Ubuntu
chkrootkit package

  1. Bug #602734
  2. Comment #1

Comment 1 for bug 602734

Revision history for this message
Marc Deslauriers (mdeslaur) wrote : Re: ifpromisc reports PACKET SNIFFER for /usr/sbin/dhcpd3

Thanks for reporting this.

The README.FALSE-POSITIVES file does document that dhcp will come up as a false positive.

Although chkrootkit does display dhcpd3, the cron.daily job in the chkrootkit package filters it out before sending the report.

What version were you running before that makes this seem like a regression? What Debian bug report did you see that mentioned this being fixed?