Re: [suse-security] ifconfig and promiscuos mode
What other ways can I be sure that my box has not been compromised? I have run adorefind, negative, chkrootkit, all negative.
well md5 signatures would be okay if you can put the hard disk into another computer and have the signatures of the original files ... i guess. cheers!
Yuppa, Michael Stern wrote:
What other ways can I be sure that my box has not been compromised? I have run adorefind, negative, chkrootkit, all negative.
well md5 signatures would be okay if you can put the hard disk into another computer and have the signatures of the original files ... i guess.
Tripwire would help here. Sadly, it's only effective if you have installed it before your box went online. Btw., you can compare md5 sigs betw. the original CD version of the bins and the installed ones as well. Just a bit messy. Finally, get a known-good lsof and do some checks.
cheers!
Boris <bolo@lupa.de> ---
participants (2)
-
Boris Lorenz -
Michael Stern