*BSD News Article 97126


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.ecn.uoknor.edu!feed1.news.erols.com!worldnet.att.net!newsadm
From: osas@worldnet.att.net (Tim White)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Am I being hacked?
Date: Thu, 05 Jun 1997 12:49:58 GMT
Organization: AT&T WorldNet Services
Lines: 19
Message-ID: <3396b518.42800745@netnews.worldnet.att.net>
References: <5mt1g2$asd@vixen.cso.uiuc.edu> <9A8A84163FDE6859.7E6EDFACCBDB4EF7.FA0B4BA8C5B54953@library-proxy.airnews.net>
NNTP-Posting-Host: 207.146.124.207
X-Newsreader: Forte Free Agent 1.1/16.230
Xref: euryale.cc.adfa.oz.au comp.unix.bsd.freebsd.misc:42429


On 2 Jun 1997 08:56:52 GMT, brian@shift.utell.net (Brian Somers) wrote:

>In article <5mt1g2$asd@vixen.cso.uiuc.edu>,
>	Dannyman @ stumpy <dannyman@stumpy.ncsa.uiuc.edu> writes:
>> Jun  1 16:24:05 stumpy inetd[1645]: login_getclass: unknown class 'root'
  
  Dunno about this one.

>> Jun  1 16:42:49 stumpy syslog: /etc/pwd.db: Invalid argument

  I've been getting these for months..I posted to this newsgroup and some
 one replied that the message comes from netscape. I can't remember exactly
 how but I verified this..probably I tail'd the log file while jumping around
 in netscape and running lsof to be sure I had no network connections. Something
 similar.