If something like that is listening, then you may have a problem :)īut if you can't find it this way, it doesn't mean your computer is safe, because the person may have installed a rootkit that hijacks the informations read by netstat. The most widely used remote desktop app is VNC I guess, which should listen on port 5900 by default. You can check whether there is a remote desktop app listening on your computer using netstat (netstat -ltp or netstat -ltpn if you want netstat to resolve hosts and ports). You can be as diligent as you want, and take it to whatever level you want. Just a few of the quick things you can do. I would do this FIRST before anything else. Google around and see if other users of your fedora version/level are having similar issues with the mouse config you have. Then go set up a clean instance in a VM and bring it to the same run level as the one yours is and capture the same hash base. ( )īoot your machine with a clean fedora livecd and gather md5 hashes of all the key binaries. You can do this very easily by grabbing a Snorby appliance and setting it up on another machine (its a VM) on your subnet and listening to your traffic. If you are wanting to listen to network traffic coming from/to your machine you will need to do it from an independent machine. If a rootkit has been installed on your machine, understand any utility (including netstat) could be subverted, so you can not test what is being reported. So what you are witnessing could simply be a kernel change that is flaky.įinally, the advice provide above is good, however some pointers and thoughts: Lately, for instance on my Ubuntu system, I have been finding for some strange reason, when I connect USB drives (clean ones I know for a fact) to my machine, my wireless mouse starts doing a very similar behavior - it becomes erratic. Secondly, having installed linux systems (fedora being one of them) on a variety of hardware configurations, you can sometimes get this behavior just from the system. As you have proposed it, your question is like asking - my house might have been broken into, how can I tell while I am on vacation in africa. First off, you will need to provide more information in your question to help this audience narrow down and assist you.
0 Comments
Leave a Reply. |