Hi! Thank you for reply!
I haven't got access to the server right now. I can give the message in two days, if you need. But the main and only warning there is: Warning: Process '/usr/sbin/NetworkManager;5cyt67yr' (PID 2813) is listening on the network. In the process list there is always only one /usr/sbin/NetworkManager without any extra ID or smth like this. 5cyt67yr is also neither a user, nor a group. And this warning doesn't disappear when I have added /usr/sbin/NetworkManage to a whitelist. Also my colleagues have checked the machine, but no malware or any suspicious thing was found. Alex. сб, 25 трав. 2019 о 22:45 John Horne <john.ho...@plymouth.ac.uk> пише: > On Fri, 2019-05-24 at 22:59 +0300, Olexandra Bokova wrote: > > > > For a quite long time get warnings about process listening the network. > > It looks like '/usr/sbin/NetworkManager;bla-bla-bla' where bla-bla-bla > is a > > short ID like 1ab2c3d. I haven`t find any hint what this ID may mean. > > Certanly it is not a PID and not a user-name. Could someone make it clear > > please? > > > Hello, > > Can you show us the actual message from the log file please? > > > > John. > > -- > John Horne | Senior Operations Analyst | Technology and Information > Services > University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK > ________________________________ > [http://www.plymouth.ac.uk/images/email_footer.gif]< > http://www.plymouth.ac.uk/worldclass> > > This email and any files with it are confidential and intended solely for > the use of the recipient to whom it is addressed. If you are not the > intended recipient then copying, distribution or other use of the > information contained is strictly prohibited and you should not rely on it. > If you have received this email in error please let the sender know > immediately and delete it from your system(s). Internet emails are not > necessarily secure. While we take every care, University of Plymouth > accepts no responsibility for viruses and it is your responsibility to scan > emails and their attachments. University of Plymouth does not accept > responsibility for any changes made after it was sent. Nothing in this > email or its attachments constitutes an order for goods or services unless > accompanied by an official order form. > > _______________________________________________ > Rkhunter-users mailing list > Rkhunter-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/rkhunter-users >
_______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
