Re: Output from chkrootkit

From: Peter Chant (pete_at_petezilla.co.uk)
Date: 06/14/05 

Date: Tue, 14 Jun 2005 00:28:30 +0100

lorenzodes wrote:

>
> Chkrootkit warned you because a process was listening on port 600. The
> said process, according to lsof, is rpc.rquotad (a netstat -npl | grep
> 600 should confirm that). If it is so, the "Rootkit alert" was a false
> alarm.

Nothing reported by that, but chkrootkit is no longer flagging anything up.
rpc.quotad is sitting on 605 at the moment.

My gut feeling is false alarm as nothing else suspicious is happening. Also
600 is blocked by both my router and also the iptables firewall I set up on
this machine.

Thanks for your help, it is most appreciated.

Pete 

-- 
http://www.petezilla.co.uk
Quantcast