[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] Chkrootkit - possible slapper worm - SOLVED
- Subject: Re: [cobalt-users] Chkrootkit - possible slapper worm - SOLVED
- From: "Andy Clyde, oxfordmusic.net" <cobalt-users@xxxxxxxxxxxxxxx>
- Date: Fri May 23 02:47:01 2003
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
> > netstat -an does reveal something listening on port 4156 (Slapper.c uses
> > this port) but it seems to be an ASP thing.
> >
> > tcp 0 0 127.0.0.1:3001 127.0.0.1:4156 ESTABLISHED
> > tcp 0 0 127.0.0.1:4156 127.0.0.1:3001 ESTABLISHED
> >
>
> Try restarting the ASP service to see if it uses a different port.
>
spot on. it was exactly that. i got confirmation from Alex at Sun One
(Chiliasp) via their support forum. restarted asp and this loopback to 4156
disappeared and so do the slapper warning.
andy