2012年 5月 21日 月曜日 14:09:47 JST Newsmap1

# マシンの稼働状態[vmstat]--------------------------------------------------
procs -----------memory---------- ---swap-- -----io---- --system-- -----cpu------
 r  b   swpd   free   buff  cache   si   so    bi    bo   in   cs us sy id wa st
 0  0    100 5610952 428252 1809384    0    0     1     1    0    0 11  4 85  0  0
# ロードアベレージ[uptime]--------------------------------------------------
 14:09:47 up 763 days,  1:19,  1 user,  load average: 1.46, 1.69, 1.44
# ディスク使用量[df]-----------------------------------------------------
Filesystem         1048576-blocks      Used Available Capacity マウント位置
/dev/mapper/VolGroup00-LogVol00    260475    111993    135038      46% /
/dev/sda1                  251        21       218       9% /boot
# ハードディスクI/Oのベンチマークテスト[hdparm -ft]-------------------------
 Timing buffered disk reads:  370 MB in  3.01 seconds = 123.07 MB/sec
# プロセスの生存状態[pidof-httpd sshd]-------------------------------------
httpd: 7256 9353 9628 11226 13517 14677 14681 14685 14689 14693 14697 14701 14705 25530 26899
sshd: 3219
# ポートをオープンしているプロセス[lsof -i -P]------------------------------
*:10050
*:161
*:22
*:3173
*:35344
*:38658
*:443
*:5353
*:80
# 22/SSHポートを使用しているプロセス[lsof -i:22Newsmap1]----------
COMMAND  PID USER   FD   TYPE DEVICE SIZE NODE NAME
sshd    3219 root    3u  IPv6   8851       TCP *:ssh (LISTEN)
# オープンしているPORT[nmap]-----------------------------------------------
80/tcp  open  http
443/tcp open  https
# ntpdの動作確認[ntpq -p]---------------------------------------------------
# 最新のログイン日時[last]--------------------------------------------------
root     pts/0        10.254.110.96    Fri May 18 13:56 - 17:10  (03:13)    
root     pts/1        10.254.110.96    Wed May  2 12:00 - 12:00  (00:00)    
root     pts/0        10.254.110.96    Wed May  2 10:24 - 18:59  (08:35)    
root     pts/0        10.254.110.96    Tue May  1 17:50 - 19:51  (02:00)    
root     pts/0        10.254.110.96    Fri Apr 27 16:34 - 20:25  (03:50)    
# ログイン失敗履歴[/var/log/secure]-----------------------------------------
May 20 23:47:01 Newsmap1 sshd[17984]: fatal: Read from socket failed: Connection reset by peer
May 21 00:32:01 Newsmap1 sshd[28478]: fatal: Read from socket failed: Connection reset by peer
May 21 02:13:00 Newsmap1 sshd[13169]: fatal: Read from socket failed: Connection reset by peer
May 21 02:48:01 Newsmap1 sshd[24748]: fatal: Read from socket failed: Connection reset by peer
May 21 04:30:01 Newsmap1 sshd[5285]: fatal: Read from socket failed: Connection reset by peer
May 21 04:34:01 Newsmap1 sshd[12483]: fatal: Read from socket failed: Connection reset by peer
May 21 05:37:02 Newsmap1 sshd[18222]: fatal: Read from socket failed: Connection reset by peer
May 21 06:41:01 Newsmap1 sshd[18127]: fatal: Read from socket failed: Connection reset by peer
May 21 06:58:01 Newsmap1 sshd[18266]: fatal: Read from socket failed: Connection reset by peer
May 21 11:47:01 Newsmap1 sshd[5032]: fatal: Read from socket failed: Connection reset by peer
# 異常終了したプロセス[grep -i killed /var/log/message]---------------------
 -> はありません
# /etc/passwd の改竄チェック[/etc/passwd]----------------------------------
 -> ありません