check for root kit

[Rory Campbell-Lange <rory@campbell-lange.net>]

There is a very small possibility that someone has intruded into our
network. I would like to test my 3 woody machines for possible root
kits. What is the best way of doing this? Should I check the md5sum of
programs such as find, ps and ifconfig against the packaged versions?

Also, is there any way of checking for a kernel module type root kit?

Cheers
Rory
-- 
Rory Campbell-Lange 
<rory@campbell-lange.net>
<www.campbell-lange.net>


-- 
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org