Re: [K12OSN] Port 963

["Darryl L. Palmer, Jr." <DPalmer TootBee com>]

Not to beat this into the ground, but if you try to use a checksum to
verify that your files have not been changed, make sure you use something
that is hard to spoof like md5sum.

Darryl

Ben Nickell said:
> You can also try (as root)
>
> /sbin/fuser -v 963/tcp
>
> This should give you the name of the process using that port.
> This may also be modified by a rootkit, so if you suspect something's up
> verifying checksums would be a good idea.
>
> Running chkrootkit (after installing it, yum install chkrootkit or
> apt-get install chkrootkit) wouldn't be a bad idea either.