title: false positives in rkhunter with hidden ports
body: <p>We got rkhunter checking our systems and are running the full check, except deleted_files and suspscan. So the network check is running too. </p>
  
  <p>This network check searches for hidden ports. So ports which are found by unhide-tcp but do not appear in netstat.</p>
  
  <p>We have occasionally a warning message, which says a hidden port was found. But when I check this port manually with telnet or rerun the check with unhide and rkhunter, this port never appears to be open. The ports are allways in a range above 1200. </p>
  
  <p>This is how the warning looks: </p>
  
  <pre><code>Warning: Hidden ports found:
       Port number: TCP:12645
  </code></pre>
  
  <p>I suspect the cause in a race condition somewhere in "unhide". </p>
  
  <ul>
  <li>Does anyone has experienced the same behavior? </li>
  <li>How can I avoid this "false positives" ?</li>
  </ul>