[rkhunter] libice.log uses port 47107

[rkhunter] libice.log uses port 47107 - Printable Version

+- ispCP - Board - Support (http://www.isp-control.net/forum)
+-- Forum: ispCP Omega Support Area (/forum-30.html)
+--- Forum: Usage (/forum-34.html)
+--- Thread: [rkhunter] libice.log uses port 47107 (/thread-8357.html)

[rkhunter] libice.log uses port 47107 - krzd - 11-07-2009 08:46 PM

Hello,
i have got following mail from rkhunter:

Code:

Warning: Network TCP port 47107 is being used by /usr/lib/libice.log. Possible

rootkit: T0rn

         Use the 'lsof -i' or 'netstat -an' command to check this.

Netstat says, that the port is beeing used:

Code:

tcp        1      0 127.0.0.1:47107         127.0.0.1:80            CLOSE_WAIT

But the file /usr/lib/libice.log does not exist, only /usr/lib/libICE.so.6

What to do? Thanks