On Tue, Feb 14, 2006 at 02:46:48AM -0500, Stephen wrote: > Is this a valid response or false positive ? > > /etc/cron.daily/chkrootkit: > eth0: PACKET SNIFFER(/sbin/dhclient[1102])
False positive; it's because that program has your ethernet interface in promiscuous mode. For dhclient, this is completely normal, it needs to do this to function correctly. Cheers, Paul -- Paul Dwerryhouse | PGP Key ID: 0x6B91B584 ======================================================================== Installing Debian Sarge with software RAID: http://nepotismia.com/debian/raidinstall/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
