Hi,

Today I received the following message in my mail:

Output

can't exec ./strings-static,
/usr/lib/perl5/5.6.0/i386-linux/.packlist /usr/lib/perl5/5.6.0/i386-linux/auto/Mail/SpamAssassin/.packlist /usr/lib/perl5/site_perl/5.6.0/i386-linux/auto/Image/Magick/.packlist

not tested: can't exec ./ifpromisc
not tested: can't exec ./chkwtmp
not tested: can't exec ./chklastlog

It is a report from chkrootkit. I installed chkrootkit but I'm not yet able to identify security breaches. Can someone tell me what these messages mean?

Thanks for your time.

Jason

Greetings Jason:

One thing to check is that you compiled chkrootkit with "make sense" from within the installation directory.

Thank you.

Hi Dynamicnet,

Thanks for replying.
Yes I have compiled with make sense. I followed the exact steps as described in foggy's howto

I have read other posts of people who have similar problems as I'm having but it's still not clear what I can/must do at this moment. I don't even know if this means that there has been a security violation. Maybe you or anyone else can tell me more about this.

thank you,

Jason

Make sure that you are running chkrootkit from the directory it is located in, as it looks for the additional compiled modules in your current directory - if you call it from elsewhere then it cannot locate them