Re: chkrootkit help

From: Anthony Schneider (anthony@x-anthony.com)
Date: 10/07/02 

Date: Mon, 7 Oct 2002 17:15:39 -0400
From: Anthony Schneider <anthony@x-anthony.com>
To: Mike Hoskins <mike@adept.org>

> You could try using a trusted sockstat binary to verify what's listening
> on the local system.
>
> % sockstat -4l

quick aside: sockstat is a perl script, unless this changed with
4.6.2.
-Anthony.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: FreeBSD 4.8: afp3-fileserver (port 7000) showing up in netstat -a
    ... Do sockstat or fstat, you'll see which process is listening on port ...
    (freebsd-questions)
  • Re: Closed Port, Need to Reopen
    ... FreeBSD does nothing special here. ... If you are sure you have an application listening on this port (check sockstat) then it is being filtered somewhere in between you and the machine you are trying to check from. ...
    (freebsd-stable)
  • Re: Obtaining a pid or process owner from netstat?
    ... I'm interested in what is listening on 64.112.226.141.8080, ... but I can't tell *which* Zope instance (there are many on this ... Unknown option: p ... sockstat still gave me that I needed. ...
    (freebsd-questions)
  • Re: PHP problems in Apache
    ... the apache app should still load up. ... Try doing a sockstat -4l and see if it's listening on localhost ... to enable the 'httpready' Accept Filter Jove# sockstat -4l ...
    (comp.unix.bsd.freebsd.misc)
  • Re: PHP problems in Apache
    ... the apache app should still load up. ... Try doing a sockstat -4l and see if it's listening on localhost ...
    (comp.unix.bsd.freebsd.misc)