Hi,
I received this warning:
Warning: Process '/usr/local/apache/bin/httpd' (PID 8058) is listening on the
network.
Warning: Process '/usr/local/apache/bin/httpd' (PID 8058) is listening on the
network.
Warning: Process '/usr/local/apache/bin/httpd' (PID 8058) is listening on the
network.
That message refer to packet capture not to normal listening.
So said: are you sure that httpd is the legit one?
If so, that could be something similar to
http://comments.gmane.org/gmane.comp.documentfoundation.libreoffice.user/23104,
perhaps.
W.
- Original Message -
From: absolutely
Hi,
thank you for your reply.
Onestly, I don't know if binary is legit. I've no previous md5sum.
I run rkhunter and I've no warning:
# rkhunter --enable packet_cap_apps --nolog --nomow
[ Rootkit Hunter version 1.4.0 ]
Checking the network...
Performing checks on the network interfaces
On Tue, 26 Nov 2013 16:23:45 +0100 absolutely_f...@libero.it wrote:
Onestly, I don't know if binary is legit. I've no previous md5sum.
It's CentOS so you could run 'rpm -Vv httpd' or run 'stat' on the
file and compare with a RPM from the repo?
Regards,
unSpawn
---