On Thursday 07 November 2002 11:57 am, Salane wrote: > is this a problem with chkrootkit or with nfs
Do an lsattr in (/usr)/(s)bin and check for funny attributes, just in case. One of the features of many rootkits is subverting tools like netstat. In fact, I discovered one the other day because netstat -tanp failed (the cracked version was too old to support -p). Cheers; Leon