On Tue, Apr 27, 2010 at 05:19:17PM -0400, Bill Zakrzewski wrote: > there were no indications of anyone logging into the server for several days > leading up to the incident. > our server had an uptime of 17 hours. did the sysadmin check for rootkits by which there would be no trace of any login? http://linuxhelp.blogspot.com/2006/12/various-ways-of-detecting-rootkits-in.html -- //www.freelists.org/webpage/oracle-l