Yup, it was rootkits.

Spent the last many hours trying to fight for my machines back, but its
pretty useless.  Lots of kernel mods and etc.  chattr was my friend for a
while... but now I'll just settle with the lucky fact that no
data/configuration was deleted and reinstall.

Thanks,
Mike
----- Original Message ----- 
From: "Bob Tanner" <tanner at real-time.com>
To: <tclug-list at mn-linux.org>
Sent: Tuesday, October 21, 2003 11:29 PM
Subject: Re: [TCLUG] Netstat Segmentation Fault


> On Tuesday 21 October 2003 09:18 pm, Michael D. Cassano wrote:
> > All of a sudden three of my linux machines that are connected to the
> > Internet are getting very wierd on me.
> >
> > SSH works, apache works, sendmail doesn't work, named doesn't work.
> >
> > All I can say is that when I do netstat -tua I get  "Segmentation
Fault".
> >
> > Any clue here?
> >
> > Mike
>
> Did you check for rootkits?
>
> If it's a good kit, you'll have to boot from something like a bbc and run
it
> that way, cuz the'll have kernel mods in that will prevent rootkit from
> running appropriately.
>
> -- 
> Bob Tanner <tanner at mn-linux.org>          | Phone : (952)943-8700
> http://www.mn-linux.org, Minnesota, Linux | Fax   : (952)943-8500
> Key fingerprint = AB15 0BDF BCDE 4369 5B42  1973 7CF1 A709 2CC1 B288
>
> _______________________________________________
> TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
> http://www.mn-linux.org tclug-list at mn-linux.org
> https://mailman.real-time.com/mailman/listinfo/tclug-list


_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
http://www.mn-linux.org tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list