[prev in list] [next in list] [prev in thread] [next in thread] 

List:       linux-admin
Subject:    Re: Weird Log Entry
From:       SoloCDM <deedsmis () aculink ! net>
Date:       2001-06-30 21:07:02
[Download RAW message or body]

James stated the following:
> 
> Today, SoloCDM Wrote:
> 
> # Is the following a crack attempt or is it normal for Samba:
> #
> # smb_get_length: recv error = 5
> # smb_request: result -5, setting invalid
> # smb_retry: sucessful, new pid=1339, generation=5
> # smb_open: WINDOWS/WIN386.SWP open failed, result=-26
> # smb_readpage_sync: WINDOWS/WIN386.SWP open failed, error=-26
> 
> This looks dodgy, it's as though someone thought you were a Windows
> machine and tried to read your windows swapfile...
> 
> Quite possibly an attack, but since you don't have windows it should be
> OK :)
> 
> You might want to tell Samba to only listen on your local network, not on
> whatever interface connects you to the Internet. There's a few options in
> its config file to do this.

I later learned it was one of my machines mounted through Samba, but I
still need to know if it was an attack.

Note: When you reply to this message, please include the mailing
      list/newsgroup address and my email address in To:.

*********************************************************************
Signed,
SoloCDM
-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org

[prev in list] [next in list] [prev in thread] [next in thread]