I think I have acquired a copy of chkrootkit. But I am unaware of the best way to install this software on a Sun Cobalt Qube 3 Professional. It was downloaded from http://www.chkrootkit.com/#related_links but does not appear to be the typical pkg that I can run the install manually on. Any help would be appreciated, I am somewhat of a Linux newbie. And seriously interested in the enhanced security monitoring capabilities that chkrootkit can offer.
Stefan Wynn Jones > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:cobalt-security- > [EMAIL PROTECTED]] On Behalf Of cobalt-security- > [EMAIL PROTECTED] > Sent: Thursday, November 28, 2002 3:00 PM > To: [EMAIL PROTECTED] > Subject: cobalt-security digest, Vol 1 #996 - 1 msg > > Send cobalt-security mailing list submissions to > [EMAIL PROTECTED] > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.cobalt.com/mailman/listinfo/cobalt-security > or, via email, send a message with subject or body 'help' to > [EMAIL PROTECTED] > > You can reach the person managing the list at > [EMAIL PROTECTED] > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of cobalt-security digest..." > > > Today's Topics: > > 1. Re: CROND (John 'JAYTEE' Tompkins) > > --__--__-- > > Message: 1 > Date: Thu, 28 Nov 2002 16:52:05 +1100 > Subject: Re: [cobalt-security] CROND > From: "John 'JAYTEE' Tompkins" <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Reply-To: [EMAIL PROTECTED] > > Tom, > On Our RAQ3, CROND appears as a process when monitor.pl executes on the > quarter hour > All ways has... > > JAYTEE > > On Wednesday, November 27, 2002, at 09:12 AM, Skyhound Internet wrote: > > > I have a process running on one of my Raq4's called CROND. Not to be > > mistaken with crond. > > > > root 4180 0.0 0.1 1156 536 ? S 14:09 0:00 CROND > > > > I am unaware of what this process is. The latest chkrootkit shows no > > hacks. > > > > A reboot of the machine cleared it out but it came back again the next > > day. > > > > Any ideas of what this might be? > > > > Thanks > > > > Tom > > > > _______________________________________ > > Skyhound Internet > > Long Beach CA > > > > _______________________________________________ > > cobalt-security mailing list > > [EMAIL PROTECTED] > > http://list.cobalt.com/mailman/listinfo/cobalt-security > > > > > > --__--__-- > > _______________________________________________ > cobalt-security mailing list > [EMAIL PROTECTED] > http://list.cobalt.com/mailman/listinfo/cobalt-security > > > End of cobalt-security Digest _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
