warnings is rkhunter(8) about ports usage

[Matthias Apitz]

Hello,

I run rkhunter from time to time and have warnings about the diff between
sockstat and netstat like this:

[11:33:31] Warning: Differences found between sockstat and netstat output:
[11:33:31]          Sockstat output (ports in use): 0 1124 22 25 514 587
[11:33:31]          Netstat output (ports in use): 22 25 514 587

the diff ports in sockstat are:

$ sockstat | fgrep ' 0 '
root     ipmon      695   0  dgram  -> /var/run/logpriv

$ sockstat | fgrep 1124
guru     ssh-agent  1125  3  stream /tmp/ssh-KldJtKCKwQMi/agent.1124

Why is rkhunter complaining about them?
Thx

	matthias
-- 
Sent from my FreeBSD netbook

Matthias Apitz               |  - No system with backdoors like Apple/Android
E-mail: guru at unixarea.de     |  - No HTML/RTF in E-mail
WWW: http://www.unixarea.de/ |  - No proprietary attachments
phone: +49-170-4527211       |  - Respect for open standards