[Bug 602734] Re: ifpromisc reports PACKET SNIFFER for /usr/sbin/dhcpd3

2010-07-07 Thread Christian Reis
I was referring to http://bugs.debian.org/cgi- bin/bugreport.cgi?bug=525370 but now that I see it it's not exactly the same issue. So I think something is wrong in my cron.daily script, then, because I'm seeing this in my email notifications. Let me check. Okay, so if cron.daily is running its chk

[Bug 602734] Re: ifpromisc reports PACKET SNIFFER for /usr/sbin/dhcpd3

2010-07-07 Thread Marc Deslauriers
Thanks for reporting this. The README.FALSE-POSITIVES file does document that dhcp will come up as a false positive. Although chkrootkit does display dhcpd3, the cron.daily job in the chkrootkit package filters it out before sending the report. What version were you running before that makes thi