Re: chkrootkit response
On Tue, Feb 14, 2006 at 02:46:48AM -0500, Stephen wrote:
> Is this a valid response or false positive ?
>
> /etc/cron.daily/chkrootkit:
> eth0: PACKET SNIFFER(/sbin/dhclient[1102])
False positive; it's because that program has your ethernet interface in
promiscuous mode. For dhclient, this is completely normal, it needs to
do this to function correctly.
Cheers,
Paul
--
Paul Dwerryhouse | PGP Key ID: 0x6B91B584
========================================================================
Installing Debian Sarge with software RAID:
http://nepotismia.com/debian/raidinstall/
Reply to: