Rootkit

[Manuel Arostegui Ramirez]

On Tuesday 23 October 2007 23:16:47 Jordi Prats wrote:
> But it does check for some listening ports. There is not a better tool
> for that?
>
> Maybe a combination of chkrootkit -d with some AV? Any recomendation?
>

Hi Jordi, 
First off, we prefer bottom posting if you don't mind, it's easier to read the 
whole thread that way

Secondly, you do not need for chkrootkit to do that, just netstat -putan | 
grep -i listen will do the trick. In fact, I have set up a small script which 
run that every hour and send an email with the results to my account, I'm a 
wee paranoic, I know, but... :-)

Hope this helps.

Manuel.
-- 
Manuel Arostegui Ramirez.

Electronic Mail is not secure, may not be read every day, and should not
be used for urgent or sensitive issues.