On Tue, 2008-04-22 at 21:12 +0100, John Horne wrote: > On Tue, 2008-04-22 at 10:58 +0800, Cheng Bruce wrote: > > Hi all, > > > > I got this warning from mail report as following: > > Warning: Network TCP port 60922 is being usedzaRwT.KiT. Possible rootkit: > ^^^^^^^^^ > It seems the message has got a bit garbled. > I can't reproduce the message you have received (i.e. RKH shows the message correctly for me). Can you run 'rkhunter --enable ports --swo' and if it shows the message again, then email me the log file please.
John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 587001 ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
