Re: chkrootkit V. 0.47

2007-11-28 Thread Luiz Eduardo Roncato Cordeiro
Hi, On Wednesday, 28 de November de 2007, Robert Watson > wrote: > On Tue, 20 Nov 2007, JP wrote: > > > --and-- > > Checking `lkm'... You have 131 process hidden for readdir command > > chkproc: Warning: Possible LKM Trojan installed > > I wonder if it's trying to use procfs, which isn't mount

chkrootkit 0.46 reboots FreeBSD 5.4-RELEASE-p8

2005-10-28 Thread Luiz Eduardo Roncato Cordeiro
Hello, Please, don't use chkrootkit 0.46 on production machines. The "chkproc" process sends a SIGXFSZ (25) signal to init, that interprets this signal as a "disaster" and reboots after a 30s sleep. I'm contacting the chkrootkit maintainer to fix this problem. Sorry, Cordeiro __

Re: What is this Very Stupid DOS Attack Script?

2005-04-06 Thread Luiz Eduardo Roncato Cordeiro
Hi, Probably, what you have seen is a force brute attack against your sshd. Unfortunately, this kind of attack still works. Regards, Cordeiro On Wednesday April 6 2005 12:49, Martin McCormick > wrote: > We have been noticing flurries of sshd reject messages in > which some system out ther