Not really backtrack related. Have you checked the log files for your various daemons?
I am at my wits end.. and need to step back and take another look at my problem from fresh eyes. That's where this post and your help comes in.
I need to find out what past network connections may have been made to my linux server.
I'm probably not phrasing my searches right so not turning up anything useful. It was running an old version of Redhat (kernal 2.4.20-08).
Currently I have a DD copy of the drive running in a VM using LiveView.
Any tips or points in the right direction would be greatly appreciated.
Thanks!
Not really backtrack related. Have you checked the log files for your various daemons?
you could start with cat /var/log/auth.log
Are you logging the packets ? another point to inspect
Regards,
"If you aim the gun at your foot and pull the trigger, it's
UNIX's job to ensure reliable delivery of the bullet to
where you aimed the gun (in this case, Mr. Foot)."