[WBEL-users] ROOTKIT checking software

[Johnny Hughes]

On Thu, 2004-11-11 at 10:53 +0000, Denis Croombs wrote:
> I have just taken over admin for approx 20 Linux systems (RH9.0) and need to 
> check that they have not been rootkit'd (for my own piece of mind) anybody 
> had experience of good toolkits for finding out of a system has been 
> compromised ?
> 
> That is before I prepare a plan to change them to Whitebox over the coming 
> weeks/months.
> 
> Thanks
> 
> Denis 

I use chkrootkit ... you can get a RH9 version here:

http://dag.wieers.com/packages/chkrootkit/


-- 
Johnny Hughes
<http://www.HughesJR.com/>