From owner-freebsd-security Mon Oct 7 14: 7:47 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7E3CE37B401 for ; Mon, 7 Oct 2002 14:07:45 -0700 (PDT) Received: from gunjin.wccnet.org (gunjin.wccnet.org [198.111.176.99]) by mx1.FreeBSD.org (Postfix) with ESMTP id D606D43E81 for ; Mon, 7 Oct 2002 14:07:44 -0700 (PDT) (envelope-from anthony@gunjin.wccnet.org) Received: from gunjin.wccnet.org (localhost.rexroof.com [127.0.0.1]) by gunjin.wccnet.org (8.12.3/8.12.2) with ESMTP id g97LFeTU066035; Mon, 7 Oct 2002 17:15:40 -0400 (EDT) Received: (from anthony@localhost) by gunjin.wccnet.org (8.12.3/8.12.3/Submit) id g97LFdUf066034; Mon, 7 Oct 2002 17:15:39 -0400 (EDT) Date: Mon, 7 Oct 2002 17:15:39 -0400 From: Anthony Schneider To: Mike Hoskins Cc: Riley , FreeBSD Security Subject: Re: chkrootkit help Message-ID: <20021007211539.GA65775@x-anthony.com> References: <20021007131203.L83742-100000@fubar.adept.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20021007131203.L83742-100000@fubar.adept.org> User-Agent: Mutt/1.4i Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > You could try using a trusted sockstat binary to verify what's listening > on the local system. > > % sockstat -4l quick aside: sockstat is a perl script, unless this changed with 4.6.2. -Anthony. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message