[linux] chkrootkit - "Segmentation fault" a "Broken pipe" problem

[Matus Horvath]

Ak ti podobnym sposobom neblbnu aj ine programy, je to v kazdom pripade 
podozrive.

Skus toto: Stiahni chkrootkit na nejakom inom pocitaci, napal na 
cd/disketu, nabootuj z nejakeho live cd, bez pripojenia na internet, 
skompiluj chkrootkit z diskety/cd, namountuj niekam disk, spusti 
chkrootkit (parameter -r). Ak mas trojana ktory chkrootkit vie najst, 
tak by ho mal najst. Ak nic nenajde, nemusi to ale stale znamenat ze si 
cisty...

Matus

Faith Milan wrote:
> Dobry den,
> nestretli ste sa niekto s nasledujucim problemom? Operacny system je 
> debian stable
> Chrootkit mi zrazu zacal vypisovat tieto chybove hlasky:
> 
> Checking `grep'... /usr/sbin/chkrootkit: line 2552:  3115 Broken 
> pipe             ${strings} -a ${CMD}
>      3116 Segmentation fault      | ${egrep} "${GREP_INFECTED_LABEL}" 
>  >/dev/null 2>&1
> not infected
> 
> Searching for Volc rootkit... \c
> nothing found
> 
> Checking `bindshell'... /usr/sbin/chkrootkit: line 2552:  3768 
> Done                    ${netstat} "${OPT}"
>      3769 Broken pipe             | ${egrep} "^tcp.*LIST|^udp"
>      3770 Segmentation fault      | ${egrep} "[^0-9.]${P}[^0-9.]" 
>  >/dev/null 2>&1
> not infected
> 
> Tieto chyby sa objavuju pri roznych testoch, nie je to vzdy rovnake. Pri 
> kazdom spusteni chkrootkit sa vyskytnu niekde inde.
> Mam kompromitovany system?
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> http://lists.linux.sk/listinfo/linux
> Prehladavanie archivu: http://search.lists.linux.sk
> Meta FAQ: http://www.sklug.sk/lists/linux/metafaq.html