On Tue, Apr 23, 2002 at 02:31:05PM +0000, Rory Campbell-Lange wrote: > There is a very small possibility that someone has intruded into our > network. I would like to test my 3 woody machines for possible root > kits. What is the best way of doing this? Should I check the md5sum of > programs such as find, ps and ifconfig against the packaged versions?
$ apt-cache show chkrootkit Description: Checks for signs of rootkits on the local system chkrootkit identifies whether the target computer is infected with a rootkit. May get you started. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
