on Wed, Apr 17, 2002, Tom Massey ([EMAIL PROTECTED]) wrote: > On Tue, Apr 23, 2002 at 02:31:05PM +0000, Rory Campbell-Lange wrote: > > There is a very small possibility that someone has intruded into our > > network. I would like to test my 3 woody machines for possible root > > kits. What is the best way of doing this? Should I check the md5sum of > > programs such as find, ps and ifconfig against the packaged versions? > > $ apt-cache show chkrootkit
...and if that turns up null, there's always: apt-get install rootkit http://lists.debian.org/debian-devel/2002/debian-devel-200203/msg02337.html ;-) -- Karsten M. Self <kmself@ix.netcom.com> http://kmself.home.netcom.com/ What Part of "Gestalt" don't you understand? A guide to GNU/Linux partitioning: http://kmself.home.netcom.com/Linux/FAQs/partition.html
pgp1Ak7bjLMFJ.pgp
Description: PGP signature
