Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #185718

Re: NFS creates hidden port

Show all headers | View raw

Hi there


On 22/08/17 15:23, Thomas Schmitt wrote:

> It seems that it was fixed or suppressed intermediately.
> The newer post says "It's back!".

> I already stated my enthusiasm on occasion of your post about DVD ejecting.
> It is discouraging to get ignored after having invested substantial
> effort in diagnosing or at least reliably reproducing a kernel problem.
> 
> 
> Well, complaining is futile. Try to work around in user space.
> E.g. try to patch unhide-tcp so that it reads the NFS port number from
> a file which you create before the Rkhunter run.
> 
> You could let function checkoneport() return "ok" if "port" is the
> registered NFS zombie. This would be done before the function runs
> netstat by
>     if (NULL != (fich_tmp=popen (command, "r")))
> in
>    https://sources.debian.net/src/unhide/20130526-1/unhide-tcp.c/#L190

I would have to find out when NFS does a callback an then dump the local 
port into a file.


Regards,
Rob

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

NFS creates hidden port Rob van der Putten <rob@sput.nl> - 2017-08-22 10:40 +0200
  Re: NFS creates hidden port tomas@tuxteam.de - 2017-08-22 11:00 +0200
  Re: NFS creates hidden port <tomas@tuxteam.de> - 2017-08-22 11:00 +0200
    Re: NFS creates hidden port "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-22 11:20 +0200
      Re: NFS creates hidden port <tomas@tuxteam.de> - 2017-08-22 11:50 +0200
        Re: NFS creates hidden port Rob van der Putten <rob@sput.nl> - 2017-08-22 12:10 +0200
          Re: NFS creates hidden port <tomas@tuxteam.de> - 2017-08-22 12:30 +0200
          Re: NFS creates hidden port "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-22 12:40 +0200
            Re: NFS creates hidden port Rob van der Putten <rob@sput.nl> - 2017-08-22 13:50 +0200
              Re: NFS creates hidden port "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-22 15:30 +0200
                Re: NFS creates hidden port Rob van der Putten <rob@sput.nl> - 2017-08-22 17:20 +0200
                Re: NFS creates hidden port "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-22 18:10 +0200
                Re: NFS creates hidden port Rob van der Putten <rob@sput.nl> - 2017-08-23 13:50 +0200

csiph-web