep
changed:/lib/modules/2.4.19/modules.generic_string
changed:/lib/modules/2.4.19/modules.pcimap
changed:/lib/modules/2.4.19/modules.isapnpmap
changed:/lib/modules/2.4.19/modules.usbmap
changed:/lib/modules/2.4.19/modules.parportmap
changed:/lib/modules/2.4.19/modules.ieee1394map
changed:/lib/modules/2.4.19/modules.pnpbiosmap
Detailed information about changes:
File: /lib/modules/2.4.19/modules.dep
Mtime : 2002-11-04 21:16:56 , 2002-11-14 15:18:29
Ctime : 2002-11-04 21:16:56 , 2002-11-14 15:18:29
[snip]
The latter time is exactly when the computer was so unelegantly shut
down, so I assume that it has something to do with that, and not
actually an intrusion attempt, but just to be sure:
Are these modules known to change if a computer is shut down like this?
(BTW, I'm hardly using any of them).
Cheers,
Kjetil
--
Kjetil Kjernsmo
Astrophysicist/IT Consultant/Skeptic/Ski-orienteer/Orienteer/Mountaineer
kjetil@kjernsmo.net webmaster@skepsis.no editor@learn-orienteering.org
Homepage: http://www.kjetil.kjernsmo.net/
Reply to: