Folks- I just logged in (from work) to my home machine to copy a file I needed. It's behaving very weirdly, and I'd love some advice as to whether you think I've been cracked or it's likely just a hardware issue. I'd strongly prefer not to shutdown remotely, but will do so rather than waiting until I get home tonight if y'all think that's what's appropriate.
The machine is a (rather old) Pentium 200, 92MB RAM, with lots of stuff plugged in(nVidia graphics, Adaptec SCSI running a CD-ROM and a Zip drive, and four IDE hard drives of various sizes). It's running deiban 2.2r3, kernel 2.2.19pre17 with all current patches. Here's what's happening: 1.) There's nobody doing anything on the machine, and yet I get the following load averages: 11:43am up 6 days, 22:06, 6 users, load average: 1.42, 1.50, 1.31 2.) top segfaults: nujoma:~> top Segmentation fault 3.) man doesn't work: nujoma:~> man ps /usr/bin/man: Input/output error. 4.) scp fails: nujoma:~> scp paychecks.sdc geingob: scp: error in loading shared libraries: libz.so.1: cannot open shared object file: Permission denied 5.) Can't write my / filesystem (/home): nujoma:~> touch foo touch: foo: Read-only file system However, mount shows it as rw: nujoma:~> mount /dev/hdb3 on / type ext2 (rw,errors=remount-ro,errors=remount-ro) proc on /proc type proc (rw) devpts on /dev/pts type devpts (rw,gid=5,mode=620) /dev/hdd1 on /src2 type vfat (rw,umask=0000) /dev/hdd3 on /share type ext2 (rw) /dev/hdb1 on /rosa type vfat (rw,umask=0000) /dev/hdc1 on /theodor type vfat (rw,umask=0000) /dev/hda3 on /karl type ntfs (rw,umask=0000) AFS on /afs type afs (rw) //jacobi/cousins on /mnt/cousins type smbfs (0) 6.) shutdown -r also segfaulted, so I can't reboot remotely. I don't see anything suspicious in the logs, with the exception of the following that I seem to get at least once a day: Aug 14 17:38:43 nujoma /sbin/rpc.statd[257]: gethostbyname error for ^X<F7><FF> <BF>^X<F7><FF><BF>^Y<F7><FF><BF>^Y<F7><FF><BF>^Z<F7><FF><BF>^Z<F7><FF><BF>^[<F7> <FF><BF>^[<F7><FF><BF>%8x%8x%8x%8x%8x%8x%8x%8x%8x%236x%n%137x%n%10x%n%192x%n\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 Aug 14 17:38:43 nujoma <C7>^F/bin<C7>F^D/shA0<C0>\210F^G\211v^L\215V^P\215N^L\21 1<F3><B0>^K<CD>\200<B0>^A<CD>\200<E8>\177<FF><FF><FF> Thanks for any advice. ---------------------------------------------------------------------- Andrew J Perrin - [EMAIL PROTECTED] - http://www.unc.edu/~aperrin Assistant Professor of Sociology, U of North Carolina, Chapel Hill 269 Hamilton Hall, CB#3210, Chapel Hill, NC 27599-3210 USA
