[nflug] SSH Error out of no where

[Franklin Kumro Jr]

and with those emails I just powered down the machine. Ill check the
denyhosts/firewall logs and go from there...I should have had tripwire
or something installed on this machine (/me hits self on head).

Thanks!

On Nov 14, 2007 9:48 AM, Brad Bartram <brad.bartram at gmail.com> wrote:
> Always remember that just because you're paranoid, it doesn't mean
> someone isn't out to get you.
>
> Brad
>
>
> On Nov 14, 2007 9:33 AM, Mark Musone <mmusone at shatterit.com> wrote:
> > That's because you're a forensics/security obsessed addict ;)
> >
> > Mark
> >
> >
> >
> > -----Original Message-----
> > From: nflug-bounces at nflug.org [mailto:nflug-bounces at nflug.org] On Behalf Of
> > Brad Bartram
> > Sent: Wednesday, November 14, 2007 9:24 AM
> > To: nflug at nflug.org
> > Subject: Re: [nflug] SSH Error out of no where
> >
> > Just to throw this out there, but whenever something like that happens where
> > -
> >
> > x was running perfect for y length of time, but all of a sudden
> > without any changes being performed, x flaked out
> >
> > The first thing I do is check the system over for signs of intrusion.
> > Not saying that's what it is, but things like that make the ol' spidey
> > sense start to tingle.
> >
> > Brad
> >
> > On Nov 14, 2007 9:08 AM, Cyber Source <peter at thecybersource.com> wrote:
> > > I've noticed that on a box that I routinely log into, but it's a
> > > time-out thing. I didn't look into it in depth but there seems to be an
> > > inactivity time-out that is now enabled in the default ssh config.
> > > That's not going to be your problem though, you should check that sshd
> > > is running in the first place but you'll probably have to wait till 7
> > > for that.
> > >
> > >
> > > Franklin Kumro Jr wrote:
> > > > Guys,
> > > >
> > > > My Ubuntu box has been running perfectly for weeks now, and I have
> > > > always been able to access the machine via ssh. I get into work this
> > > > morning and I need to grab some data from that machine only to receive
> > > > "ssh_exchange_identification: Connection closed by remote host". I'm
> > > > confused because yesterday this worked :( The machine has been hard
> > > > rebooted for shits and giggles, didn't fix a thing. Any ideas? I wont
> > > > have access to the machine until ~7pm tonight and I would love to have
> > > > the data now though.
> > > >
> > > > Thanks,
> > > >
> > > > -Frank
> > > > _______________________________________________
> > > > nflug mailing list
> > > > nflug at nflug.org
> > > > http://www.nflug.org/mailman/listinfo/nflug
> > > >
> > > _______________________________________________
> > > nflug mailing list
> > > nflug at nflug.org
> > > http://www.nflug.org/mailman/listinfo/nflug
> > >
> > _______________________________________________
> > nflug mailing list
> > nflug at nflug.org
> > http://www.nflug.org/mailman/listinfo/nflug
> >
> > _______________________________________________
> > nflug mailing list
> > nflug at nflug.org
> > http://www.nflug.org/mailman/listinfo/nflug
> >
> _______________________________________________
> nflug mailing list
> nflug at nflug.org
> http://www.nflug.org/mailman/listinfo/nflug
>



-- 
Frank
Shenanigans!!
I do the voodoo that I do do with sudo!
http://www.drunkenfrog.com