Gentoo Archives: gentoo-user

From: "J. Roeleveld" <joost@××××××××.org>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] [O/T] netstat security puzzle
Date: Sun, 18 Dec 2016 08:09:18
Message-Id: 49059EA9-F995-445D-B404-C34CAAD380A0@antarean.org
In Reply to: Re: [gentoo-user] [O/T] netstat security puzzle by Mick
1 On December 18, 2016 8:26:40 AM GMT+01:00, Mick <michaelkintzios@×××××.com> wrote:
2 >On Friday 16 Dec 2016 19:19:11 Poison BL. wrote:
3 >> On Fri, Dec 16, 2016 at 7:14 PM, Mick <michaelkintzios@×××××.com>
4 >wrote:
5 >> > I am looking at a Mint 18 installation and noticed when running
6 >netstat
7 >> > that
8 >> > all tcp connections are showing not the PC name, but
9 >"Knoppix":<port>.
10 >> >
11 >> > What might be the cause of this? The installation was performed
12 >using a
13 >> > Mint
14 >> > LiveCD iso.
15 >> > --
16 >> > Regards,
17 >> > Mick
18 >>
19 >> My first check would be /etc/hosts for an entry there. That, or
20 >lazily
21 >> grepping all of /etc for Knoppix.
22 >>
23 >> It is strange that it's not using either the hostname as given during
24 >> setup, or an auto-generated potentially unique one, wherever it's
25 >pulling
26 >> that from.
27 >
28 >I've grep-ped the whole of /etc, no mention of "Knoppix" there.
29 >
30 >I've also looked in /var/lib/NetworkManager/dhclient-enp6s8.conf to see
31 >what
32 >hostname NetworkManager sends to dhclient. No trace of "Knoppix" in
33 >there
34 >either.
35 >
36 >What else could it be creating or overriding a Local Address with one
37 >called
38 >"Knoppix", rather than what was set at installation time?
39
40 There is a hostname option in the kernel config. Maybe that is used somewhere?
41
42 # zgrep -i knoppix /proc/config.gz
43
44 What does ' hostname ' return?
45
46 --
47 Joost
48 --
49 Sent from my Android device with K-9 Mail. Please excuse my brevity.

Replies

Subject Author
Re: [gentoo-user] [O/T] netstat security puzzle Mick <michaelkintzios@×××××.com>