NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: chkrootkit pblm netstat




On Tue, 10 Jul 2012, tlaronde%polynum.com@localhost wrote:

On Tue, Jul 10, 2012 at 06:11:59PM +0100, David Brownlee wrote:

Looks to be false positive - it runs a strings on netstat and looks for

/dev/hdl0/dev/xdta|/dev/ttyoa|/dev/pty[pqrsx]|/dev/cui|/dev/hdn0|/dev/cui221|/dev/dszy|/dev/ddth3|/dev/caca|^/prof|/dev/tux|grep|addr\.h

which in the case of NetBSD's netstat matches on mobile_regreply ('grep')

The MESSAGE in the pkgsrc dir says that run on a not tested OS, it may
generate false positives. And it has been run against NetBSD 1.6...


Good point.

I am not sure if this package is worth installing since the writer has not bothered to test anything recent.

Thank you,
Darrel


Home | Main Index | Thread Index | Old Index