Help! I'm being attacked!

[Dustin Decker]

On Thu, 19 Sep 2002, Brian Densmore wrote:

> This is the original request for help. Doesn't seem to have made it to
> the list. I don't have any indication in /tmp in fact no files there at
> all!? I do believe I have chrooted jail on the box in the /home/...
> subdir. I see some infected M$ hitting the box and some malformed
> headers hitting the box. How can one tell the exact version of openssl
> running? All I get is the version number but not the letter.

Is this host using RPM?  (Such as redhat, etc.)
If so, you can do "rpm -q openssl".
Dustin

-- 
*-----------------------------------*
| Dustin Decker                     |
| dustind at moon-lite.com       *-----------------------------------------*
| http://www.dustindecker.com |                                         |
| Moon-Lite Computing         | The wise man seeks everything in        |
| 913.579.7117                | himself; the ignorant man tries to get  |
*-----------------------------| everything from somebody else.          |
                              |                                         |
                              *-----------------------------------------*