On Mon, Mar 31, 2008 at 6:15 AM, Craig White <<a href="mailto:craigwhite@azapple.com">craigwhite@azapple.com</a>> wrote: <div class="gmail_quote"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> On Mon, 2008-03-31 at 05:56 +0800, Fennix wrote: > On Mon, Mar 31, 2008 at 5:55 AM, Fennix <<a href="mailto:cn.stefan@gmail.com">cn.stefan@gmail.com</a>> wrote: > [root@bogon log]# cat /etc/sysconfig/network > NETWORKING=yes > HOSTNAME=localhost.localdomain > [root@bogon log]# > > > On Mon, Mar 31, 2008 at 5:50 AM, Craig White > <<a href="mailto:craigwhite@azapple.com">craigwhite@azapple.com</a>> wrote: > On Mon, 2008-03-31 at 05:44 +0800, Fennix wrote: > > I noticed today in my terminal window I now have a > host name of > > "bogon". I had never set a hostname for my Fedora8 > home system. I > > can see from my logwatch and cron system mails that > the delivery to > > this host name started March 25th but none of my > mails shows anything > > that seems relevant to what has set this hostname. > Oddly on the 26th > > the system mails were addresses again to > localhost.localdomain but > > again reverted on the 27th to being addresses to > bogon. I have > > checked the man pages on the hostname command to > locate where the name > > is defined. Have checked the > > files /etc/host, /etc/hosts.conf, /etc/hostname > (does not > > exist), /etc/nsswitch.conf, ... but this name does > not show in any of > > the files I have looked at so far. Any ideas where > to look further? > > I am now wondering whether my system has been > compromised somehow... > > Googleing the word bogon shows me the meaning of of > bogon which does > > not seem helpful in this case. > > > > Checking /var/log/messages-20080330 shows the use of > this hostname > > with a reboot I had done on the 24th. Still cannot > see where or how > > this was set. > ---- > what is output of? > > cat /etc/sysconfig/network > > Craig > > Ooops.... > > > [root@bogon log]# cat /etc/sysconfig/network > NETWORKING=yes > HOSTNAME=localhost.localdomain ---- sounds as if the name is attached to either: - NetworkManager and since I don't use it, I don't know where it might store supplemental settings... - the configuration of the device itself - in some script that sets the name somewhere. is this system using DHCP to get its ip address? if so, what is ouput of... /etc/dhclient-eth0.conf I think that if the hostname is 'reset', it should be reflected in syslog... what is output of... grep Host /var/log/messages Might it be set in /etc/rc.d/rc.local? tail /etc/rc.d/rc.local # should look very much like this and anything # additional might be a script that sets it #!/bin/sh # # This script will be executed *after* all the other init scripts. # You can put your own initialization stuff in here if you don't # want to do the full Sys V style init stuff. touch /var/lock/subsys/local Craig -- fedora-list mailing list <a href="mailto:fedora-list@redhat.com">fedora-list@redhat.com</a> To unsubscribe: <a href="https://www.redhat.com/mailman/listinfo/fedora-list" target="_blank">https://www.redhat.com/mailman/listinfo/fedora-list</a> </blockquote></div> Hi Craig, Yes this pc does get its address using DHCP but the file /etc/dhclient-eth0.conf does not exist in etc. The only file name starting with dhcp is dhcpd.conf and the contents appear to be a generic sample. The output from /var/log/messages is as follows: [root@bogon log]# grep Host /var/log/messages-20080323 Mar 17 13:05:07 localhost kernel: ehci_hcd 0000:00:1d.7: EHCI Host Controller Mar 17 13:05:07 localhost kernel: USB Universal Host Controller Interface driver v3.0 Mar 17 13:05:07 localhost kernel: uhci_hcd 0000:00:1d.0: UHCI Host Controller Mar 17 13:05:07 localhost kernel: uhci_hcd 0000:00:1d.1: UHCI Host Controller Mar 17 13:05:07 localhost kernel: uhci_hcd 0000:00:1d.2: UHCI Host Controller Mar 17 13:05:07 localhost kernel: uhci_hcd 0000:00:1d.3: UHCI Host Controller Mar 17 13:05:13 localhost avahi-daemon[2362]: Server startup complete. Host name is linux.local. Local service cookie is 2257381510. Mar 19 02:13:53 localhost kernel: ehci_hcd 0000:00:1d.7: EHCI Host Controller Mar 19 02:13:53 localhost kernel: USB Universal Host Controller Interface driver v3.0 Mar 19 02:13:53 localhost kernel: uhci_hcd 0000:00:1d.0: UHCI Host Controller Mar 19 02:13:53 localhost kernel: uhci_hcd 0000:00:1d.1: UHCI Host Controller Mar 19 02:13:53 localhost kernel: uhci_hcd 0000:00:1d.2: UHCI Host Controller Mar 19 02:13:53 localhost kernel: uhci_hcd 0000:00:1d.3: UHCI Host Controller Mar 19 02:13:59 localhost avahi-daemon[2362]: Server startup complete. Host name is linux.local. Local service cookie is 1223127342. [root@bogon log]# grep Host /var/log/messages-20080330 Mar 24 04:52:18 bogon kernel: ehci_hcd 0000:00:1d.7: EHCI Host Controller Mar 24 04:52:18 bogon kernel: USB Universal Host Controller Interface driver v3.0 Mar 24 04:52:18 bogon kernel: uhci_hcd 0000:00:1d.0: UHCI Host Controller Mar 24 04:52:18 bogon kernel: uhci_hcd 0000:00:1d.1: UHCI Host Controller Mar 24 04:52:18 bogon kernel: uhci_hcd 0000:00:1d.2: UHCI Host Controller Mar 24 04:52:18 bogon kernel: uhci_hcd 0000:00:1d.3: UHCI Host Controller Mar 24 04:52:24 bogon avahi-daemon[2398]: Server startup complete. Host name is bogon.local. Local service cookie is 3193077034. Mar 26 01:25:32 localhost kernel: ehci_hcd 0000:00:1d.7: EHCI Host Controller Mar 26 01:25:32 localhost kernel: USB Universal Host Controller Interface driver v3.0 Mar 26 01:25:32 localhost kernel: uhci_hcd 0000:00:1d.0: UHCI Host Controller Mar 26 01:25:32 localhost kernel: uhci_hcd 0000:00:1d.1: UHCI Host Controller Mar 26 01:25:32 localhost kernel: uhci_hcd 0000:00:1d.2: UHCI Host Controller Mar 26 01:25:32 localhost kernel: uhci_hcd 0000:00:1d.3: UHCI Host Controller Mar 26 01:25:36 localhost avahi-daemon[2319]: Server startup complete. Host name is linux.local. Local service cookie is 1396103600. Mar 27 13:35:16 bogon kernel: ehci_hcd 0000:00:1d.7: EHCI Host Controller Mar 27 13:35:16 bogon kernel: USB Universal Host Controller Interface driver v3.0 Mar 27 13:35:16 bogon kernel: uhci_hcd 0000:00:1d.0: UHCI Host Controller Mar 27 13:35:16 bogon kernel: uhci_hcd 0000:00:1d.1: UHCI Host Controller Mar 27 13:35:16 bogon kernel: uhci_hcd 0000:00:1d.2: UHCI Host Controller Mar 27 13:35:16 bogon kernel: uhci_hcd 0000:00:1d.3: UHCI Host Controller Mar 27 13:35:22 bogon avahi-daemon[2381]: Server startup complete. Host name is bogon.local. Local service cookie is 2714176635. [root@bogon log]# grep Host /var/log/messages Mar 31 04:32:20 bogon kernel: ehci_hcd 0000:00:1d.7: EHCI Host Controller Mar 31 04:32:20 bogon kernel: USB Universal Host Controller Interface driver v3.0 Mar 31 04:32:20 bogon kernel: uhci_hcd 0000:00:1d.0: UHCI Host Controller Mar 31 04:32:20 bogon kernel: uhci_hcd 0000:00:1d.1: UHCI Host Controller Mar 31 04:32:20 bogon kernel: uhci_hcd 0000:00:1d.2: UHCI Host Controller Mar 31 04:32:20 bogon kernel: uhci_hcd 0000:00:1d.3: UHCI Host Controller Mar 31 04:32:25 bogon avahi-daemon[2339]: Server startup complete. Host name is bogon.local. Local service cookie is 4272874820. Running tail /etc/rc.d/rc.local gives me identical results to your sample. Thank you very much for your suggestions. Not clear on the meaning of the output from messages....The host name should not be derived from the computer hardware/firmware. Fennix