-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 At some point hitherto, Peter R. Wood hath spake thusly: > Greetings all, > > SecureCRT 3.4 on Windows, and OpenSSH 2.9p1 on the Linux side. I haven't [SNIP] > Could this be indicative of someone snooping my line, or possibly a hardware > problem, or maybe I need to upgrade my SSH server? You definitely need to upgrade your OpenSSH server: http://online.securityfocus.com/archive/1/261645 http://online.securityfocus.com/archive/1/261406 http://online.securityfocus.com/archive/1/261500 http://online.securityfocus.com/archive/1/268718 http://online.securityfocus.com/archive/1/269701 The version you have is definitely vulnerable to two out of four of the vulnerabilities listed above, and probably the other two as well (the first two links are both about the same problem). Your SSH server is a rootkit waiting to happen, if it hasn't already. Which might explain the behavior you're seeing. You want to upgrade to at least 3.1p1, and probably should get the latest if that isn't it. - -- Derek Martin ddm@pizzashack.org - --------------------------------------------- I prefer mail encrypted with PGP/GPG! GnuPG Key ID: 0x81CFE75D Retrieve my public key at http://pgp.mit.edu Learn more about it at http://www.gnupg.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE8zd6adjdlQoHP510RAmoVAJ0eR/9GxLLuPcmsS02y7JzSd0RHigCgveMY H4u9+19cEuBaXDzfHILs4sg= =4+As -----END PGP SIGNATURE-----