On Thu, 2007-08-30 at 15:14 +0200, Bert Taanstra wrote: > rkhunter 1.2.9-5 Ubuntu Gutsy gives a false positive port 2001: > scalper rootkit if portsentry 1.2-11.1 is installed. > Hi,
Yes, I've had similar problems with FP reports of ports being used. The next release (1.3.0) has methods of whitelisting ports that are known to be in use, or ports (which may vary) that are in use by a known process (requires lsof for this). I would suggest either waiting for the full release or test the beta, or CVS, version. John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839 ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
