Re: Chkrootkit segfault error

2003-10-16 Thread Edward Dekkers
oxfordmusic.net wrote: oxfordmusic.net wrote: RH9 i'm getting this error when running chkrootkit-0.42b from cron (it runs fine from shell): Checking `wted'... ./chkrootkit: line 2469: 26860 Segmentation fault ./chkwtmp -f ${WTMP} any ideas? cheers andy From cron where? from root's cron

Re: Chkrootkit segfault error

2003-10-15 Thread oxfordmusic.net
> > If I might interject here, I hope you've given serious consideration to > how you're automating your chkrootkit scans. Chkrootkit is best used as > a one-time only application: download the source, verify the checksum, > compile, run, and analyze the results. You would also want to upload >

Re: Chkrootkit segfault error

2003-10-15 Thread Jason Dixon
On Wed, 2003-10-15 at 04:50, oxfordmusic.net wrote: > > oxfordmusic.net wrote: > > From cron where? > > > from root's crontab: > [root root] crontab -l > 03 0,12 * * * cd /usr/local/sbin; ./chkrootkit 2>&1 | mail -s "chkrootkit > output" myuser If I might interject here, I hope you've given seri

Re: Chkrootkit segfault error

2003-10-15 Thread oxfordmusic.net
> oxfordmusic.net wrote: > > > RH9 > > i'm getting this error when running chkrootkit-0.42b from cron (it runs fine > > from shell): > > > > Checking `wted'... ./chkrootkit: line 2469: 26860 Segmentation fault > > ./chkwtmp -f ${WTMP} > > > > any ideas? > > > > cheers > > > > andy > > > > > > > Fr

Re: Chkrootkit segfault error

2003-10-14 Thread Edward Dekkers
oxfordmusic.net wrote: RH9 i'm getting this error when running chkrootkit-0.42b from cron (it runs fine from shell): Checking `wted'... ./chkrootkit: line 2469: 26860 Segmentation fault ./chkwtmp -f ${WTMP} any ideas? cheers andy From cron where? Regards, Ed. -- redhat-list mailing list un

Re: chkrootkit

2002-12-19 Thread Mike Burger
You could have saved yourself a lot of trouble by using "chkrootkit -q". Also, if you skip the "2>&1" and "| mail -s "chkrootkit > output" root", it'll mail root, anyhow. On Thu, 19 Dec 2002, Peter Kiem wrote: > > I'm sure someone is already doing this on the list, > > but I'm going to create a

Re: chkrootkit

2002-12-19 Thread Mike Burger
I do exactly that. If you just let it run from cron, you don't have to pipe the output anywhere. It'll simply email the results to root (or to whomever root's mail gets forwarded). On Wed, 18 Dec 2002, CM Miller wrote: > > > > > Another good tool would be to run chkrootkit on > the box. Che

Re: chkrootkit

2002-12-19 Thread Michael Fratoni
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thursday 19 December 2002 01:59 am, Peter Kiem wrote: > 0 3 * * * (cd /usr/sbin/chkrootkit; ./chkrootkit 2>&1 | grep -v "\.\.\. > \(not\|nothing\) \(found\|infected\|detected\)" | mail -s "chkrootkit > output" root) > > Strips out a lot of the lin

RE: chkrootkit

2002-12-18 Thread aljuhani
> I'm sure someone is already doing this on the list, > but I'm going to create a cronjob for chkrootkit and > have it print out to a log on maybe a daily/weekly > basis just to keep watch. If you want to get a daily email of chkroot output, here is how: pico /etc/cron.daily/chkrootkit.sh inser

Re: chkrootkit

2002-12-18 Thread Peter Kiem
> I'm sure someone is already doing this on the list, > but I'm going to create a cronjob for chkrootkit and > have it print out to a log on maybe a daily/weekly > basis just to keep watch. >From my crontab :) 0 3 * * * (cd /usr/sbin/chkrootkit; ./chkrootkit 2>&1 | grep -v "\.\.\. \(not\|nothing\

Re: chkrootkit

2002-12-18 Thread Jack Bowling
** Reply to message from CM Miller <[EMAIL PROTECTED]> on Wed, 18 Dec 2002 22:00:41 -0800 (PST) > > > Another good tool would be to run chkrootkit on > the box. Check > > > http://www.chkrootkit.org/ for more info. > > I'm sure someone is already doing this on the list, > but I'm going to creat

Re: Chkrootkit [OT]

2002-10-10 Thread Ashley M. Kirchner
Jason Miller wrote: > I am unable to get to it, if you try to ping that site says host not > found... if you do ping the www.chkrootkit.org > > It is hit and miss at your return output... There is no A record for 'chkrootkit.org', but there is for 'www.chkrootkit.org' - I do the same thing w

Re: Chkrootkit [OT]

2002-10-10 Thread Jason Miller
I am unable to get to it, if you try to ping that site says host not found... if you do ping the www.chkrootkit.org It is hit and miss at your return output... Bradley Caricofe wrote: >Sorry for the off-topic post. Has anyone else had trouble getting to >chkrootkit.org? I haven't been able

Re: Chkrootkit [OT]

2002-10-10 Thread Ashley M. Kirchner
Bradley Caricofe wrote: > Sorry for the off-topic post. Has anyone else had trouble getting to > chkrootkit.org? I haven't been able to get to it for months and I've tried > from multiple locations. Appreciate the feedback, please email me your > response off-list. www.chkrootkit.org --