have i been hacked?
-
funny story, my pfsense fw running on old core 2 duo has started acting up and eating more ram than usual, so i installed 1 gig more ram but i put untested ram from shelf from who knows where, as it turns out ram stick is not good as my fw pc froze some time today while i was not at home.
even funnier thing is what i seen on screen, looks like someone had typing some commands and it froze at that time. i do not understand what they did so i put picture here for any good soul to decypher. pc used for firewall is under lock inside house and has no physical keyboard attached, also ssh is disabled in webui.
also please advise as to what logs i can check to see more details about what has been done.
thank you and sorry on bad image quality.
-
@beaver looks like this output
-
@johnpoz consecutive show locks then after syntax error show alllocks looks like someone write command that is not sure what command to use.
i have not sshd in machine nor anyone was home nor keyboard was connected. -
@beaver dude you were not hacked, that is from the crash report - see the other thread I linked too.
Look in the tar he posted, that is inside the dbtext
-
Yeah, that's just the crash report generated after a kernel panic. Probably the bad ram.
When it rebooted you might have seen an alert on the dashboard with a link to download the report.
Steve
-
@johnpoz wow thanks very much, i am new to pfsense so im not realy sure at what i am seeing, it seemed odd that something pre programmed would contain syntax that is wrong.
