[1906] in linux-security and linux-alert archive
[linux-security] Re: Help with : telnetd[...]: ttloop: peer died:
daemon@ATHENA.MIT.EDU (Duncan Simpson)
Fri Jun 19 04:12:02 1998
To: linux-security@redhat.com
In-reply-to: Your message of "Tue, 16 Jun 1998 06:49:05 -0300."
<199806161049.GAA25348@hilfy.ece.cmu.edu>
Date: Wed, 17 Jun 1998 14:35:37 +0200
From: Duncan Simpson <dps@io.stargate.co.uk>
Resent-From: linux-security@redhat.com
Resent-Reply-To: linux-security@redhat.com
Those with this sort of problem should investigate check-ps-1.2. It is
offocialyy alpha but seems to work reliably. The licence is GPL. This
will check ps against hacking every 5 minutes or work in one-shot mode. Any
p[ids not list can be killed if you wish. A fd exploer is included which will
tell you both ends of all the network cnnections, which files are open and so
forth. Naturally anti-race code is included. Daemon mode can use email to
another machine and hacks all the process name information to httpd.
?Interest parties are invited to obtain a copy by anonymous ftp from
mars.astar.co.uk in the pub/word2x directory. The latest version is
check-ps-1.2alpah2.tar.gz (source, with GNU autoconf script).
--
Duncan (-:
"software industry, the: unique industry where selling substandard goods is
legal and you can charge extra for fixing the problems."
--
----------------------------------------------------------------------
Please refer to the information about this list as well as general
information about Linux security at http://www.aoy.com/Linux/Security.
----------------------------------------------------------------------
To unsubscribe:
mail -s unsubscribe linux-security-request@redhat.com < /dev/null