On Wed, 2005-07-06 at 15:37 -0700, Bryan.ONeal@asu.edu wrote:
> Any thoughts on how to trace down the problem?

Is it writing anything to syslog before shutdown?

> The box is externally visible, but it is wholly updated and the firewall is set
> to only allow SSH through.

You might consider running chkrootkit[1] just for peace-of-mind.


[1] http://www.chkrootkit.org/


...Kevin



---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change  you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss