Page 1 of 1

RKHunter problems?

Posted: Mon Apr 14, 2008 2:07 am
by BerArt
I have 4 servers running with ASL, after the last "Big" update to 1.9.8-11 i receive this RKHunter mail from 2 server, and no mail from the other 2 servers?

--------------------- Start Rootkit Hunter Update --------------------- [ Rootkit Hunter version 1.3.2 ]

Checking rkhunter data files...
Checking file mirrors.dat [ No update ]
Checking file programs_bad.dat [ No update ]
Checking file backdoorports.dat [ No update ]
Checking file suspscan.dat [ No update ]
Checking file i18n/cn [ No update ]
Checking file i18n/en [ No update ]
Checking file i18n/zh [ No update ]
Checking file i18n/zh.utf8 [ No update ]

---------------------- Start Rootkit Hunter Scan ----------------------

----------------------- End Rootkit Hunter Scan -----------------------

All 4 servers are the same, same OS same Plesk and same ASL. Why do I not get mail from the other two servers, and is this the normal output mail from RKHunter, seems like noting is scanned? Please advice...

Posted: Mon Apr 14, 2008 11:56 am
by scott
You might want to open a bug in the support portal for it. Its tough to say without more info, we'll probably need the /etc/asl/configs from all the servers to compare them.

Posted: Mon Apr 14, 2008 12:07 pm
by BerArt
Ok done! Thx! :)

Posted: Sat Apr 19, 2008 8:50 am
by BerArt
I sent a mail to support several day's ago about the problems with RKHunter but still no answer? I still have problems on all 4 ASL servers, I sended also the .conf of all 4 machines. :?:

Posted: Sat Apr 19, 2008 1:15 pm
by scott
This is being tracked under Bug ID #95: rkhunter cron SCRIPTDIR error

It is presently being worked on.

Posted: Sat Apr 19, 2008 1:32 pm
by BerArt
Thx! :) sorry for my impatience.

Posted: Wed May 07, 2008 3:29 am
by BerArt
I saw the bugfixes on ASL 2.0 RC2 but still not #95 still working on this?

Posted: Wed May 07, 2008 7:55 am
by scott
Yeah, its still being investigated.

Posted: Wed May 07, 2008 1:20 pm
by BerArt
Thx! :)

Posted: Fri May 16, 2008 3:27 am
by BerArt
I am a bit afraid to ask, and do not want to push, but ....... :)

Posted: Fri May 16, 2008 8:30 am
by scott
Still open, I think its something in cron. It certainly doesnt happen outside of it.

Posted: Wed May 28, 2008 4:08 am
by BerArt
Any progress on this bug? RKHunter is doing nothing for a long time now?

Posted: Wed May 28, 2008 6:43 am
by scott
Its still working, that is just a cosmetic message.

Posted: Wed May 28, 2008 6:46 am
by BerArt
Ah, ok I did not know that, Thx! I won't bother you anymore than :) if i is working it's ok by me...