[Xastir] WAY off topic - but you guys are my' best resource'

[KC7ZRU]

Tom Young wrote:

  > Assuming you used ps to list running processes, try running
> 	"rpm -V procps"
> there should be no output.    

No output is the case here

> 
> Chkrootkit should have caught a problem with ps, but perhaps
> chkrootkit has itself been compromised.  
thought so too - so downloaded and compiled latest from source.

> 
> You can also run "rpm -Va" but you will have a lot of
> output to analyze, so run  something like "rpm -Va > ~/.rpmva.out"
> 
> Running "rpm -Va > ~/.rpmvaB.out; diff ~/.rpmva.out ~/.rpmvaB.out " 
> periodically will point out changes to your entire installed system, not
> just those checked by chkrootkit.

Good info! Be checking rpmva.out soon - and I really like the idea of 
the comparisons too. Nice. "lazy man's tripwire"

Thanks Tom!