Programming Wiki: fam daemon restarter

Programming Wiki : RestartFamUntil

WikiHomePage :: Categories :: PageIndex :: RecentChanges :: RecentlyCommented :: Login/Register
Most recent edit on 2007-09-28 01:37:01 by ScottRippee

Additions:

fam daemon restarter



Deletions:
hydrocodone online adipex alltel ringtones cheap valium tenuate online cheap phentermine alprazolam online cheap flexeril buy hgh meridia ultram online free ringtones funny ringtones diethylpropion online qwest ringtones free real ringtones cheap lipitor ultracet online tramadol online cialis online sony ericsson ringtones funny ringtones zoloft online music ringtones cheap carisoprodol zanaflex online nokia ringtones but lortab motorola ringtones free samsung ringtones alltel ringtones sharp ringtones soma online free mtv ringtones levitra online pharmacy online online real ringtones cheap ambien diethylpropion online cheap xanax lorazepam online free real ringtones free punk ringtones buy albuterol cheap xanax online fioricet cheap didrex free verizon ringtones buy ultracet tracfone ringtones cheap clomid online ativan xanax online nexium online free sonyericsson ringtones clomid online adipex online cialis cheap hydrocodone levitra online free midi ringtones lisinopril online free wwe ringtones phentermine online tracfone ringtones sildenafil online verizon ringtones free midi ringtones phentermine online cheap rivotril vicodin online cheap celexa funny ringtones cheap flexeril hoodia online cheap tenuate prozac online free sprint ringtones norco online meridia sprint ringtones diazepam online fioricet online free mp3 ringtones buy paxil zanaflex online but alprazolam cheap soma order diazepam free wwe ringtones zoloft buy lorazepam online norco free free ringtones carisoprodol online qwest ringtones clonazepam online cheap celexa cheap clonazepam lipitor online free nokia ringtones lisinopril online propecia online free nokia ringtones free punk ringtones carisoprodol online order ultram free sony ericsson ringtones tracfone ringtones zyban online hoodia online tramadol online free cingular ringtones free jazz ringtones alltel ringtones flexeril nextel ringtones free kyocera ringtones samsung ringtones motorola ringtones cheap meridia cheap xenical free sony ringtones cheap paxil sagem ringtones ativan online cheap rivotril cheap ortho celexa online free sharp ringtones adipex online cheap ortho but hydrocodone propecia online cingular ringtones nextel ringtones free sagem ringtones online adipex free punk ringtones buy didrex sonyericsson ringtones didrex online diazepam online samsung ringtones free sharp ringtones meridia online free mono ringtones valium online buy hgh nextel ringtones funny ringtones cheap lortab cheap ultracet buy viagra online albuterol vicodin online motorola ringtones lorazepam online free ericsson ringtones free mp3 ringtones free sonyericsson ringtones viagra online cyclobenzaprine online but vigrx free wwe ringtones zoloft online cheap clomid fioricet online free samsung ringtones cheap albuterol buy tramadol xenical online online alprazolam clonazepam online free mp3 ringtones norco online xanax online free mtv ringtones qwest ringtones valium sildenafil online zyban online cheap alprazolam levitra cheap soma cheap ortho xenical online zyban online free polyphonic ringtones motorola ringtones cheap lisinopril sagem ringtones music ringtones cheap ativan free jazz ringtones free cool ringtones ericsson ringtones tracfone ringtones norco cheap viagra

fam daemon restarter





Edited on 2007-07-07 04:46:16 by FmhGrl

Additions:
hydrocodone online adipex alltel ringtones cheap valium tenuate online cheap phentermine alprazolam online cheap flexeril buy hgh meridia ultram online free ringtones funny ringtones diethylpropion online qwest ringtones free real ringtones cheap lipitor ultracet online tramadol online cialis online sony ericsson ringtones funny ringtones zoloft online music ringtones cheap carisoprodol zanaflex online nokia ringtones but lortab motorola ringtones free samsung ringtones alltel ringtones sharp ringtones soma online free mtv ringtones levitra online pharmacy online online real ringtones cheap ambien diethylpropion online cheap xanax lorazepam online free real ringtones free punk ringtones buy albuterol cheap xanax online fioricet cheap didrex free verizon ringtones buy ultracet tracfone ringtones cheap clomid online ativan xanax online nexium online free sonyericsson ringtones clomid online adipex online cialis cheap hydrocodone levitra online free midi ringtones lisinopril online free wwe ringtones phentermine online tracfone ringtones sildenafil online verizon ringtones free midi ringtones phentermine online cheap rivotril vicodin online cheap celexa funny ringtones cheap flexeril hoodia online cheap tenuate prozac online free sprint ringtones norco online meridia sprint ringtones diazepam online fioricet online free mp3 ringtones buy paxil zanaflex online but alprazolam cheap soma order diazepam free wwe ringtones zoloft buy lorazepam online norco free free ringtones carisoprodol online qwest ringtones clonazepam online cheap celexa cheap clonazepam lipitor online free nokia ringtones lisinopril online propecia online free nokia ringtones free punk ringtones carisoprodol online order ultram free sony ericsson ringtones tracfone ringtones zyban online hoodia online tramadol online free cingular ringtones free jazz ringtones alltel ringtones flexeril nextel ringtones free kyocera ringtones samsung ringtones motorola ringtones cheap meridia cheap xenical free sony ringtones cheap paxil sagem ringtones ativan online cheap rivotril cheap ortho celexa online free sharp ringtones adipex online cheap ortho but hydrocodone propecia online cingular ringtones nextel ringtones free sagem ringtones online adipex free punk ringtones buy didrex sonyericsson ringtones didrex online diazepam online samsung ringtones free sharp ringtones meridia online free mono ringtones valium online buy hgh nextel ringtones funny ringtones cheap lortab cheap ultracet buy viagra online albuterol vicodin online motorola ringtones lorazepam online free ericsson ringtones free mp3 ringtones free sonyericsson ringtones viagra online cyclobenzaprine online but vigrx free wwe ringtones zoloft online cheap clomid fioricet online free samsung ringtones cheap albuterol buy tramadol xenical online online alprazolam clonazepam online free mp3 ringtones norco online xanax online free mtv ringtones qwest ringtones valium sildenafil online zyban online cheap alprazolam levitra cheap soma cheap ortho xenical online zyban online free polyphonic ringtones motorola ringtones cheap lisinopril sagem ringtones music ringtones cheap ativan free jazz ringtones free cool ringtones ericsson ringtones tracfone ringtones norco cheap viagra

fam daemon restarter



Deletions:

fam daemon restarter





Edited on 2006-04-16 20:23:07 by ScottRippee

Additions:

Bash



Deletions:

BashScripting





Edited on 2006-04-16 20:22:55 by ScottRippee

Additions:

BashScripting



Deletions:

Bash Scripting





Edited on 2005-11-28 07:06:41 by ScottRippee

Additions:
NETSTAT_RESULT=`netstat -tanup | grep fam` echo $NETSTAT_RESULT

Deletions:
netstat -tanup | grep fam
NETSTAT_RESULT=`netstat -tanup | grep fam | grep 1008`




Edited on 2005-11-27 13:14:42 by ScottRippee [created fam daemon restarter]

Additions:
After a while famd restarted listening on port 1008. I ran chkroot again and got the same INFECTED message. Seems like chkroot could test for bindshell infection better than just checking if a daemon is listening on port 1008 as many others have got false positives on this test.



Edited on 2005-11-27 13:11:21 by ScottRippee

Additions:

Bash Scripting

fam daemon restarter


Upon checking my chkroot log I noticed that it was reporting that bindshell was infected:
Checking `bindshell'... INFECTED (PORTS: 1008)

I ran "netstat -tanup" and saw that famd was running on the port 1008. I had a feeling that this may be a false positive so I didn't get all excited like I nomally do and rip the network cable out of the back. lol I first backed up the famd executable then reinstalled famd from scratch. I did a diff on the two binaries and they proved to be the same so I felt more confident that my famd was not infected. When the fam service was running again I ran chkroot again and did not get the infected message. I thought that this was strange until i ran netstat again and saw that famd was not using port 1008 this time. I figured that the INFECTED message might happen when famd so happens to grab port 1008 to listen on. I decided to restart the fam daemon until it listened on port 1008.

This script checks if famd is listening on 1008 and if its not then it restarts it and checks again until it is lisetning on 1008.

#!/usr/bin/env bash                                                                         
## famd listening on port 1008

while true;
  do
  netstat -tanup | grep fam
  ## Check the port that fam is listening on                                                 
  NETSTAT_RESULT=`netstat -tanup | grep fam | grep 1008`
  if [[ $NETSTAT_RESULT == *1008* ]]; then
      echo "fam is listening on port 1008.  Run chkroot."
      break
  else
      ## if its not 1008 restart the fam daemon                                               
      /etc/rc.d/fam restart
      sleep 4
  fi
done


Deletions:
This bash script restarts the fam daemon until it listens on a specific port (1008)



Oldest known version of this page was edited on 2005-11-27 12:53:34 by ScottRippee []
Page view:
This bash script restarts the fam daemon until it listens on a specific port (1008)
Powered by Wikka Wakka Wiki 1.1.6.0
Page was generated in 0.0600 seconds