The Community Forums

Interact with an entire community of cPanel & WHM users.
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Strange partitions appeared on my server

Discussion in 'General Discussion' started by brhospedagens, Jun 6, 2006.

  1. brhospedagens

    brhospedagens Member

    Joined:
    Mar 7, 2006
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    Hi there,

    I´ve noticed today some strange partitions that appeared out of the blue on my server.

    Just hitted df -h and this came up:


    Filesystem Size Used Avail Capacity Mounted on
    /dev/ad4s1a 1.9G 65M 1.7G 4% /
    devfs 1.0K 1.0K 0B 100% /dev
    procfs 4.0K 4.0K 0B 100% /proc
    /dev/ad4s1d 989M 150K 910M 0% /tmp
    /dev/ad4s1e 9.7G 1.9G 7.0G 21% /usr
    /dev/ad4s1f 7.7G 304M 6.8G 4% /var
    /dev/ad4s1g 50G 878M 45G 2% /home
    devfs 1.0K 1.0K 0B 100% /var/named/dev
    /home/signa 50G 878M 45G 2% signa
    /libexec 1.9G 65M 1.7G 4% libexec
    /lib 1.9G 65M 1.7G 4% lib
    /usr/lib 9.7G 1.9G 7.0G 21% usr/lib
    /usr/sbin 9.7G 1.9G 7.0G 21% usr/sbin
    /usr/share 9.7G 1.9G 7.0G 21% usr/share
    /usr/bin 9.7G 1.9G 7.0G 21% usr/bin
    /usr/man 9.7G 1.9G 7.0G 21% usr/man
    /usr/X11R6 9.7G 1.9G 7.0G 21% usr/X11R6
    /usr/libexec 9.7G 1.9G 7.0G 21% usr/libexec
    /usr/local/bin 9.7G 1.9G 7.0G 21% usr/local/bin
    /usr/local/lib 9.7G 1.9G 7.0G 21% usr/local/lib
    /var/spool 7.7G 304M 6.8G 4% var/spool
    /var/lib 7.7G 304M 6.8G 4% var/lib
    /var/run 7.7G 304M 6.8G 4% var/run
    /var/log 7.7G 304M 6.8G 4% var/log
    /home/gtextil 50G 878M 45G 2% gtextil
    /tmp 989M 150K 910M 0% tmp
    /dev 1.0K 1.0K 0B 100% dev
    /bin 1.9G 65M 1.7G 4% bin
    /proc 4.0K 4.0K 0B 100% proc


    Anyone knows what could have happen ?


    Thanks in advance.
     
  2. bmcgrail

    bmcgrail Well-Known Member

    Joined:
    Dec 8, 2003
    Messages:
    83
    Likes Received:
    0
    Trophy Points:
    6
    That's odd.

    what does your /etc/fstab look like?

    what does the output of mount look like?
     
  3. brhospedagens

    brhospedagens Member

    Joined:
    Mar 7, 2006
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1

    (root@freebsd)(~)$cat /etc/fstab
    # Device Mountpoint FStype Options Dump Pass#
    /dev/ad4s1a / ufs rw 1 1
    proc /proc procfs rw 0 0
    /dev/ad4s1b none swap sw 0 0
    /dev/ad4s1d /tmp ufs rw 2 2
    /dev/ad4s1e /usr ufs rw 2 2
    /dev/ad4s1f /var ufs rw 2 2
    /dev/ad4s1g /home ufs rw,userquota,groupquota 1 2


    I´ve rebooted the server this morning and that strange partitions went out.

    Is there a possibility of an rootkit or exploit that caused this ?


    Regards,
     
  4. jrehmer

    jrehmer Well-Known Member

    Joined:
    Apr 10, 2003
    Messages:
    287
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Denver, CO
    Do you have AutoFS/CacheFS installed/running? Your original df output almost reminds me of that, but how it would have been configured that way I could not explain...
     
  5. brhospedagens

    brhospedagens Member

    Joined:
    Mar 7, 2006
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1

    I believe not. This is a fresh new cpanel install with some few accounts I am migrating from an older server.


    Regards,
     
Loading...

Share This Page