Re: ESTABLISHED TCP connections missing from /proc/net/tcp

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



In article <46F9780F64AE9945815725F4C0C72CB80183CC9F@xxxxxxxxxxxxxxxxxxxxxxxxxx> you wrote:
> Could you please elaborate a bit on what "rootkit" means in this
> context?

rootkits have normally code to hide process and netstat entries (for
themself). However if that is a clean system, I guess thats not the case.

> I tried searching for this at bugzilla.kernel.org and got no hits, but
> then maybe the search criteria I used wasn't right.

me (as net-tools maintainer) hasnt heared about that.... however could be a
problem with the embedded system platform, which is not really often used
with general purpose networking tasks.

you can check lsof and /proc/net/sockstat in addition.

Gruss
Bernd
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux