#1 2016-06-04 15:42:42

CooKiECruNChEr43

Member

Registered: 2015-10-17

Posts: 86

Problems with output of command line: nmap and rkhunter

My computer is going overdrive every time it is turned on. First I thought it was just Flash. But it does it too when I am not logged in.
I started searching and I found this:

sudo nmap -sS -O 127.0.0.1
PORT   STATE SERVICE
22/tcp	open 	ssh
25/tcp 	open	smtp
631/tcp open 	ipp
8200/tcp open 	trivnet1

Problem is that I don't exactly know what I am doing. I know that with the nmap command I scan for the open ports. Smtp is something I understand. But I didn't and I don't understand the rest.

I did another scan. This time with rkhunter:

emile@debian1:~$ sudo rkhunter -c --rwo
Warning: The SSH and rkhunter configuration options should be the same:
         SSH configuration option 'PermitRootLogin': without-password
         Rkhunter configuration option 'ALLOW_SSH_ROOT_USER': no
Warning: Suspicious file types found in /dev:
         /dev/shm/pulse-shm-1050293449: data
Warning: Hidden directory found: /etc/.java

I have enough common sense to make use of the command line but not enough knowledge to make sense of the output. I hope the community can help.

CooKiECruNChEr43

Member

Registered: 2015-10-17

Posts: 86

Re: Problems with output of command line: nmap and rkhunter

I made another scan. This time with vmstat:

vmstat -s
      1543780 K total memory
      1160172 K used memory
       722072 K active memory
       389652 K inactive memory
       383608 K free memory
        61696 K buffer memory
       525028 K swap cache
      1632252 K total swap
            0 K used swap
      1632252 K free swap
        37778 non-nice user cpu ticks
            2 nice user cpu ticks
         6454 system cpu ticks
       143336 idle cpu ticks
         8459 IO-wait cpu ticks
            0 IRQ cpu ticks
           64 softirq cpu ticks
            0 stolen cpu ticks
       457518 pages paged in
       104428 pages paged out
            0 pages swapped in
            0 pages swapped out
       520770 interrupts
      2211901 CPU context switches
   1465053350 boot time
         2082 forks

If someone can take a look at these outputs and can point out if there is something really wrong, I would be much obliged.

Last edited by CooKiECruNChEr43 (2016-06-04 16:10:11)

nobody

The Great

Registered: 2015-08-10

Posts: 3,655

Re: Problems with output of command line: nmap and rkhunter

What? Use a system monitor like htop to pinpoint which processes/tasks consume much CPU:

sudo apt-get install htop
sudo htop # as root to see everything

In htop, press F5+select to sort processes by CPU cost.

damo

....moderator....

Registered: 2015-08-20

Posts: 6,734

Re: Problems with output of command line: nmap and rkhunter

^ 'htop' ships with BL, BTW. It is in the main menu: "Menu -> Accessories -> Task Manager(htop)"

---

Be Excellent to Each Other...
The Bunsenlabs Lithium Desktop » Here
FORUM RULES and posting guidelines «» Help page for forum post formatting
Artwork on DeviantArt  «» BunsenLabs on DeviantArt

CooKiECruNChEr43

Member

Registered: 2015-10-17

Posts: 86

Re: Problems with output of command line: nmap and rkhunter

Ah, thank you.

martix

Kim Jong-un Stunt Double

Registered: 2016-02-19

Posts: 1,267

Re: Problems with output of command line: nmap and rkhunter

@CooKiECruNChEr43  You can also configure conky in order to show the processes which consume the most cpu resources or ram.

"rkhunter --update"  does not seem to finish on my machine. It starts, but stops at "Checking rkhunter data files".

I'm still wondering: Does
rkhunter --update
work on #bÍ? I have the version 1.4.2. Could someone maybe mention if the update above works?

Last edited by martix (2016-06-16 12:41:30)

martix

Kim Jong-un Stunt Double

Registered: 2016-02-19

Posts: 1,267

Re: Problems with output of command line: nmap and rkhunter

Anyone?

Last edited by martix (2016-06-16 12:44:08)

m1rr0r5h4d35

Member

Registered: 2017-01-08

Posts: 67

Re: Problems with output of command line: nmap and rkhunter

rkhunter update fix

Therefore, all I needed to do is to replace the following entries in the /etc/rkhunter.conf file

Old value    New value
UPDATE_MIRRORS=0    UPDATE_MIRRORS=1
MIRRORS_MODE=1            MIRRORS_MODE=0
WEB_CMD="/bin/false"    WEB_CMD=""

---

"A graphic representation of data abstracted from the banks of every computer in the human system. Unthinkable complexity. Lines of light ranged in the nonspace of the mind, clusters and constellations of data. Like city lights, receding."

- William Gibson