I just had the same experience as Lionel on a machine running sarge, with chkrootkit 0.46a-2bpo1 (from backports.org).
The cron job complained about 1 hidden process, however running 'chkproc -v -v -p 3' by hand doesn't reveal anything. Without '-p 3' it complains about mysqld, java, imapproxyd, named and beam (from erlang) being hidden. Having checked all of them it seems they are just threads of other processes that chkrootkit knows to ignore when '-p 3' is specified. Perhaps we're just seeing the result of a race to read a process' information from /proc before it exits? -- Sam Morris http://robots.org.uk/ PGP key id 1024D/5EA01078 3412 EA18 1277 354B 991B C869 B219 7FDB 5EA0 1078 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
