Hey folks: Is this a valid response or false positive ? /etc/cron.daily/chkrootkit: eth0: PACKET SNIFFER(/sbin/dhclient[1102]) Thanks, I'm not subscribed so would appreciate a direct response. -- Regards Stephen +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Wagner's music is better than it sounds. -- Mark Twain +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++