Still unsolved: Tripwire reports /proc/kcore has increased in size
"Chris de Vidal" <[email protected]>
| Newsgroups | gmane.linux.admin.managers |
|---|---|
| Message-ID | <[email protected]> |
Drew said: > I found a recent message of yours in the linuxmanagers list archive > through google this morning because I was having the same problem: When > checking today's tripwire reports, I discovered that /proc/kcore had > changed although I hadn't added ram, rebooted or adjusted the swapfile. You mean this message: http://www.linuxmanagers.org/pipermail/linuxmanagers/2003-November/001380.html > I really wasn't able to find any additional information as to why it > would change, so I figured I'd ask -- did you ever find an answer to > your question? Never got a significant answer, although someone suggested if I did have a root kit I'd see other unusual activity, and I've seen none. Does anyone on the linuxmanagers list know why I might have seen an increase in this file? I'd flushed the firewall the day before I sent the first email and kcore is still the same size. /dev/idal _______________________________________________ LinuxManagers mailing list - http://www.linuxmanagers.org submissions: LinuxManagers-35TzE1X9F6582KRnZfj+bdi2O/[email protected] subscribe/unsubscribe: http://www.linuxmanagers.org/mailman/listinfo/linuxmanagers