[Rkhunter-users] Warning on http listening on network

2013-11-26 Thread absolutely_f...@libero.it
Hi, I received this warning: Warning: Process '/usr/local/apache/bin/httpd' (PID 8058) is listening on the network. Warning: Process '/usr/local/apache/bin/httpd' (PID 8058) is listening on the network. Warning: Process '/usr/local/apache/bin/httpd' (PID 8058) is listening on the network.

Re: [Rkhunter-users] Warning on http listening on network

2013-11-26 Thread William Maddler
That message refer to packet capture not to normal listening. So said: are you sure that httpd is the legit one? If so, that could be something similar to http://comments.gmane.org/gmane.comp.documentfoundation.libreoffice.user/23104, perhaps. W. - Original Message - From: absolutely

[Rkhunter-users] R: Re: Warning on http listening on network

2013-11-26 Thread absolutely_f...@libero.it
Hi, thank you for your reply. Onestly, I don't know if binary is legit. I've no previous md5sum. I run rkhunter and I've no warning: # rkhunter --enable packet_cap_apps --nolog --nomow [ Rootkit Hunter version 1.4.0 ] Checking the network... Performing checks on the network interfaces

Re: [Rkhunter-users] R: Re: Warning on http listening on network

2013-11-26 Thread unspawn
On Tue, 26 Nov 2013 16:23:45 +0100 absolutely_f...@libero.it wrote: Onestly, I don't know if binary is legit. I've no previous md5sum. It's CentOS so you could run 'rpm -Vv httpd' or run 'stat' on the file and compare with a RPM from the repo? Regards, unSpawn ---