edgar wrote: > A few days ago there were some problems on the server. we couldn't ssh > to it, the network card was in promiscous mode (it seems it was > attacked). Could it be that somone cracked it? Sounds like it. And considering they managed to set promisc, sounds like they got root. > The logs are clean. ... and cleaned up the trail.