Click to See Complete Forum and Search --> : urgent help --Segmentation fault


talha999
09-28-2003, 07:06 AM
Dear all

i get this error when i ran command in linux


-bash-2.05b# ps -ef | grep squid
Segmentation fault

and some other commands you aslo see my Login display
has aslo changed -bash-2.05b# :(

when i try to su - root it slow down dont display any prompt until
contron -c its show -bash-2.05#

reinstalled my linux prevoius because of this problem

what wrong ??

any idea ?

Regards

Talha

dkeav
09-28-2003, 07:26 AM
we need to know more about what you have installed, ie what distro, what version of that distro, there are so many variations in linux packages just saying linux leaves us lost, but it sounds like you have some borked console tools or the bash shell its self in the other install, you may have bad installation media causing that

talha999
09-28-2003, 07:40 AM
Thanks for yr reply

actually this problem started with my redhat 7.3 installation which

i have reinstall redhat 9.0 on compaq proliant but i put some of some /etc files from backup .

i last package i remember to install was Text-iconv perl module

but it work without any problem for 24 hr welll

after that i begin to fail to segmention fault

what should be reason on this ??

talha999
09-28-2003, 08:13 AM
any one clue ??

what might be problem ??

phlipant
09-28-2003, 08:28 AM
type ksh and see if the situation improves. this will work if you bash shell is corrupt.

dkeav
09-28-2003, 08:34 AM
or csh or zsh, basically try changing the default shell you use, to see if bash is corrupted and causing the problem, if this is the case you may want to edit your profile to change your default shell, to a working one

talha999
09-28-2003, 08:54 AM
Thanks for yr replys


-bash-2.05#sh

sh-2.05b# ps -ef | grep mail
Segmentation fault
sh-2.05b# bash

[root@magic root]#
[root@magic root]#
[root@magic root]# ps -ef | grep mail
Segmentation fault
[root@magic root]#

some commands works and some not

how can i recover my linux ?

phlipant
09-28-2003, 09:04 AM
sh is a soft link to bash. clearly your bash shell is corrupt. try replacing it. i think the most recent release is bash-2.05b-20.1

sorry, i`m typing to fast, what is the result from ksh?

talha999
09-28-2003, 09:19 AM
Thanks for yr reply

[root@magic root]# ksh
bash: ksh: command not found

no korn shell on my system

i have following bash installed .

[root@magic root]# rpm -q bash
bash-2.05b-20

i will for new release try to upgrade it

Regards

Talha

phlipant
09-28-2003, 09:31 AM
no ksh? how odd. you might also try ash, tcsh and zsh. it would be nice to see some other shell running, before jumping on bash.

mdwatts
09-28-2003, 09:33 AM
Originally posted by talha999

actually this problem started with my redhat 7.3 installation which

i have reinstall redhat 9.0 on compaq proliant but i put some of some /etc files from backup .

i last package i remember to install was Text-iconv perl module

but it work without any problem for 24 hr welll

after that i begin to fail to segmention fault



So this was a fresh install of RH9.0 though you restored some of the files you had backed up from /etc on RH7.3?

Which files in /etc?

It's either due to those files in /etc or someone has cracked your system and installed a ?? root-kit?

dkeav
09-28-2003, 09:39 AM
aye, root kit is very possible, good thinkin md

phlipant
09-28-2003, 09:45 AM
as i think about my various upgrades from 7.2, 7.3, 8.0, 9.0 to that strange beast 9.0.93. they always seem to be rough about the edges, and only smooth out after the system has been updated. i should also note, every red hat cd set has an obsolete kernel. did you up2date you system?

talha999
09-28-2003, 09:46 AM
Thanks for yr replys

i restored passwd,shadow,groups file in /etc

put my mailbox drive back again

on investigiting i have found the someone break in to my system

and made a account with uid:gid 0:0 that means root access

i was runing following service

smtp 25
qpopper 110
sunrpc
ssh
telnet
ipp

when my machine has hacked

althrough i am blocking all ports only smtp pop3 www was open from internet

still some one breakin ?

and what is root-kit ??

what i am missing ?