Ubuntu
chkrootkit package

  1. Bug #629723
  2. Comment #0

Comment 0 for bug 629723

Revision history for this message
Thomas Ward (teward) wrote :

Binary package hint: chkrootkit

This program detects falsely an infection on port 6667. This is the case with an IRCD running on port 6667 being detected as bindshell.

This is a bug, but also could the documentation on false positives be amended to include the info about ircds also triggering false positives?