[GRLUG] Rogue SSH Connections

[Mark Farver]

On Oct 7, 2013 4:49 PM, "L. V. Lammert" <lvl at omnitec.net> wrote:

> How could a process keep a port optn, yet there be no way to observe the
> port in a Linux kernel?

Rootkit would explain it..but seems like odd behavior for one.  You could
try running unhide.

Mark
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shinobu.grlug.org/pipermail/grlug/attachments/20131007/b0b65307/attachment-0001.html>