John Horne wrote: > On Mon, 2007-05-14 at 10:03 +0200, Nils Breunese (Lemonbit Internet) > wrote: >> >> I have a tarball of some nastiness I recently found in a server's /tmp >> dir. Rkhunter 1.2.9 indeed didn't notice anything, chkrootkit did warn >> me >> of an infected port. Is there somewhere where I can send these files for >> inspection? I'd rather not touch them myself, but if there are people >> who >> like to dissect these kinds of things I'd be glad to supply the files. >> > Hi, > > I would say put them in to the rkhunter sourceforge Tracker system. At > least then we have a 'repository' where we can collect the tarball from, > rather than you having to keep emailing individuals. Probably best if > you put it in as a 'support request'. > > I would be interested to see if there is anything we can easily/quickly > do for the next release.
The gzipped tarball clocks in at 1.3 MB, while the tracker allows 256000 bytes max. Nils Breunese. ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users
