On 2024-05-01 19:05:06 +0100, Richard Lewis wrote: > I agree that you should be able to filter out duplicate lines. And i think > this is possible with a custom filter.
Yes, but "sed" may not be the best tool for that. With sed, removing lines containing only the usual network managers is easier. > I dont think it should be the default - most chkrootkit users have a more > static network setup, If they have a static network setup, why hiding the interface name? Doing that makes the output more confusing, and the replacement of an interface by another one would not be detected. > and the alert shows something has changed. For laptops where > networking is more dynamic it's hard to design something that works > for everyone without also hiding information for other people. But are lines containing *only* the usual network managers suspicious? -- Vincent Lefèvre <vinc...@vinc17.net> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)
