[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] Strange raw sockets?
- Subject: Re: [cobalt-security] Strange raw sockets?
- From: "Jelmer Jellema" <cobalt@xxxxxxxxxxxxxxx>
- Date: Thu, 2 May 2002 14:23:43 +0200
- Organization: Spin in het Web (www.spininhetweb.nl)
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Hi Jan,
> > netstat -ap gives among others these entries:
> >
> > raw 0 0 *:icmp *:*
> > 7 -
> > raw 0 0 *:tcp *:*
> > 7 -
> Did you try chkrootkit? WHat does it say?
It runs every X hours. Didn't find anything when I ran it by hand. It take
it you don't have these entries then? I'm on a RaQ4i, btw.
Regards,
Jelmer