Results 1 to 3 of 3

Thread: Beginner needs help with watchdog / rkhunter

  1. #1
    zdev NNTP User

    Default Beginner needs help with watchdog / rkhunter

    I have Watchdog installed on Linux 2.6.27.9 with Plesk 9.0.1. where Watchdog sends me a report every night. From time to time I get a hint for a security report and this report looks like this:

    --------------- Report Start ------------------- [ Rootkit Hunter version 1.3.4 ]

    Checking rkhunter data files...
    Checking file mirrors.dat [ No update ]
    Checking file programs_bad.dat [ No update ]
    Checking file backdoorports.dat [ No update ]
    Checking file suspscan.dat [ No update ]
    Checking file i18n/cn [ No update ]
    Checking file i18n/de [ No update ]
    Checking file i18n/en [ No update ]
    Checking file i18n/zh [ No update ]
    Checking file i18n/zh.utf8 [ No update ]
    Invalid option specified: --report-mode
    --------------- Report End -------------------

    Now I read, that the option "report-mode" is deprecated, so I think, that it should be removed to solve the problem. But I have no idea where to look, can someone give me a hint?

    TIA, Detlef

  2. #2
    Join Date
    Jan 2008
    Location
    N40 44.977 W073 59.356
    Posts
    1,170

    Default Re: Beginner needs help with watchdog / rkhunter

    On 6/11/09 12:16 PM, zdev wrote:
    > I have Watchdog installed on Linux 2.6.27.9 with Plesk 9.0.1. where
    > Watchdog sends me a report every night. From time to time I get a hint
    > for a security report and this report looks like this:
    >
    > --------------- Report Start ------------------- [ Rootkit Hunter
    > version 1.3.4 ]
    >
    > Checking rkhunter data files...
    > Checking file mirrors.dat [ No update ]
    > Checking file programs_bad.dat [ No update ]
    > Checking file backdoorports.dat [ No update ]
    > Checking file suspscan.dat [ No update ]
    > Checking file i18n/cn [ No update ]
    > Checking file i18n/de [ No update ]
    > Checking file i18n/en [ No update ]
    > Checking file i18n/zh [ No update ]
    > Checking file i18n/zh.utf8 [ No update ]
    > Invalid option specified: --report-mode
    > --------------- Report End -------------------
    >
    > Now I read, that the option "report-mode" is deprecated, so I think,
    > that it should be removed to solve the problem. But I have no idea where
    > to look, can someone give me a hint?
    >
    > TIA, Detlef
    >
    >

    Check and see if there is a cron job that runs this report and if so
    remove that option from there.

  3. #3
    zdev NNTP User

    Default Re: Beginner needs help with watchdog / rkhunter

    Yes, this seems to be a cronjob. In the Plesk Control-Panel I have the setting, that the security check shall be done one a day. I found that before ... but - SORRY - I do not know where the settings of the cron-job are ...
    I mean, I assume, that there is something like a batch routine, that calls the rkhunter with the old parameters. But in Plesk I do not see, where those things are stored.

    TIA, Detlef

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •