Hello,

I run rkhunter from time to time and have warnings about the diff between
sockstat and netstat like this:

[11:33:31] Warning: Differences found between sockstat and netstat output:
[11:33:31]          Sockstat output (ports in use): 0 1124 22 25 514 587
[11:33:31]          Netstat output (ports in use): 22 25 514 587

the diff ports in sockstat are:

$ sockstat | fgrep ' 0 '
root     ipmon      695   0  dgram  -> /var/run/logpriv

$ sockstat | fgrep 1124
guru     ssh-agent  1125  3  stream /tmp/ssh-KldJtKCKwQMi/agent.1124

Why is rkhunter complaining about them?
Thx

        matthias
-- 
Sent from my FreeBSD netbook

Matthias Apitz               |  - No system with backdoors like Apple/Android
E-mail: g...@unixarea.de     |  - No HTML/RTF in E-mail
WWW: http://www.unixarea.de/ |  - No proprietary attachments
phone: +49-170-4527211       |  - Respect for open standards
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Reply via email to