Re: Who changes /bin/ping on my system ?
On Tue 04 Mar 2014 at 09:16:15 +0100, Tim Ruehsen wrote:
> # ls -la /bin/ping
> -rwxr-xr-x 1 root root 46672 01-02-14 22:18:43 /bin/ping
The file size indicates this is /bin/ping6 (amd64 platform)
> Now I reinstalled iputils-ping:
>
> # ls -la /bin/ping
> -rwxr-xr-x 1 root root 44080 01-02-14 22:18:43 /bin/ping
The file size indicates this is /bin/ping (amd64 platform)
> For me it looks like ping utility is changed from time to time without setting
> the correct pcaps (rootkit bug ?).
I'm unsure what to think but it seems you are involved and not a bug/rootkit.
> Is there a good rootkit / malware scanner (I am already using chkrootkit with
> no success) ?
Nobody has any success with chkrootkit.
Reply to: