[nflug] SSH Error out of no where

[Mark Musone]

Seriously though, I also agree, especially whenever a login or
authentication subsystem suddenly does not act the way it should.
It's often a telltale sign that someone hacked in, ran a script that
replaces the standard login daemons with Trojans/backdoors, and whoops..the
script kiddie didn't know it as a different distribution with different
libraries. the daemon tries to run and craps out... (again, just spidey
sense also, more likely than not, I'm wrong..i usually am...*sigh*)...I
should stop babbling and get to work..oh wait..i'm at work..oh crap. I gotta
go find something to do and look busy...

Mark


-----Original Message-----
From: nflug-bounces at nflug.org [mailto:nflug-bounces at nflug.org] On Behalf Of
Brad Bartram
Sent: Wednesday, November 14, 2007 9:24 AM
To: nflug at nflug.org
Subject: Re: [nflug] SSH Error out of no where

Just to throw this out there, but whenever something like that happens where
-

x was running perfect for y length of time, but all of a sudden
without any changes being performed, x flaked out

The first thing I do is check the system over for signs of intrusion.
Not saying that's what it is, but things like that make the ol' spidey
sense start to tingle.

Brad

On Nov 14, 2007 9:08 AM, Cyber Source <peter at thecybersource.com> wrote:
> I've noticed that on a box that I routinely log into, but it's a
> time-out thing. I didn't look into it in depth but there seems to be an
> inactivity time-out that is now enabled in the default ssh config.
> That's not going to be your problem though, you should check that sshd
> is running in the first place but you'll probably have to wait till 7
> for that.
>
>
> Franklin Kumro Jr wrote:
> > Guys,
> >
> > My Ubuntu box has been running perfectly for weeks now, and I have
> > always been able to access the machine via ssh. I get into work this
> > morning and I need to grab some data from that machine only to receive
> > "ssh_exchange_identification: Connection closed by remote host". I'm
> > confused because yesterday this worked :( The machine has been hard
> > rebooted for shits and giggles, didn't fix a thing. Any ideas? I wont
> > have access to the machine until ~7pm tonight and I would love to have
> > the data now though.
> >
> > Thanks,
> >
> > -Frank
> > _______________________________________________
> > nflug mailing list
> > nflug at nflug.org
> > http://www.nflug.org/mailman/listinfo/nflug
> >
> _______________________________________________
> nflug mailing list
> nflug at nflug.org
> http://www.nflug.org/mailman/listinfo/nflug
>
_______________________________________________
nflug mailing list
nflug at nflug.org
http://www.nflug.org/mailman/listinfo/nflug