View Single Post
  #2  
Old 9th January 2006, 14:03
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,474
Thanks: 813
Thanked 5,255 Times in 4,121 Posts
Default

Hi,

I recommend that when your server is back onlien, you do a scan for rootkits.

http://www.howtoforge.com/faq/1_38_en.html

I think that an high volume of incoming packets does not mean automatically that your server is highjacked. It depends on the port. If e.g. a high number of packets where send to port 80, its an DOS attack but it does not mean that your apache has been highjacked.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote