RKHunter problems?

BerArt · Unread post by **BerArt** » Mon Apr 14, 2008 2:07 am

I have 4 servers running with ASL, after the last "Big" update to 1.9.8-11 i receive this RKHunter mail from 2 server, and no mail from the other 2 servers?

--------------------- Start Rootkit Hunter Update --------------------- [ Rootkit Hunter version 1.3.2 ]

Checking rkhunter data files...
Checking file mirrors.dat [ No update ]
Checking file programs_bad.dat [ No update ]
Checking file backdoorports.dat [ No update ]
Checking file suspscan.dat [ No update ]
Checking file i18n/cn [ No update ]
Checking file i18n/en [ No update ]
Checking file i18n/zh [ No update ]
Checking file i18n/zh.utf8 [ No update ]

---------------------- Start Rootkit Hunter Scan ----------------------

----------------------- End Rootkit Hunter Scan -----------------------

All 4 servers are the same, same OS same Plesk and same ASL. Why do I not get mail from the other two servers, and is this the normal output mail from RKHunter, seems like noting is scanned? Please advice...

Unread post by **scott** » Mon Apr 14, 2008 11:56 am

You might want to open a bug in the support portal for it. Its tough to say without more info, we'll probably need the /etc/asl/configs from all the servers to compare them.

BerArt · Unread post by **BerArt** » Mon Apr 14, 2008 12:07 pm

Ok done! Thx!

BerArt · Unread post by **BerArt** » Sat Apr 19, 2008 8:50 am

I sent a mail to support several day's ago about the problems with RKHunter but still no answer? I still have problems on all 4 ASL servers, I sended also the .conf of all 4 machines.

Unread post by **scott** » Sat Apr 19, 2008 1:15 pm

This is being tracked under Bug ID #95: rkhunter cron SCRIPTDIR error

It is presently being worked on.

BerArt · Unread post by **BerArt** » Sat Apr 19, 2008 1:32 pm

Thx!

sorry for my impatience.

BerArt · Unread post by **BerArt** » Wed May 07, 2008 3:29 am

I saw the bugfixes on ASL 2.0 RC2 but still not #95 still working on this?

Unread post by **scott** » Wed May 07, 2008 7:55 am

Yeah, its still being investigated.

BerArt · Unread post by **BerArt** » Wed May 07, 2008 1:20 pm

Thx!

BerArt · Unread post by **BerArt** » Fri May 16, 2008 3:27 am

I am a bit afraid to ask, and do not want to push, but .......

Unread post by **scott** » Fri May 16, 2008 8:30 am

Still open, I think its something in cron. It certainly doesnt happen outside of it.

BerArt · Unread post by **BerArt** » Wed May 28, 2008 4:08 am

Any progress on this bug? RKHunter is doing nothing for a long time now?

Unread post by **scott** » Wed May 28, 2008 6:43 am

Its still working, that is just a cosmetic message.

BerArt · Unread post by **BerArt** » Wed May 28, 2008 6:46 am

Ah, ok I did not know that, Thx! I won't bother you anymore than

if i is working it's ok by me...