[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Tiger reports possible Slapper worm, but chkrootkit disagrees.



I have Tiger Audit set up on my Sarge system.  My last two reports say this:

# Running chkrootkit (/usr/sbin/chkrootkit) to perform further checks...
OLD: --WARN-- [rootkit004f] Chkrootkit has detected a possible rootkit installation
OLD: Warning: Possible Slapper Worm installed

However, when I run chkrootkit itself, it says:

Checking `slapper'... not infected

So, is this a bug in Tiger?  It isn't listed at bugs.debian.org.
--      
Carl Fink             carl@fink.to
Jabootu's Minister of Proofreading
http://www.jabootu.com



Reply to: