Traces d'exploitations dans les journaux

http://online.securityfocus.com/infocus/1633

Traces syslog :
Aug 28 16:59:20 research@fatelabs.net sshd[29178]: log: Connection from 192.168.0.1port 56215
Aug 28 16:59:28 research@fatelabs.net sshd[29179]: log: Connection from 192.168.0.1port 59150
Aug 28 16:59:35 research@fatelabs.net sshd[29180]: log: Connection from 192.168.0.1port 51777
Aug 28 17:01:43 research@fatelabs.net sshd[29195]: fatal: Local: Corrupted check bytes on input.
Aug 28 17:01:43 research@fatelabs.net sshd[29196]: log: Connection from 192.168.0.1port 56214
Aug 28 17:01:50 research@fatelabs.net sshd[29197]: log: Connection from 192.168.0.1port 51820
Aug 28 17:01:56 research@fatelabs.net sshd[29198]: log: Connection from 192.168.0.1port 58898
Aug 28 17:02:03 research@fatelabs.net sshd[29199]: log: Connection from 192.168.0.1port 56122
[...]
Aug 28 17:03:38 research@fatelabs.net sshd[29212]: fatal: Local: crc32 compensation attack: network attack detected 

Le plus difficile est de savoir si l'attaque a réussi ou pas