In article <46F9780F64AE9945815725F4C0C72CB80183CC9F@xxxxxxxxxxxxxxxxxxxxxxxxxx> you wrote: > Could you please elaborate a bit on what "rootkit" means in this > context? rootkits have normally code to hide process and netstat entries (for themself). However if that is a clean system, I guess thats not the case. > I tried searching for this at bugzilla.kernel.org and got no hits, but > then maybe the search criteria I used wasn't right. me (as net-tools maintainer) hasnt heared about that.... however could be a problem with the embedded system platform, which is not really often used with general purpose networking tasks. you can check lsof and /proc/net/sockstat in addition. Gruss Bernd - To unsubscribe from this list: send the line "unsubscribe linux-net" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html