moh3nia
July 1st, 2012, 14:32
درود
یه سروری رو کانفیگ کردم اما هر 10 دقیقه چند تا ایمیل میاد که متن هر کدوم رو در زیر گذاشتم. برای رفع این مشکل چی کار کنم؟
ایمیل اول:
Time: Sun Jul 1 05:40:08 2012 -0400
PID: 3156
Account: nobody
Uptime: 222402 seconds
Executable:
/usr/sbin/dnsmasq
Command Line (often faked in exploits):
/usr/sbin/dnsmasq --strict-order --bind-interfaces --pid-file=/var/run/libvirt/network/default.pid --conf-file= --except-interface lo --listen-address 192.168.122.1 --dhcp-range 192.168.122.2,192.168.122.254 --dhcp-leasefile=/var/lib/libvirt/dnsmasq/default.leases --dhcp-lease-max=253 --dhcp-no-override
Network connections by the process (if any):
udp: 0.0.0.0:67 (http://0.0.0.0:67/) -> 0.0.0.0:0 (http://0.0.0.0:0/)
tcp: 192.168.122.1:53 (http://192.168.122.1:53/) -> 0.0.0.0:0 (http://0.0.0.0:0/)
udp: 192.168.122.1:53 (http://192.168.122.1:53/) -> 0.0.0.0:0 (http://0.0.0.0:0/)
Files open by the process (if any):
/dev/null
/dev/null
/dev/null
/var/lib/libvirt/dnsmasq/default.leases
Memory maps by the process (if any):
00400000-0042a000 r-xp 00000000 fd:00 2121940 /usr/sbin/dnsmasq
0062a000-0062d000 rw-p 0002a000 fd:00 2121940 /usr/sbin/dnsmasq
00c9f000-00cc0000 rw-p 00000000 00:00 0 [heap]
3cfae00000-3cfae20000 r-xp 00000000 fd:00 925667 /lib64/ld-2.12.so (http://ld-2.12.so/)
3cfb01f000-3cfb020000 r--p 0001f000 fd:00 925667 /lib64/ld-2.12.so (http://ld-2.12.so/)
3cfb020000-3cfb021000 rw-p 00020000 fd:00 925667 /lib64/ld-2.12.so (http://ld-2.12.so/)
3cfb021000-3cfb022000 rw-p 00000000 00:00 0
3cfb200000-3cfb386000 r-xp 00000000 fd:00 925670 /lib64/libc-2.12.so (http://libc-2.12.so/)
3cfb386000-3cfb586000 ---p 00186000 fd:00 925670 /lib64/libc-2.12.so (http://libc-2.12.so/)
3cfb586000-3cfb58a000 r--p 00186000 fd:00 925670 /lib64/libc-2.12.so (http://libc-2.12.so/)
3cfb58a000-3cfb58b000 rw-p 0018a000 fd:00 925670 /lib64/libc-2.12.so (http://libc-2.12.so/)
3cfb58b000-3cfb590000 rw-p 00000000 00:00 0
3cfbe00000-3cfbe17000 r-xp 00000000 fd:00 917934 /lib64/libpthread-2.12.so (http://libpthread-2.12.so/)
3cfbe17000-3cfc016000 ---p 00017000 fd:00 917934 /lib64/libpthread-2.12.so (http://libpthread-2.12.so/)
3cfc016000-3cfc017000 r--p 00016000 fd:00 917934 /lib64/libpthread-2.12.so (http://libpthread-2.12.so/)
3cfc017000-3cfc018000 rw-p 00017000 fd:00 917934 /lib64/libpthread-2.12.so (http://libpthread-2.12.so/)
3cfc018000-3cfc01c000 rw-p 00000000 00:00 0
3cfc600000-3cfc607000 r-xp 00000000 fd:00 925672 /lib64/librt-2.12.so (http://librt-2.12.so/)
3cfc607000-3cfc806000 ---p 00007000 fd:00 925672 /lib64/librt-2.12.so (http://librt-2.12.so/)
3cfc806000-3cfc807000 r--p 00006000 fd:00 925672 /lib64/librt-2.12.so (http://librt-2.12.so/)
3cfc807000-3cfc808000 rw-p 00007000 fd:00 925672 /lib64/librt-2.12.so (http://librt-2.12.so/)
3d00a00000-3d00a3f000 r-xp 00000000 fd:00 925673 /lib64/libdbus-1.so.3.4.0
3d00a3f000-3d00c3f000 ---p 0003f000 fd:00 925673 /lib64/libdbus-1.so.3.4.0
3d00c3f000-3d00c40000 r--p 0003f000 fd:00 925673 /lib64/libdbus-1.so.3.4.0
3d00c40000-3d00c41000 rw-p 00040000 fd:00 925673 /lib64/libdbus-1.so.3.4.0
7f08a17fb000-7f08a1807000 r-xp 00000000 fd:00 917533 /lib64/libnss_files-2.12.so (http://libnss_files-2.12.so/)
7f08a1807000-7f08a1a07000 ---p 0000c000 fd:00 917533 /lib64/libnss_files-2.12.so (http://libnss_files-2.12.so/)
7f08a1a07000-7f08a1a08000 r--p 0000c000 fd:00 917533 /lib64/libnss_files-2.12.so (http://libnss_files-2.12.so/)
7f08a1a08000-7f08a1a09000 rw-p 0000d000 fd:00 917533 /lib64/libnss_files-2.12.so (http://libnss_files-2.12.so/)
7f08a1a20000-7f08a1a24000 rw-p 00000000 00:00 0
7f08a1a3a000-7f08a1a3c000 rw-p 00000000 00:00 0
7fff82b53000-7fff82b68000 rw-p 00000000 00:00 0 [stack]
7fff82bff000-7fff82c00000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
ایمیل دوم:
Time: Sun Jul 1 05:40:08 2012 -0400
Account: rpc
Resource: Process Time
Exceeded: 222414 > 1800 (seconds)
Executable: /sbin/rpcbind
Command Line: rpcbind
PID: 1599
Killed: No
یه سروری رو کانفیگ کردم اما هر 10 دقیقه چند تا ایمیل میاد که متن هر کدوم رو در زیر گذاشتم. برای رفع این مشکل چی کار کنم؟
ایمیل اول:
Time: Sun Jul 1 05:40:08 2012 -0400
PID: 3156
Account: nobody
Uptime: 222402 seconds
Executable:
/usr/sbin/dnsmasq
Command Line (often faked in exploits):
/usr/sbin/dnsmasq --strict-order --bind-interfaces --pid-file=/var/run/libvirt/network/default.pid --conf-file= --except-interface lo --listen-address 192.168.122.1 --dhcp-range 192.168.122.2,192.168.122.254 --dhcp-leasefile=/var/lib/libvirt/dnsmasq/default.leases --dhcp-lease-max=253 --dhcp-no-override
Network connections by the process (if any):
udp: 0.0.0.0:67 (http://0.0.0.0:67/) -> 0.0.0.0:0 (http://0.0.0.0:0/)
tcp: 192.168.122.1:53 (http://192.168.122.1:53/) -> 0.0.0.0:0 (http://0.0.0.0:0/)
udp: 192.168.122.1:53 (http://192.168.122.1:53/) -> 0.0.0.0:0 (http://0.0.0.0:0/)
Files open by the process (if any):
/dev/null
/dev/null
/dev/null
/var/lib/libvirt/dnsmasq/default.leases
Memory maps by the process (if any):
00400000-0042a000 r-xp 00000000 fd:00 2121940 /usr/sbin/dnsmasq
0062a000-0062d000 rw-p 0002a000 fd:00 2121940 /usr/sbin/dnsmasq
00c9f000-00cc0000 rw-p 00000000 00:00 0 [heap]
3cfae00000-3cfae20000 r-xp 00000000 fd:00 925667 /lib64/ld-2.12.so (http://ld-2.12.so/)
3cfb01f000-3cfb020000 r--p 0001f000 fd:00 925667 /lib64/ld-2.12.so (http://ld-2.12.so/)
3cfb020000-3cfb021000 rw-p 00020000 fd:00 925667 /lib64/ld-2.12.so (http://ld-2.12.so/)
3cfb021000-3cfb022000 rw-p 00000000 00:00 0
3cfb200000-3cfb386000 r-xp 00000000 fd:00 925670 /lib64/libc-2.12.so (http://libc-2.12.so/)
3cfb386000-3cfb586000 ---p 00186000 fd:00 925670 /lib64/libc-2.12.so (http://libc-2.12.so/)
3cfb586000-3cfb58a000 r--p 00186000 fd:00 925670 /lib64/libc-2.12.so (http://libc-2.12.so/)
3cfb58a000-3cfb58b000 rw-p 0018a000 fd:00 925670 /lib64/libc-2.12.so (http://libc-2.12.so/)
3cfb58b000-3cfb590000 rw-p 00000000 00:00 0
3cfbe00000-3cfbe17000 r-xp 00000000 fd:00 917934 /lib64/libpthread-2.12.so (http://libpthread-2.12.so/)
3cfbe17000-3cfc016000 ---p 00017000 fd:00 917934 /lib64/libpthread-2.12.so (http://libpthread-2.12.so/)
3cfc016000-3cfc017000 r--p 00016000 fd:00 917934 /lib64/libpthread-2.12.so (http://libpthread-2.12.so/)
3cfc017000-3cfc018000 rw-p 00017000 fd:00 917934 /lib64/libpthread-2.12.so (http://libpthread-2.12.so/)
3cfc018000-3cfc01c000 rw-p 00000000 00:00 0
3cfc600000-3cfc607000 r-xp 00000000 fd:00 925672 /lib64/librt-2.12.so (http://librt-2.12.so/)
3cfc607000-3cfc806000 ---p 00007000 fd:00 925672 /lib64/librt-2.12.so (http://librt-2.12.so/)
3cfc806000-3cfc807000 r--p 00006000 fd:00 925672 /lib64/librt-2.12.so (http://librt-2.12.so/)
3cfc807000-3cfc808000 rw-p 00007000 fd:00 925672 /lib64/librt-2.12.so (http://librt-2.12.so/)
3d00a00000-3d00a3f000 r-xp 00000000 fd:00 925673 /lib64/libdbus-1.so.3.4.0
3d00a3f000-3d00c3f000 ---p 0003f000 fd:00 925673 /lib64/libdbus-1.so.3.4.0
3d00c3f000-3d00c40000 r--p 0003f000 fd:00 925673 /lib64/libdbus-1.so.3.4.0
3d00c40000-3d00c41000 rw-p 00040000 fd:00 925673 /lib64/libdbus-1.so.3.4.0
7f08a17fb000-7f08a1807000 r-xp 00000000 fd:00 917533 /lib64/libnss_files-2.12.so (http://libnss_files-2.12.so/)
7f08a1807000-7f08a1a07000 ---p 0000c000 fd:00 917533 /lib64/libnss_files-2.12.so (http://libnss_files-2.12.so/)
7f08a1a07000-7f08a1a08000 r--p 0000c000 fd:00 917533 /lib64/libnss_files-2.12.so (http://libnss_files-2.12.so/)
7f08a1a08000-7f08a1a09000 rw-p 0000d000 fd:00 917533 /lib64/libnss_files-2.12.so (http://libnss_files-2.12.so/)
7f08a1a20000-7f08a1a24000 rw-p 00000000 00:00 0
7f08a1a3a000-7f08a1a3c000 rw-p 00000000 00:00 0
7fff82b53000-7fff82b68000 rw-p 00000000 00:00 0 [stack]
7fff82bff000-7fff82c00000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
ایمیل دوم:
Time: Sun Jul 1 05:40:08 2012 -0400
Account: rpc
Resource: Process Time
Exceeded: 222414 > 1800 (seconds)
Executable: /sbin/rpcbind
Command Line: rpcbind
PID: 1599
Killed: No