Find the answer to your Linux question:
Results 1 to 3 of 3
Hi, I have iomega appliance, which is based on Debian distribution. There is an NFS share that I have created which is without password. Since it is without password, there ...
  1. 05-18-2011 #1
    kumarullal
    kumarullal is offline
    Just Joined!
    Join Date
    May 2011
    Posts
    2

    How do I Identify an infected PC which is dumping worms in NFS share

    Hi,
    I have iomega appliance, which is based on Debian distribution. There is an NFS share that I have created which is without password.
    Since it is without password, there are some viruses copied. I want to find out which IP address is the source of these files. In other words, I want to know which PC is copying these infected files on the NFS share.
    Is there a way to find out?
    Thanks in advance.
    Reply With Quote Reply With Quote
  2. 05-18-2011 #2
    zombykillah
    zombykillah is offline
    Linux Newbie
    Join Date
    Dec 2009
    Posts
    241
    What about the nfs log?
    NFS server logging (Managing NFS and NIS, 2nd Edition)
    ClientName should be enough to identify your culprit
    Reply With Quote Reply With Quote
  3. 05-18-2011 #3
    kumarullal
    kumarullal is offline
    Just Joined!
    Join Date
    May 2011
    Posts
    2
    Thanks for your prompt response Zombykillah,
    What you have mentioned is for a server logging utility for Solaris 8.
    I am using the Iomega appliance which is based on debian 5.0
    How do I activate the NFS logging and then get the appropriate log results to identify the culprit?
    Last edited by kumarullal; 05-18-2011 at 08:42 PM.
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules