Its so extrange for me because when I have read Andy I have suspect
about a problem with the netstat regexp in unhide-tcp but, this kind
of problem should show many ports not only one.

Did you change something in kernel mode ?

2011/5/10 John Horne <[email protected]>:
> On Tue, 2011-05-10 at 16:55 +0100, Andy Clyde - OMN Hosting wrote:
>> On 10/05/11 15:24, [email protected] wrote:
>> > On Tue, 10 May 2011 09:51:14 +0200 Andy Clyde - OMN Hosting
>> > <[email protected]>  wrote:
>> >> Any other ideas?
>> >
>> > Run 'tcp-unhide 2>&1>/path/to/output.log' (at the same time you run
>> > RKH?), review the log and attach output?
>> >
>>
>> Unhide 20090810
>> http://www.security-projects.com/?Unhide
>>
> Have you tried using the latest version of unhide. The web site shows it
> to be dated 2011-01-13 I haven't tried this version myself, but the
> later versions offered more options which may provide more info.
>
> http://www.unhide-forensics.info/?Download
>
>
>
> John.
>
> --
> John Horne, University of Plymouth, UK
> Tel: +44 (0)1752 587287    Fax: +44 (0)1752 587001
>
>
> ------------------------------------------------------------------------------
> Achieve unprecedented app performance and reliability
> What every C/C++ and Fortran developer should know.
> Learn how Intel has extended the reach of its next-generation tools
> to help boost performance applications - inlcuding clusters.
> http://p.sf.net/sfu/intel-dev2devmay
> _______________________________________________
> Rkhunter-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/rkhunter-users
>

------------------------------------------------------------------------------
Achieve unprecedented app performance and reliability
What every C/C++ and Fortran developer should know.
Learn how Intel has extended the reach of its next-generation tools
to help boost performance applications - inlcuding clusters.
http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________
Rkhunter-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to