Mailinglist Archive: opensuse-security (520 mails)

< Previous Next >
Re: [suse-security] netstat-output
  • From: John Pinder <jpinder@xxxxxxx>
  • Date: Tue, 05 Dec 2000 11:36:16 -0800
  • Message-id: <3A2D43B0.8DE9BD86@xxxxxxx>
The message just indicates that netstat can't determine the name of the
process - you are probably fine.


Try cross checking the output of

"ps axfu" as root

with the output of

"netstat -ap", also as root

netstat will (or should) give you the PIDs even when it can't identify
the
process by name. "ps axfu" will give you a list of running processes
(by name and PID). You can then check the PIDs that netstat can't
identify with the list that ps prints out.

To verify an installed package against a RPM, use:

rpm -Vp packagename.rpm

execute this from the directory the rpm package is in (i.e. from
/cdrom/suse/a1 or whatever). If nothing is printed out, this
indicates that everything is ok.

5 indicates that the MD5 checksum does not check
S indicates that the file size does not check

if either (or both) is returned, suspect a problem.

Use "man rpm" for more information, and try http://www.rpm.org for even
more information.

To determine what package a particular file came from, use:

rpm -qf /path/to/file

for netstat, it would be rpm -qf /bin/netstat for example.



Burning updated packages onto CD-R discs is a Really Good Idea. If you
do this, you have some assurance that the rpm package you are using to
verify the installed files has not been altered.



John


< Previous Next >
Follow Ups
References