freddys
06-20-2004, 10:58 PM
Hi reader!
I'm experiencing a strange behaviour from my X-server (i guess).
The thing is this:
When my Knoppix hdd installation boots up, it gives me the login screen for X. So far so good.
I login as usual and fire up a shell and issue the "last -i" command which gives me a list of the last users who logged on etc.. you know the drill.
What puzzles me is that it reports a strange IP-number for my account.
First I thought I've been hacked (maybee I have, who knows) but after doing some general trial-and-error I'm not so sure any more.
I made a ping to the ip-number, no reply ( could be FW blocking)
I made a traceroute (same as before, FW maybee blocking)
I made an nslookup and found a strange DSL-connection from somewhere.
But when I restarted my computer and logged on again, I got the same ip-number showing up in my list when I did "last -i". Ok, one time is not a pattern so I tried again. Same thing.
Two times is still no pattern. Third time, same thing again. "last -i" command reports the same IP-number when I log in from the X logon screen. Not when I do it from console only without X.
Does anyone have any clue to why this is?
Has anyone else seen this happening?
Also, when I did a ps -ax to see the process of the login, I tried to kill it and my X session died so I'm sure it's the X that reports this strange behaviour.
I'm running Knoppix 3.4 (unstable sid debian or something) maybee it's an "unstable" thing?
Greatfull for any thoughts.
I'm experiencing a strange behaviour from my X-server (i guess).
The thing is this:
When my Knoppix hdd installation boots up, it gives me the login screen for X. So far so good.
I login as usual and fire up a shell and issue the "last -i" command which gives me a list of the last users who logged on etc.. you know the drill.
What puzzles me is that it reports a strange IP-number for my account.
First I thought I've been hacked (maybee I have, who knows) but after doing some general trial-and-error I'm not so sure any more.
I made a ping to the ip-number, no reply ( could be FW blocking)
I made a traceroute (same as before, FW maybee blocking)
I made an nslookup and found a strange DSL-connection from somewhere.
But when I restarted my computer and logged on again, I got the same ip-number showing up in my list when I did "last -i". Ok, one time is not a pattern so I tried again. Same thing.
Two times is still no pattern. Third time, same thing again. "last -i" command reports the same IP-number when I log in from the X logon screen. Not when I do it from console only without X.
Does anyone have any clue to why this is?
Has anyone else seen this happening?
Also, when I did a ps -ax to see the process of the login, I tried to kill it and my X session died so I'm sure it's the X that reports this strange behaviour.
I'm running Knoppix 3.4 (unstable sid debian or something) maybee it's an "unstable" thing?
Greatfull for any thoughts.