Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Black on June 19, 2005, 01:50:06 AM

Title: did I get hacked?
Post by: Black on June 19, 2005, 01:50:06 AM

Ok so im sitting here building a webpage and all of a sudden I get the message that my browser lost IMAP connection and I couldn't load a page.

Then I go to my Snort/Acid webpage and it says:

Database ERROR:Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)

Then I tail-f /var/log/messages and I get;

Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock'
(2) in /opt/administration/acid/adodb/drivers/adodb-mysql.inc.php on line 337
Jun 18 19:35:41 kernel: denylog:IN=eth1 OUT= MAC=01:00:5e:00:00:01:00:a0:c5:f5:2a:5a:08:00 SRC=192.168.1.1 DST=224.0.0.1
.0.1 LEN=28 TOS=0x00 PREC=0x00 TTL=1 ID=11806 PROTO=2


Then my connection comes back and I tail-f /var/log/messages and I get;


snort: database: mysql_error: MySQL server has gone away SQL=INSERT INTO sig_class (sig_class_name) VALUES ('misc-activity')

Jun 18 19:40:46  snort: database: mysql_error: MySQL server has gone away

Jun 18 19:40:46 snort: database: unable to write classification

Jun 18 19:40:46 snort: database: mysql_error: MySQL server has gone away SQL=INSERT INTO signature (sig_name,sig_priority,sig_rev,sig_sid) VALUES ('ICMP Destination Unreachable Communication Administratively Prohibited',3,4,485)

Mysql is fucked and I didnt touch a damn thing...

help!

Title: did I get hacked?
Post by: Black on June 19, 2005, 06:00:46 PM

This morning I woke up and mysql was working again.  ??

Title: did I get hacked?
Post by: duncan on June 20, 2005, 08:45:10 AM

Quote from: "Black"

This morning I woke up and mysql was working again.  ??

Magic. Interesting website.

Title: did I get hacked?
Post by: Black on June 20, 2005, 06:39:18 PM

Thanks I like yours better.