[Dshield] strange bash history listing

Jason Brooks brooksje at longwood.edu
Thu Nov 10 18:51:54 GMT 2005

A quick google of 'sockstat' returned the following link first:


The command, as listed, seems to intend to show all listening INET 4
sockets, then looked for all bound to port 25.

-----Original Message-----
From: list-bounces at lists.dshield.org [mailto:list-bounces at lists.dshield.org]
On Behalf Of J Lake
Sent: Thursday, November 10, 2005 11:42 AM
To: General DShield Discussion List
Subject: Re: [Dshield] strange bash history listing

On Thursday 10 November 2005 08:44 am, Tony Nichols wrote:
> Found this on my mail server this morning:
> /usr/local/bin/cdcc 'info'
This might help with the cdcc command....


> sockstat -l4 | grep 25
> I log in via the lan and run freshclam -- just to make sure it 
> updated; however as I hit the up arrow (to show the last commands ran" 
> I found that listing above.
> I know I didn't run it... could it be part of the auto update?
> System is a SUSE 10 with postfix...

I don't think sockstat is included by default with SuSE 10.

Using .Net? Need to know more about .Net Security?

send all posts to list at lists.dshield.org To change your subscription options
(or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list

More information about the list mailing list