Security Basics mailing list archives

Re: tiger message I don't understand


From: Bert Knabe <bert.knabe () lubbockonline com>
Date: Tue, 12 Feb 2008 09:39:35 -0600

It looks like an unknown (or unnamed) process is trying to use IPv6 for something. Are any applications or processes generating errors? If not, then whatever is listening is getting an acceptable result.

It also looks like whatever it is doing is something tagged as dangerous (hence the WARN), so turning off IPv6 might be a good suggestion. If nothing screams, the listener may be something you don't want running, anyway. If something does, you probably have found the source of your error. But you should probably make sure there's nothing critical running that requires IPv6. I don't know of anything that does, but there's a lot I don't know.


Bert Knabe
Technician
Lubbock Avalanche-Journal
806-766-2158


On Feb 11, 2008, at 6:25 PM, Glenn English wrote:


On Feb 11, 2008, at 3:27 PM, Dixon, Wayne wrote:

Do you mean Tiger as in Mac OS X 10.4?

I'm really sorry, Wayne, to have left out useful info. It's the tiger security scanner scripts from Texas A&M, running on Debian Etch.

To repeat the messages I don't understand and would like help decyphering:

# Checking listening processes
OLD: --WARN-- [lin003w] The process `' is listening on socket (udp6 on fe80 interface) is run by 7552. OLD: --WARN-- [lin003w] The process `' is listening on socket (udp6 on interface) is run by 6913. OLD: --WARN-- [lin003w] The process `' is listening on socket (udp6 on interface) is run by 7545. OLD: --WARN-- [lin003w] The process `' is listening on socket (udp6 on interface) is run by 7551. NEW: --WARN-- [lin003w] The process `' is listening on socket (udp6 on fe80 interface) is run by 7373. NEW: --WARN-- [lin003w] The process `' is listening on socket (udp6 on interface) is run by 24444. NEW: --WARN-- [lin003w] The process `' is listening on socket (udp6 on interface) is run by 6649. NEW: --WARN-- [lin003w] The process `' is listening on socket (udp6 on interface) is run by 7356. NEW: --WARN-- [lin003w] The process `' is listening on socket (udp6 on interface) is run by 7371.


--
Glenn English
ghe () slsware com





Current thread: