Our nagios server is having the following problem:
Sometimes all files inside nagio’s home simply disappears.
We already looked for problems whithout success.
Can somebody help us?
Thanks in advance.
OS: Centos 5.5 - 32bits
Nagios: 3.2.3
kernel: 2.6.18-194.32.1.el5
some script deleting old files? (just happened to me 
)
Certanly not, because this happens the same time we had an invasion on the server. Then we formated the server and installed everything fresh. Just O.S. and NAGIOS.
Then we have everything fresh and we have no program to do that.
no reason for the files to get deleted then.
From what you said I’d say the server hasn’t been “cleaned” correctly and has still some sort of infection… :?
That’s what we are looking for… some sort of infection. But we formated the server. And reinstalled everrything from scratch.
The suspiction is we had another invasion, but we can’t find anything… That’s wy we are loking for help.
Thank you.
might be some sort of MBR infection? not sure why you should get only the files in the nagios home deleted though…
Luca
I don’t know how to check for a MBR infection in a LINUX system. I’m going to start how to check this. The Mistery of my problem is: only files under NAGIO’s home are deleted… twice, and the first time just after an invasion. I’m trying to understand if these two problems (The invasion and files of nagios home deleted) are related…