Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 8 Feb 2013 12:08:11 +0100
From:      Matthias Apitz <guru@unixarea.de>
To:        freebsd-questions@freebsd.org
Subject:   warnings is rkhunter(8) about ports usage
Message-ID:  <20130208110810.GA66174@tiny.Sisis.de>

next in thread | raw e-mail | index | archive | help

Hello,

I run rkhunter from time to time and have warnings about the diff between
sockstat and netstat like this:

[11:33:31] Warning: Differences found between sockstat and netstat output:
[11:33:31]          Sockstat output (ports in use): 0 1124 22 25 514 587
[11:33:31]          Netstat output (ports in use): 22 25 514 587

the diff ports in sockstat are:

$ sockstat | fgrep ' 0 '
root     ipmon      695   0  dgram  -> /var/run/logpriv

$ sockstat | fgrep 1124
guru     ssh-agent  1125  3  stream /tmp/ssh-KldJtKCKwQMi/agent.1124

Why is rkhunter complaining about them?
Thx

	matthias
-- 
Sent from my FreeBSD netbook

Matthias Apitz               |  - No system with backdoors like Apple/Android
E-mail: guru@unixarea.de     |  - No HTML/RTF in E-mail
WWW: http://www.unixarea.de/ |  - No proprietary attachments
phone: +49-170-4527211       |  - Respect for open standards



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20130208110810.GA66174>