Intresting Behavior

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: GregGreg.Furmanek@hit.cendant.com
Date:  
Subject: Intresting Behavior
can you check the integrity of the system?


-> -----Original Message-----
-> From: Colin Ansel Rasor [mailto:ansel@millworknet.com]
-> Sent: Thursday, October 26, 2000 10:05 AM
-> To: 
-> Subject: Intresting Behavior
-> 
-> 
-> I have been noticing some things that are very intresting to me
-> that I am not able to decipher. I have been having a lot
-> segmentation faults. last night I had a seg fault with the "passwd"
-> program today a seg fault with "mount".Any pointers in the right
-> direction on how to handle this would be great. This machine has run
-> headless for a few months then today I plugged a monitor and
-> keyboard into it and it wont let anybody log into it from the console
-> only through ssh. I also have not been seeing any connections DENY's
-> from IPCHAINS and I usually see at least 35 a day.
-> 
-> [root@millworknet /]# ps ax | grep 725
->  1053 pts/0    S      0:00 grep 725
-> [root@millworknet /]# locate tss.cr3
-> [root@millworknet /]#   
-> [root@millworknet /]# uname -r
-> 2.2.12-20 
-> Unable to handle kernel
-> NULL pointer dereference at virtual address 00000004 current->tss.cr3
-> = 00f11000, %cr3 = 00f11000 *pde = 00000000 Oops: 0000 CPU:    0 EIP:
->    0010:[<c2025be1>] EFLAGS: 00010286 eax: 00000000   ebx: c1775600  
-> ecx: c05d6000   edx: c05d7ea4 esi: c05d7de8   edi: c05d7de4   ebp:
-> 00000801   esp: c05d7d18 ds: 0018   es: 0018   ss: 0018 Process mount
-> (pid: 725, process nr: 36, stackpage=c05d7000) Stack: c05d7de4
-> 00000801 00001770 00000005 00000000 00000000 00000001 00000801       
-> c05d7d40 00000000 c20266b9 00000000 c05d7de4 c05d7de8 c05d7dec
-> c05d7ea4        c05d7e58 c05d7df0 c0eea800 00000801 00000000 00000801
-> 00000001 c177544a Call Trace: [<c20266b9>] [<c01f08f1>] [<c01e9eb5>]
-> [<c011386d>] [<c01e478f>] [<c0130c3c>] [<c202dfc0>]       
-> [<c202e380>] [<c202e280>] [<c012d66c>] [<c012db09>] [<c202e05e>]
-> [<c012e024>] [<c202e05e>] [<c202e280>]        [<c0109fac>] Code: 66
-> 8b 40 04 66 89 42 04 8a 42 0e 88 c1 80 e1 f0 88 4a 0e 66
-> Thanks 
-> Colin Ansel Rasor
-> 
-> ________________________________________________
-> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your 
-> mail doesn't post to the list quickly and you use Netscape 
-> to write mail.
-> 
-> Plug-discuss mailing list  -  
-> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
->