Pugwash
September 10th, 2007, 08:55 AM
Hi,
I've noticed some wierd stuff from rkhunter and chkrootkit. In /var/mail I get the follwing message from rkhunter:
Scanning for packet capturing applications... [ Warning! ]
Warning! Found packet capturing application. Please check the logfile.
Scanning for hidden files... [ Warning! ]
-----------------------------------------------------------------
Found warnings:
[07:38:24] Checking for packet capturing applications... Warning
[07:38:25] Warning! Process /sbin/dhclient3 (3847) listening
In rkhunter.log I get this
[07:38:24] Checking for packet capturing applications... Warning
[07:38:25] Warning! Process /sbin/dhclient3 (3847) listening
I also get this from chkrootkit:
Checking `sniffer'... lo: not promisc and no packet sniffer sockets
eth0: PACKET SNIFFER(/sbin/dhclient3[3847])
I'm a bit worried here, is this normal?
I've noticed some wierd stuff from rkhunter and chkrootkit. In /var/mail I get the follwing message from rkhunter:
Scanning for packet capturing applications... [ Warning! ]
Warning! Found packet capturing application. Please check the logfile.
Scanning for hidden files... [ Warning! ]
-----------------------------------------------------------------
Found warnings:
[07:38:24] Checking for packet capturing applications... Warning
[07:38:25] Warning! Process /sbin/dhclient3 (3847) listening
In rkhunter.log I get this
[07:38:24] Checking for packet capturing applications... Warning
[07:38:25] Warning! Process /sbin/dhclient3 (3847) listening
I also get this from chkrootkit:
Checking `sniffer'... lo: not promisc and no packet sniffer sockets
eth0: PACKET SNIFFER(/sbin/dhclient3[3847])
I'm a bit worried here, is this normal?