[Gllug] False positive report?

[Chris Bell]

On Thu 05 Jan, Alain Williams wrote:
> 
> On Thu, Jan 05, 2006 at 01:29:25PM +0000, Chris Bell wrote:
> > On Thu 05 Jan, Martin A. Brooks wrote:
> > > 
> > > Chris Bell wrote:
> > > > /etc/cron.daily/chkrootkit:
> > > > INFECTED (PORTS:  600)
> > > 
> > > So what's listening on port 600, then?
> > 
> >    I have been searching for the command to check just that.
> 
> netstat -ap
> 
Many thanks, I think that indicates rpc.statd


-- 
Chris Bell

-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug