Index of /ports_security/chkrootkit
Name Last modified Size
Parent Directory -
Makefile 07-Jun-2010 13:13 1.7K
distinfo 31-Aug-2009 12:31 201
files/ 25-Dec-2006 04:06 -
pkg-descr 14-Apr-2005 22:42 864
Chkrootkit is a tool to locally check for signs of a rootkit.
-------------------------------------------------------------
It contains:
* chkrootkit: a shell script that checks system binaries for
rootkit modification.
* ifpromisc.c: checks if the network interface is in promiscuous
mode.
* chklastlog.c: checks for lastlog deletions.
* chkwtmp.c: checks for wtmp deletions.
* check_wtmpx.c: checks for wtmpx deletions. (Solaris only)
* chkproc.c: checks for signs of LKM trojans.
* chkdirs.c: checks for signs of LKM trojans.
* strings.c: quick and dirty strings replacement.
* chkutmp.c: checks for utmp deletions.
For an updated list of rootkits, worms and LKMs detected by
chkrootkit please visit: http://www.chkrootkit.org/
Nelson Murilo <nelson@pangeia.com.br>
Klaus Steding-Jessen <jessen@nic.br>
WWW: http://www.chkrootkit.org/