Box Cracked ( Was: thank's )

[Les Mikesell]

Manuel Arostegui Ramirez wrote:

>> hi, well...i suspect that my box is sort of cracked. I'd like to know if
>> anyone can identify anything odd/remarkable reading hte netstat -p output.
>> Thank you very much.
> 
> What does netstat -putan | grep -i listen show?
> What about /var/log/secure ?
> 

Note that if the box has been cracked with a typical rootkit, the 
netstat program (and ps, ls, etc.) will have been replaced with versions 
  that don't show what is really going on.

-- 
   Les Mikesell
    lesmikesell at gmail.com