massive .xsession-errors (was Re: chkrootkit finds 'value too large for defined data type')

2004-10-13 Thread Geoff Thurman
On Tuesday 12 October 2004 10:58 pm, s. keeling wrote: > Incoming from Geoff Thurman: > > I'm running woody on one hd, and have recently installed sarge on > > another by upgrading everything over the net after installing from > > my original woody cds. Tonight on the sarge hd, chkrootkit gives > >

Re: chkrootkit finds 'value too large for defined data type'

2004-10-12 Thread s. keeling
Incoming from Geoff Thurman: > > I'm running woody on one hd, and have recently installed sarge on > another by upgrading everything over the net after installing from my > original woody cds. Tonight on the sarge hd, chkrootkit gives about > twenty lines of > > /proc/1544/fd/1 : value too lar

chkrootkit finds 'value too large for defined data type'

2004-10-12 Thread Geoff Thurman
Hello all, I'm running woody on one hd, and have recently installed sarge on another by upgrading everything over the net after installing from my original woody cds. Tonight on the sarge hd, chkrootkit gives about twenty lines of /proc/1544/fd/1 : value too large for defined data type with 1

Re: chkrootkit finds

2004-03-26 Thread Paul Johnson
David Baron <[EMAIL PROTECTED]> writes: > Checking `lkm'... You have 1 process hidden for readdir command > You have 1 process hidden for ps command > Warning: Possible LKM Trojan installed > > Is this a true report? > What does this do? > How to get rid of it if true? STFW, it's already

Re: chkrootkit finds

2004-03-26 Thread Chris Metzler
On Fri, 26 Mar 2004 12:33:01 +0200 David Baron <[EMAIL PROTECTED]> wrote: > > Checking `lkm'... You have 1 process hidden for readdir command > You have 1 process hidden for ps command > Warning: Possible LKM Trojan installed > > Is this a true report? > What does this do? > How to get rid

Re: chkrootkit finds

2004-03-26 Thread Wang WenRui
Are you running multithread process with NPTL? It seems to be a false positive of chkrootkit. Around 12 o'clock on 26 Mar, David Baron wrote: > Checking `lkm'... You have 1 process hidden for readdir command > You have 1 process hidden for ps command > Warning: Possible LKM Trojan installe

chkrootkit finds

2004-03-26 Thread David Baron
Checking `lkm'... You have 1 process hidden for readdir command You have 1 process hidden for ps command Warning: Possible LKM Trojan installed Is this a true report? What does this do? How to get rid of it if true? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsub