NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Possibly trojan'd netstat?

On 04/23/2013 06:41 PM, Christos Zoulas wrote:
This is what happens if egrep is your antivirus:

$egrep '(bash|^/bin/sh|/dev/[^aik]|/prof|grep|addr\.h)' /usr/bin/netstat
Binary file /usr/bin/netstat matches
$ strings /usr/bin/netstat | fgrep grep
$ fgrep -r regreply /usr/include/
/usr/include/netinet/ip_icmp.h: "mobile_regrequest", "mobile_regreply", 

This is there to print icmp stats per icmp type.

Okay that makes a little more sense.  Thanks.

I just wanted to make sure there wasn't a problem.


If I wanted to create a universe from scratch
I guess I should have ordered the apple pie.

Home | Main Index | Thread Index | Old Index