I have just taken over admin for approx 20 Linux systems (RH9.0) and need to check that they have not been rootkit'd (for my own piece of mind) anybody had experience of good toolkits for finding out of a system has been compromised ? That is before I prepare a plan to change them to Whitebox over the coming weeks/months. Thanks Denis