Re: Compromised FBSD/Apache

From: Benjamin Krueger <benjamin(at)seattlefenix.net>
Date: Mon Nov 18 2002 - 08:27:20 EST

• Original Message ----- From: "Greg S. Wirth" <greg@beldamar.com> To: <incidents@securityfocus.com> Sent: Saturday, November 16, 2002 9:11 AM Subject: Compromised FBSD/Apache

> Hello...

What process is listening on the port?

sockstat | grep ':127'

Find out what the process is, who owns it, when it was started, when it was put there, and what its purpose is.

> Greg S. Wirth
> Anchorage, Alaska

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Tue Nov 19 13:34:12 2002