Gentoo Archives: gentoo-server

From: Robert Larson <robert@×××××××××.com>
To: gentoo-server@l.g.o
Subject: Re: [gentoo-server] Server goes down twice in two days, looking for input
Date: Thu, 22 Sep 2005 17:03:21
Message-Id: 200509221201.41080.robert@sixthings.com
In Reply to: [gentoo-server] Server goes down twice in two days, looking for input by fire-eyes
1 > Tuesday afternoon, I was informed that there might be problems with this
2 > server. I had just been working on it via shell. I went back, and found
3 > it unresponsive.
4 >
5 > I went into the server room, only to catch it ending a reboot and being
6 > almost totally back up. It behaved the rest of the day. I was not able
7 > to find any indications of problems in the logs.
8 >
9
10 This may be a long shot, but is it possible the BIOS battery is dying or is
11 already dead?
12
13 Also, another thing worth checking and the main reason I respond is, have you
14 considered the possibility of an intrusion? I have seen things gone awry
15 before with the addition of a kernel rootkit, and it might be worth looking
16 into just in case. Probably not the case, but, better safe than sorry.
17
18 This would help, though, I couldn't seem to pull it up just now...:
19 http://www.rookit.org
20
21 Of course, there are some portage pkgs:
22 app-forensics/rkhunter
23 app-forensics/chkrootkit
24
25 HTH,
26
27 Robert
28 --
29 gentoo-server@g.o mailing list

Replies

Subject Author
Re: [gentoo-server] Server goes down twice in two days, looking for input fire-eyes <sgtphou@×××××××××.org>