From: Blaine Kahle (goateebinary.net)
Date: Sun May 11 2003 - 13:03:21 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Fri, May 09, 2003 at 11:01:21AM -0600, Brett Glass wrote:
> At 08:25 AM 5/9/2003, Bjoern A. Zeeb wrote:
>
> >this asumes that truss is ok ;-) perhaps take the truss from your
> >other 4.7 machine ...
>
> Yes, you do have to be careful of this. I recently investigated a
> machine that had been "owned," and when truss was applied to some
> commands (e.g. netstat) it produced no output.

I'm showing that truss'ing netstat produces no output on several
versions of FreeBSD that I have installed. Is this correct behavior? The
truss and netstat binaries both check out when compared to the listings
at http://www.knowngoods.org/

--
Blaine Kahle
blainebinary.net
0x178AA0E0
_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]