[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Checking `bindshell'... INFECTED (PORTS: 3049)



On Wed, Sep 28, 2005 at 11:42:24AM -0700, Raquel Rice wrote:
On Wed, 28 Sep 2005 12:38:27 +0200
Sonixxfx <sonixxfx@gmail.com> wrote:

The netstat command
should show you what is listening on that port but rootkits often
hide themselves from netstat, ps and such.

What package does ps reside in?

I went and looked and it appears to be provided by the procps package.

--
Steve Block
http://ev-15.com/
http://steveblock.com/
scblock@ev-15.com



Reply to: