NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Possibly trojan'd netstat?



On 04/23/2013 06:41 PM, Christos Zoulas wrote:
This is what happens if egrep is your antivirus:

$egrep '(bash|^/bin/sh|/dev/[^aik]|/prof|grep|addr\.h)' /usr/bin/netstat
Binary file /usr/bin/netstat matches
$ strings /usr/bin/netstat | fgrep grep
mobile_regreply
$ fgrep -r regreply /usr/include/
/usr/include/netinet/ip_icmp.h: "mobile_regrequest", "mobile_regreply", 
"reserved_37",

This is there to print icmp stats per icmp type.

Okay that makes a little more sense.  Thanks.

I just wanted to make sure there wasn't a problem.

--
Mike

If I wanted to create a universe from scratch
I guess I should have ordered the apple pie.



Home | Main Index | Thread Index | Old Index