LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-21-2021, 11:17 PM   #1
newb01
LQ Newbie
 
Registered: Apr 2021
Posts: 2

Rep: Reputation: Disabled
Strange rkhunter daily email reports


Hello,

I have having trouble isolating what is causing my daily email of rkhunter report to only contain gibberish. The email has 32 lines that look like random characters. eg

ICAgICBbIE5vIHVwZGF0ZSBdCiAgQ2hlY2tpbmcgZmlsZSBiYWNrZG9vcnBvcnRzLmRhdCAg
ICAgICAgICAgICAgICBbIE5vIHVwZGF0ZSBdCiAgQ2hlY2tpbmcgZmlsZSBpMThuL2RlICAg


On my server, the rkhunter logs look ok. eg rkhunter -C

[04:06:55] Running Rootkit Hunter version 1.4.6 on web1
[04:06:55]
[04:06:55] Info: Start date is Thu Apr 22 04:06:55 UTC 2021
[04:06:55]
[04:06:55] Checking configuration file and command-line options...
[04:06:55] Info: Detected operating system is 'Linux'
[04:06:55] Info: Found O/S name: CentOS Linux release 7.9.2009 (Core)
.
.
. . (cut many lines) . .
.

[04:10:24] System checks summary
[04:10:24] =====================
[04:10:24]
[04:10:24] File properties checks...
[04:10:24] Files checked: 134
[04:10:24] Suspect files: 0
[04:10:24]
[04:10:24] Rootkit checks...
[04:10:24] Rootkits checked : 500
[04:10:24] Possible rootkits: 0
[04:10:24]
[04:10:24] Applications checks...
[04:10:24] All checks skipped


Any input is greatly appreciated.
Thankyou.
 
Old 05-05-2021, 11:24 PM   #2
newb01
LQ Newbie
 
Registered: Apr 2021
Posts: 2

Original Poster
Rep: Reputation: Disabled
For anyone experiencing the same issue.

The solution was to use a different email viewer. eg Thunderbird

Thunderbird does not display the report in the email body, it offers it as an attached text file.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Strange rkhunter reports -- Yet another "has my machine been compromised" question... cincin Linux - Security 5 07-25-2012 04:21 AM
rkhunter scan: 1 Rootkit & 6 Possible Suspect Files /var/log/rkhunter.log included Mollusc Linux - Security 10 09-29-2011 08:43 AM
/var/log/rkhunter.log - rkhunter's (rootkit detection) logfile ahartman Linux - Security 1 07-04-2009 05:28 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:28 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration