Koozali.org: home of the SME Server

did I get hacked?

Black

did I get hacked?
« on: June 19, 2005, 01:50:06 AM »
Ok so im sitting here building a webpage and all of a sudden I get the message that my browser lost IMAP connection and I couldn't load a page.

Then I go to my Snort/Acid webpage and it says:

Database ERROR:Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)

Then I tail-f /var/log/messages and I get;

Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock'
(2) in /opt/administration/acid/adodb/drivers/adodb-mysql.inc.php on line 337
Jun 18 19:35:41 kernel: denylog:IN=eth1 OUT= MAC=01:00:5e:00:00:01:00:a0:c5:f5:2a:5a:08:00 SRC=192.168.1.1 DST=224.0.0.1
.0.1 LEN=28 TOS=0x00 PREC=0x00 TTL=1 ID=11806 PROTO=2


Then my connection comes back and I tail-f /var/log/messages and I get;


snort: database: mysql_error: MySQL server has gone away SQL=INSERT INTO sig_class (sig_class_name) VALUES ('misc-activity')

Jun 18 19:40:46  snort: database: mysql_error: MySQL server has gone away

Jun 18 19:40:46 snort: database: unable to write classification

Jun 18 19:40:46 snort: database: mysql_error: MySQL server has gone away SQL=INSERT INTO signature (sig_name,sig_priority,sig_rev,sig_sid) VALUES ('ICMP Destination Unreachable Communication Administratively Prohibited',3,4,485)

Mysql is fucked and I didnt touch a damn thing...

help!

Black

did I get hacked?
« Reply #1 on: June 19, 2005, 06:00:46 PM »
This morning I woke up and mysql was working again.  ??

duncan

did I get hacked?
« Reply #2 on: June 20, 2005, 08:45:10 AM »
Quote from: "Black"
This morning I woke up and mysql was working again.  ??


Magic. Interesting website.

Black

did I get hacked?
« Reply #3 on: June 20, 2005, 06:39:18 PM »
Thanks I like yours better.