1

Tripwire reported 172 files added to various sub-folders at "/proc/sys/net/ipv4" and "/proc/sys/net/ipv6".

How can i investigate this?

I'm running an Ubuntu 14 vps.

Paulo Perez
  • 19
  • 1

1 Answers1

3

Ignore them and tell tripwire to ignore /proc and /sys

Cameron Kerr
  • 3,919
  • 18
  • 24
  • 1
    Thank you for replying. Your answer is in line with other info found on the web. It seems it can be safely ignored. I wonder why this only occurred now, several months after having tripwire monitoring the system. – Paulo Perez May 08 '15 at 12:20
  • Possibly a kernel module got loaded which added some virtual files there? – Cameron Kerr May 08 '15 at 19:59