Date: Sun, 2 Jan 2000 11:23:09 +0200 (EET) From: Martti Kuparinen <martti@research.zopps.fi> To: freebsd-security@freebsd.org Subject: zero checksums in tripwire Message-ID: <Pine.BSF.4.21.0001021112280.3414-100000@ws125.research.zopps.fi>
next in thread | raw e-mail | index | archive | help
Hi!
I'm using tripwire-1.2 to check the filesystems for modifications.
Something weird happened today:
### Phase 5: Generating observed/expected pairs for changed files
###
### Attr Observed (what it is) Expected (what it should be)
### =========== ============================= =============================
/usr/sbin/mergemaster
snefru (sig2): 0 1YtxO4k.hi8WCaxeN2OeK7
crc32 (sig3): 0 2.CHwf
crc16 (sig4): 0 0009Yl
md4 (sig5): 0 36WHBVUe1VKbe71GDuAfPx
md2 (sig6): 0 1ME7ZPdw3AEDfbiH9EqzQ1
sha (sig7): 0 5GitfGU8C56VXcAZTHHw0IsJJ6W
haval (sig8): 0 08FTJNA4mat.Yv8nFwfbkT
---> File: '/usr/sbin/mergemaster'
---> Update entry? [YN(y)nh?]
There are several other similar cases where all the checksums are zeros.
Any idea what's going on?
/Martti
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0001021112280.3414-100000>