On Tue, 2009-12-22 at 18:27 -0500, Dimitri Yioulos wrote: > > [14:27:21] Performing checks on the network > interfaces > [14:27:21] Info: Starting test name 'promisc' > [14:27:21] Info: Network interfaces allowed to be > in promiscuous mode: eth0 > [14:27:21] Checking for promiscuous interfaces > [ Warning ] > [14:27:21] Warning: Possible promiscuous > interfaces: > [14:27:22] 'ifconfig' command output: > [14:27:22] 'ip' command output: eth0 > Sorry, but it's a bug.
You can do a couple of things to get around it: 1) disable the 'promisc' test; 2) Add 'IP_CMD=DISABLED' to your rkhunter.conf.local file. (I would recommend doing this, as it means the promisc test will still run and detect any other promiscuous interfaces). John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users