Re: chkrootkit pblm netstat

[tlaronde%polynum.com@localhost]

On Tue, Jul 10, 2012 at 06:11:59PM +0100, David Brownlee wrote:
> 
> Looks to be false positive - it runs a strings on netstat and looks for
> 
> /dev/hdl0/dev/xdta|/dev/ttyoa|/dev/pty[pqrsx]|/dev/cui|/dev/hdn0|/dev/cui221|/dev/dszy|/dev/ddth3|/dev/caca|^/prof|/dev/tux|grep|addr\.h
> 
> which in the case of NetBSD's netstat matches on mobile_regreply ('grep')

The MESSAGE in the pkgsrc dir says that run on a not tested OS, it may
generate false positives. And it has been run against NetBSD 1.6...

-- 
        Thierry Laronde <tlaronde +AT+ polynum +dot+ com>
                      http://www.kergis.com/
Key fingerprint = 0FF7 E906 FBAF FE95 FD89  250D 52B1 AE95 6006 F40C