Network problems

Thomas E. Dukes edukes at alltel.net
Thu Apr 14 18:49:18 UTC 2005


  _____  

From: fedora-list-bounces at redhat.com [mailto:fedora-list-bounces at redhat.com]
On Behalf Of Marc M
Sent: Thursday, April 14, 2005 1:38 PM
To: For users of Fedora Core releases
Subject: Re: Network problems


Are the lights on, on the switch's ports that you are using?   Have you
rebooted the switch?   Are you able to connect with other machines or ports
(say  a laptop)?  Is the light working on the nic?  Cabling good?  If you
have multiple nics you should stop/start them and see if you can get one to
work, sometimes one works when another won't.  service network stop, ifup
eth0, ifup eth1, etc.   Look at your dmesg and see whether it finds your
eth0 or eth1, that'd be nice to know....

If you are able to narrow it down to the one FC2 box (and within the os),
then I would say that lastly you should run a chkrootkit utility on the box
to see if you have been own3d. 
 
I ran chrootkit and I found this:
 
Checking `bindshell'... INFECTED (PORTS:  1524 31337)
Checking `lkm'... You have    12 process hidden for readdir command
You have    12 process hidden for ps command
Warning: Possible LKM Trojan installed
 
This looks like a problem!!  What is bindshell?  I did a locate but could
not find it installed.  What do I need to do? 
 
TIA 
Cheers
Marc



On 4/14/05, Thomas E. Dukes <edukes at alltel.net> wrote: 

Hello,

This is strange!  I don't even know where to start.  Everything was working
fine until yesterday about 1:00PM.

I am running a FC2 system.  I have a dynamic ip using ddclient to update.  I
run ifconfig and I have an ip address.  I can ping it with no problem.  I 
can ping other internal hosts.  My ip is current with my dynamic dns
provider.

I have changed out network cards and even bought a new switch.  Still no
internet connectivity.  DSL modem works fine as it is currently connected to

this PC. So its not an ISP or modem problem.

I have not updated any packages since 04-01-05.  I have been out of town ten
days and was able to access my server remotely, even yesterday morning. I
have made no changes to any files.  Internet connectivity just stopped. 

Any ideas where to begin?  I have been looking over logs and don't see
anything wrong.

TIA

--
fedora-list mailing list
fedora-list at redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20050414/9b34dc01/attachment-0001.htm>


More information about the fedora-list mailing list