Re: chkrootkit output question - Unknown HZ value!???
On Tue, May 25, 2004 at 03:24:43PM -0400, Derrick 'dman' Hudson wrote:
> On Tue, May 25, 2004 at 11:16:54AM -0700, August MacBeth wrote:
> | i'm getting some strange output from chkrootkit on one of my woody
> | servers. can anyone tell me what this means? i ran chkrootkit
> | again to see if it went away and it came back with the same info. i
> | google'd a bit but couldn't find anything..
> |
> | Checking `inetd'... Unknown HZ value! (0) Assume 100.
> | not infected
>
> Run 'bash' as root and you might see the same message :
>
> # bash
> Unknown HZ value! (26) Assume 100.
>
> I have no idea what is printing this message or why. I do know that
> only 1 out of 6 debian machines I use exhibits this. Also, that
> machine hasn't always done that. It is annoying, but otherwise
> appears harmless. I am interested in knowing what it means and even
> how to correct the situation :-).
>
HZ is the number of kernel ticks in a second (Its a measure of kernel
time, number of jiffies in a second if you care). It should be 100 on a
2.4 kernel, no idea what it would be on a 2.2 kernel.
The programs are probably trying to use the following function to
discover the value for HZ and it is not returning a meaningful value
for some reason (don't have ideas on that, sorry, you probably have a
better chance asking this on LKML)
hz = sysconf (_SC_CLK_TCK);
> -D
>
> --
> Love is not affectionate feeling, but a steady wish for the loved
> person's ultimate good as far as it can be obtained.
> --C.S. Lewis
>
> www: http://dman13.dyndns.org/~dman/ jabber: dman@dman13.dyndns.org
Reply to: