Hi Mez, > My chkrootkit log this morning is showing: > > Checking `sniffer'... > eth0 is PROMISC > eth0:0 is PROMISC > eth0:2 is PROMISC > eth0:3 is PROMISC > eth0:4 is PROMISC > eth0:5 is PROMISC > eth0:1 is PROMISC > > Is this anything to worry about? Or can anyone tell me what it means?
That normally indicates that a network sniffer is active on your machine and is monitoring the network traffic. Unless you manually launched "tcpdump" or a similar shell command to diagnose your network traffic this is indeed something to worry about. Did chkrootkit warn you about any modified binaries? -- With best regards, Michael Stauber [EMAIL PROTECTED] Unix/Linux Support Engineer _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
