Re: Re: Chkrootkit
It may be slightly unpure, but what's wrong with:
chkrootkit -q | grep -vE '(eth[0-9]+:*[0-9]* *is not
That would at least avoid triggering the mail from the
--- Kay-Michael Voit <firstname.lastname@example.org> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: MD5
> DCE> for (1) I guess you can put the binaries in a
> read-only medium and run
> DCE> them from there, like a CD-ROM or a
> write-protected floppy/flash-medium.
> Well, the attacker could just stop the cronjob...
> but great idea
> My server is a remote rootserver, so this no
> solution for me...
> DCE> I am not sure I got what you mean in (2)
> I mean that the quiet output is not quiet. I would
> exspect that there
> is only output if there a problem, but it still says
> that eth0 is in
> promisc mode.
> If I understand promisc mode, this is not a problem,
> so I can't fix
> it, so there will always be output (which I dont
> want, because cron
> sends a mail then)
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6
> -----END PGP SIGNATURE-----
> To UNSUBSCRIBE, email to
> with a subject of "unsubscribe". Trouble? Contact