I just installed chkrootkit. The first run reported as part of the normal output:
eth0: PACKET SNIFFER(/sbin/dhclient[1005]) Does this mean there is a sniffer on my system? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]