[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: chkrootkit sniffers

> It remains strange because normally, lo is a non-broadcast interface.

Maybe it would help to know how Henri has his network configured. Mine
is configured with ifupdown, /etc/network/interfaces looks like this:

auto lo eth0
iface lo inet loopback
iface eth0 inet dhcp

and chkrootkit (version 0.46a) gives me

eth0: PF_PACKET(/sbin/dhclient, /usr/sbin/arpwatch)

lo is not mentioned.


Reply to: