SCIENTIFIC-LINUX-USERS Archives

August 2008

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: [5.1] Logged-in users aren't seen
From:
Michael Mansour <[log in to unmask]>
Reply To:
Michael Mansour <[log in to unmask]>
Date:
Fri, 15 Aug 2008 11:30:05 +1100
Content-Type:
text/plain
Parts/Attachments:
text/plain (29 lines) 
Hi,

> Something strange is going on here... The `w`, `who` and `finger`
> programs do not seem to know about any logged-in users, even when issued
> as root:
> 
> -----BEGIN SHELL I/O-----
> ~# who
> ~# w
>  01:50:04 up 6 days, 14:03,  0 users,  load average: 0.21, 0.32, 0.29
> USER     TTY      FROM              LOGIN@   IDLE   JCPU   PCPU WHAT
> ~# finger
> No one logged on.
> ~#
> ------END SHELL I/O------
> 
> Does anyone on 5.1 get this kind of results? Does anyone know the reason?

I would run rkhunter and/or chkrootkit on your server as this would happen if
a rootkit was installed.

Regards,

Michael.

> Thanks,
> Andrea
------- End of Original Message -------

ATOM RSS1 RSS2