[nflug] SSH Error out of no where

matt donovan kitche at kitchetech.com
Wed Nov 14 13:30:22 EST 2007


I find tripwire to be garabage since it can be so messed up that it
does more damage to your machine if someone knows that you are running
it.

On Nov 14, 2007 10:11 AM, Franklin Kumro Jr <fkumro at gmail.com> wrote:
> and with those emails I just powered down the machine. Ill check the
> denyhosts/firewall logs and go from there...I should have had tripwire
> or something installed on this machine (/me hits self on head).
>
> Thanks!
>
>
> On Nov 14, 2007 9:48 AM, Brad Bartram <brad.bartram at gmail.com> wrote:
> > Always remember that just because you're paranoid, it doesn't mean
> > someone isn't out to get you.
> >
> > Brad
> >
> >
> > On Nov 14, 2007 9:33 AM, Mark Musone <mmusone at shatterit.com> wrote:
> > > That's because you're a forensics/security obsessed addict ;)
> > >
> > > Mark
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: nflug-bounces at nflug.org [mailto:nflug-bounces at nflug.org] On Behalf Of
> > > Brad Bartram
> > > Sent: Wednesday, November 14, 2007 9:24 AM
> > > To: nflug at nflug.org
> > > Subject: Re: [nflug] SSH Error out of no where
> > >
> > > Just to throw this out there, but whenever something like that happens where
> > > -
> > >
> > > x was running perfect for y length of time, but all of a sudden
> > > without any changes being performed, x flaked out
> > >
> > > The first thing I do is check the system over for signs of intrusion.
> > > Not saying that's what it is, but things like that make the ol' spidey
> > > sense start to tingle.
> > >
> > > Brad
> > >
> > > On Nov 14, 2007 9:08 AM, Cyber Source <peter at thecybersource.com> wrote:
> > > > I've noticed that on a box that I routinely log into, but it's a
> > > > time-out thing. I didn't look into it in depth but there seems to be an
> > > > inactivity time-out that is now enabled in the default ssh config.
> > > > That's not going to be your problem though, you should check that sshd
> > > > is running in the first place but you'll probably have to wait till 7
> > > > for that.
> > > >
> > > >
> > > > Franklin Kumro Jr wrote:
> > > > > Guys,
> > > > >
> > > > > My Ubuntu box has been running perfectly for weeks now, and I have
> > > > > always been able to access the machine via ssh. I get into work this
> > > > > morning and I need to grab some data from that machine only to receive
> > > > > "ssh_exchange_identification: Connection closed by remote host". I'm
> > > > > confused because yesterday this worked :( The machine has been hard
> > > > > rebooted for shits and giggles, didn't fix a thing. Any ideas? I wont
> > > > > have access to the machine until ~7pm tonight and I would love to have
> > > > > the data now though.
> > > > >
> > > > > Thanks,
> > > > >
> > > > > -Frank
> > > > > _______________________________________________
> > > > > nflug mailing list
> > > > > nflug at nflug.org
> > > > > http://www.nflug.org/mailman/listinfo/nflug
> > > > >
> > > > _______________________________________________
> > > > nflug mailing list
> > > > nflug at nflug.org
> > > > http://www.nflug.org/mailman/listinfo/nflug
> > > >
> > > _______________________________________________
> > > nflug mailing list
> > > nflug at nflug.org
> > > http://www.nflug.org/mailman/listinfo/nflug
> > >
> > > _______________________________________________
> > > nflug mailing list
> > > nflug at nflug.org
> > > http://www.nflug.org/mailman/listinfo/nflug
> > >
> > _______________________________________________
> > nflug mailing list
> > nflug at nflug.org
> > http://www.nflug.org/mailman/listinfo/nflug
> >
>
>
>
> --
> Frank
> Shenanigans!!
> I do the voodoo that I do do with sudo!
> http://www.drunkenfrog.com
>
> _______________________________________________
> nflug mailing list
> nflug at nflug.org
> http://www.nflug.org/mailman/listinfo/nflug
>


More information about the nflug mailing list