![]() |
|
|
|
|
|||||||
| Forums | Portal | Register | Forum Rules | FAQ | Contribute | Members List | Arcade | Search | Today's Posts | Mark Forums Read |
| UNIX for Advanced & Expert Users Advanced UNIX and Linux questions go here. Expert-to-Expert. |
|
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| strange "No such file or directory" errors on NFS volumes | fishsponge | UNIX for Advanced & Expert Users | 3 | 06-17-2008 12:37 AM |
| interpreter " /bin/ksh" not found | Vinner | Shell Programming and Scripting | 4 | 04-22-2008 04:42 AM |
| Strange error "host: isc_taskmgr_create: no available threads" | Santi | Linux | 0 | 01-03-2008 01:49 AM |
| Explain the line "mn_code=`env|grep "..mn"|awk -F"=" '{print $2}'`" | Lokesha | UNIX for Dummies Questions & Answers | 4 | 12-19-2007 09:52 PM |
| bash: cd command to access "strange" directories | robotronic | Shell Programming and Scripting | 3 | 07-06-2007 01:35 PM |
|
|
Submit Tools | LinkBack | Thread Tools | Display Modes |
| Forum Sponsor | ||
|
|
|
||||
|
As in it's displaying that on the console?
If it's on the console, it should also be in /var/log/messages Did you change or move /bin/sh or bash? Is it running from a startup script, cron, .bash_profile, etc? The first thing to do is to find out what's causing it... |
|
||||
|
I've never seen that before...
I did wonder if an intruder used a crappy script that tried to execute something that wasn't there (perl, ksh, python, etc). Check all user's crontabs, look for new users in your passwd file (also check the shadow file for system accounts that all of the sudden have passwords). Does it happen at any given time? Are you running any services (ftp, telnet, ssh, etc)? Can you find anything in /var/log/* ? Right after it happens, do an "ls -ltr /var/log/messages" to see if (or which) logs were written to. And does it happen at the console when you're logged in, when the login banner is up, or both? |
|
||||
|
You know what? I just did what I should have done first:
Searched google. I found this page: http://linuxperf.nl.linux.org/general/common.html Looks like it should be relatively simple to fix... |