Share your knowledge at the LQ Wiki.
Go Back > Forums > Linux Forums > Linux - Newbie
User Name
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!


  Search this Thread
Old 04-20-2006, 01:18 PM   #1
Registered: Aug 2005
Location: Finland
Distribution: Gentoo 2006.0, Debian 3.1r0
Posts: 60

Rep: Reputation: 15

Do I have a rootkit installed?
In the end of the chkrootkit test it searches the sniffer. The output is:
eth0: PF_PACKET(/sbin/dhcpcd)

I think that is just the DHCP Client running? Or have I been hacked? At least I shouldnt be, because i have no servers (even ssh) running. I have a hardware firewall in my modem.
Old 04-20-2006, 03:36 PM   #2
Registered: Aug 2005
Location: Lancashire (United Kingdom)
Distribution: Debian Etch, on 686 machine.
Posts: 509

Rep: Reputation: 31
i have that as well and this is a fresh install i did yesterday and i dont have ssh running or anything either so im guessing what you said is right
Old 04-20-2006, 04:45 PM   #3
Registered: Apr 2006
Location: Pittsburgh
Distribution: Debian Sid AMD64
Posts: 296

Rep: Reputation: 30
Right, that is the DHCP client running. It does "interesting" things to your network interface while running, which can look a lot like a sniffer. Nothing to worry about.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
when I ./chkrootkit it says .... chemichael Fedora 2 08-18-2005 11:48 PM
chkrootkit ? jmanjeff Linux - Security 2 05-31-2005 11:15 PM
chkrootkit-0.45 aaru_ali Mandriva 1 04-25-2005 02:21 AM
chkrootkit on MDK 9.1 ? WannaLearnLinux Linux - Newbie 10 04-01-2004 04:39 AM
chkrootkit concern computergeek84 Linux - Security 14 01-28-2004 08:02 PM > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 01:58 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration