PDA

View Full Version : [ubuntu] chkrootkit


matt1987
April 30th, 2009, 02:42 AM
hello i just ran chkrootkit for the first time on 9.04 and found something interesting in the log...

Checking `sniffer'... lo: not promisc and no packet sniffer sockets
wlan0: PACKET SNIFFER(/sbin/wpa_supplicant[2880], /sbin/dhclient3[3593])
Checking `w55808'... not infected
Checking `wted'... chkwtmp: nothing deleted
Checking `scalper'... not infected
Checking `slapper'... not infected

does this mean i have a sniffer on my wireless? and if so what can i do about it? thanks!

brian_p
April 30th, 2009, 03:39 AM
does this mean i have a sniffer on my wireless? and if so what can i do about it? thanks!

Definitely not. But it does mean you have installed a useless bit of software.

Google: "chkrootkit PACKET SNIFFER".

matt1987
April 30th, 2009, 09:41 PM
Definitely not. But it does mean you have installed a useless bit of software.

Google: "chkrootkit PACKET SNIFFER".

ok thanks!! i was getting worried for a sec heh.

HermanAB
May 1st, 2009, 01:16 AM
Hmm, it seems that large numbers of Ubuntu users play with chrootkit. Why, I dunno. It doesn't actually work. It may have been useful many years ago, but not anymore.

Anyhoo, I have been using UNIX systems since about 1985 and I still haven't encountered a root kit that I haven't installed myself...