Core Dumps

[IDOXLR8]

Last night I ftp'd into my site and noticed a bunch of core dumps there. As always I deleted them and scanned for more.

Just thought I would bring this to the admins attention.

I can't seem to find any more dumps but after 12 hours cPanel still reports very high disk space usage.

 

Thanks

[Byron]

This problem seems to be getting better. If you want your site to email you when this happens or when you have any 500 error read this topic.

 

http://www.helionet.org/index/index.php?showtopic=4140

 

 

 

 

 

[IDOXLR8]

This problem seems to be getting better. If you want your site to email you when this happens or when you have any 500 error read this topic.

 

http://www.helionet.org/index/index.php?showtopic=4140

Thanks byron...Ill give this a try, I have an antivirus scanner written in php that I use. I modified it to also look for core files.

If anybody is interested, Ill zip it up for ya...

 

 

[Byron]

Thanks byron...Ill give this a try, I have an antivirus scanner written in php that I use. I modified it to also look for core files.

If anybody is interested, Ill zip it up for ya...

 

Sure, I'm interested, btw, this should be a way to test it.

 

http://www.eicar.org/anti_virus_test_file.htm

 

I tried his test on an old host I was on a few years ago that had a virus scan as a cpanel option and it worked then.

 

 

[IDOXLR8]

Thanks byron...Ill give this a try, I have an antivirus scanner written in php that I use. I modified it to also look for core files.

If anybody is interested, Ill zip it up for ya...

 

Sure, I'm interested, btw, this should be a way to test it.

 

http://www.eicar.org/anti_virus_test_file.htm

 

I tried his test on an old host I was on a few years ago that had a virus scan as a cpanel option and it worked then.

 

Sorry I took so long, I've been busy as always. Here is the php antivirus zipped up (link fixed 8/14/2009)

I got the original from http://www.phpantivirus.com/

 

I'm going to upload the test file from eicar.org and give it a try and see what happens...I'll let ya know...

 

I gave it a try. I renamed the file to .php and scanned and it didn't find it.

[Byron]

Didn't work for me either and I uncommented the line in the congig file that allowed for scanning .txt files. This is what it said:

 

Clean: /home/byron/public_html/test/eicar.com.txt

 

and this is the fake virus

http://byrondallas.heliohost.org/test/eicar.com.txt

 

Maybe it knows it's fake?

 

 

[IDOXLR8]

After many attempts at trying the av scan I finally gave up and ended up using myftpidx, a simple command line utility that scans your entire site and saves the list in a text or html file. I then searched the text file for core files. It worked great.

This was really useful as my site tree is many layers deep.

 

His site Luigi Auriemma, http://aluigi.org/mytoolz.htm

 

the file is myftpidx 0.1.3

 

Maybe a weekly scan will help keep things in order...

btw...were we down this morning? sat...

[Byron]

I then searched the text file for core files. It worked great.

 

Here's a script that will search and destroy (unlink) any files you search for. I use it now to look for core files and delete them really quickly. What I do is enter core in the File: form and click Submit and see what comes up. If I'm happy with deleting those files I then hit my back button and check the check box and click Submit again and they're gone.

 

http://byrondallas.heliohost.org/temp/serch-n-destroy.txt

 

Oh and yea we were down this morning and afternoon.

 

 

 

[Ashoat]

You should be getting much less coredumps now. Let me know if a problem persists.