On Wed, 23 Apr 2008 19:18:00 +0200 Helmut Hullen <[EMAIL PROTECTED]
online.de> wrote:
>Du (unspawn) meintest am 22.04.08:
>> RKH is not a file integrity checker,
>
>Sure?
RKH isn't, compared to single-purpose apps like Aide / Fcheck /
Integrit / Osiris / Samhain. Better make that "not yet" since
Hallo, unspawn,
Du (unspawn) meintest am 22.04.08:
>> By the way, how can I add some files to be checked?
> RKH is not a file integrity checker,
Sure?
Viele Gruesse!
Helmut
-
This SF.net email is sponsored by the 2008 Jav
On Tue, 2008-04-22 at 21:12 +0100, John Horne wrote:
> On Tue, 2008-04-22 at 10:58 +0800, Cheng Bruce wrote:
> > Hi all,
> >
> > I got this warning from mail report as following:
> > Warning: Network TCP port 60922 is being usedzaRwT.KiT. Possible rootkit:
>
On Tue, 2008-04-22 at 10:58 +0800, Cheng Bruce wrote:
> Hi all,
>
> I got this warning from mail report as following:
> Warning: Network TCP port 60922 is being usedzaRwT.KiT. Possible rootkit:
^
It seems the message has got a bit garbled. I'
On Tue, 22 Apr 2008 04:58:03 +0200 Cheng Bruce <[EMAIL PROTECTED]>
wrote:
>I tried to find the log of that day, but it was overwrote so that
>I don't know what happened. I have set it logrotated.
>After that day, there is no the same warning message appeared
>again in the daily report.
>
>What s
Hi all,
I got this warning from mail report as following:
Warning: Network TCP port 60922 is being usedzaRwT.KiT. Possible rootkit:
Use the 'lsof -i' or 'netstat -an' command to check this.
I tried to find the information about usedzaRwT.KiT/zaRwT.KiT and can't find
anything.
I tried to
