[Gllug] False positive report?

[Alain Williams]

On Thu, Jan 05, 2006 at 01:29:25PM +0000, Chris Bell wrote:
> On Thu 05 Jan, Martin A. Brooks wrote:
> > 
> > Chris Bell wrote:
> > > /etc/cron.daily/chkrootkit:
> > > INFECTED (PORTS:  600)
> > 
> > So what's listening on port 600, then?
> 
>    I have been searching for the command to check just that.

netstat -ap

-- 
Alain Williams
Parliament Hill Computers Ltd.
Linux Consultant - Mail systems, Web sites, Networking, Programmer, IT Lecturer.
+44 (0) 787 668 0256  http://www.phcomp.co.uk/

#include <std_disclaimer.h>
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug