[cobalt-security] explanation of chkrootkit results

["Stefan Jones" <stefan.w.jones@xxxxxxxxxxx>]

I ran chkrootkit, near the end of the test the following test was run
and results were displayed.  Am I to believe that this is just a list of
directories that were searched and that nothing bad was found?

Thanks

Stefan Wynn Jones

Searching for suspicious files and dirs, it may take a while...
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/MD5/.packlist
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/mod_perl/.packlist
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/Quota/.packlist
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/XML/Parser/.packlist
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/Jcode/.packlist
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/Devel/Symdump/.packlist
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/Convert/ASN1/.packlist
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/perl-ldap/.packlist
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/Text/Iconv/.packlist
/usr/lib/perl5/5.00503/i386-linux/.packlist
/usr/lib/perl5/5.00503/i386-linux/auto/IO/.packlist
/usr/lib/perl5/5.00503/i386-linux/auto/CGI/.packlist

> -----Original Message-----
> From: cobalt-security-admin@xxxxxxxxxxxxxxx [mailto:cobalt-security-
> admin@xxxxxxxxxxxxxxx] On Behalf Of cobalt-security-
> request@xxxxxxxxxxxxxxx
> Sent: Sunday, December 01, 2002 3:00 PM
> To: cobalt-security@xxxxxxxxxxxxxxx
> Subject: cobalt-security digest, Vol 1 #999 - 3 msgs
> 
> Send cobalt-security mailing list submissions to
> 	cobalt-security@xxxxxxxxxxxxxxx
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> 	http://list.cobalt.com/mailman/listinfo/cobalt-security
> or, via email, send a message with subject or body 'help' to
> 	cobalt-security-request@xxxxxxxxxxxxxxx
> 
> You can reach the person managing the list at
> 	cobalt-security-admin@xxxxxxxxxxxxxxx
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of cobalt-security digest..."
> 
> 
> Today's Topics:
> 
>    1. Re: how to config ipchains? (Gerald Waugh)
>    2. in regards to a raq 550 (Dave)
>    3. Cobalt security resource location (automatic reminder) (Eugene
> Crosser)
> 
> --__--__--
> 
> Message: 1
> From: Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
> Organization: Front Street Networks LLC
> To: cobalt-security@xxxxxxxxxxxxxxx
> Subject: Re: [cobalt-security] how to config ipchains?
> Date: Sat, 30 Nov 2002 15:49:37 -0500
> Reply-To: cobalt-security@xxxxxxxxxxxxxxx
> 
> On Saturday 30 November 2002 10:21, armin.baldemair@xxxxxxxxxxxxxxxxx
> wrote:
> > i've installes 15 (!) updates and my server had problems using php
...
> but
> > i corrected ist.
> > last but not least i installed ipchains. it's my first time i'm
using a
> > firewall on a linux machine.
> >
> > now, can anybody tell me some rules, which i should set at ipchains
to
> > prevent hack attacks and trojans.
> > (correct syntax would be helpful for a ipchains-newbie like me ;-)
> >
> 
> Try pmfirewall. search google pmfirewall
> follow the instructions it will setup a basic firewall
> which you can add to as you go along
> 
> Gerald
> --
> http://frontstreetnetworks.com         http://raqware.com
> Front Street Networks LLC   |  Phone: 203-785-0699
> 229 Front Street, Ste C, New Haven, CT 06513-3203
> 
> --__--__--
> 
> Message: 2
> From: "Dave" <dave@xxxxxxxxxxxxxxxx>
> To: <cobalt-security@xxxxxxxxxxxxxxx>
> Date: Sat, 30 Nov 2002 17:40:09 -0500
> Subject: [cobalt-security] in regards to a raq 550
> Reply-To: cobalt-security@xxxxxxxxxxxxxxx
> 
> Looking at a few customers websites, what is a failed service request,
and
> why does a customer have:
> 
> 56,000 requests,
> 2400 sucessful
> 1200 failed..
> 
> is it me or does that make no sense??
> 
> 
> ----- Original Message -----
> From: "Gerald Waugh" <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
> To: <cobalt-security@xxxxxxxxxxxxxxx>
> Sent: Saturday, November 30, 2002 3:49 PM
> Subject: Re: [cobalt-security] how to config ipchains?
> 
> 
> > On Saturday 30 November 2002 10:21,
armin.baldemair@xxxxxxxxxxxxxxxxx
> wrote:
> > > i've installes 15 (!) updates and my server had problems using php
...
> but
> > > i corrected ist.
> > > last but not least i installed ipchains. it's my first time i'm
using
> a
> > > firewall on a linux machine.
> > >
> > > now, can anybody tell me some rules, which i should set at
ipchains to
> > > prevent hack attacks and trojans.
> > > (correct syntax would be helpful for a ipchains-newbie like me ;-)
> > >
> >
> > Try pmfirewall. search google pmfirewall
> > follow the instructions it will setup a basic firewall
> > which you can add to as you go along
> >
> > Gerald
> > --
> > http://frontstreetnetworks.com         http://raqware.com
> > Front Street Networks LLC   |  Phone: 203-785-0699
> > 229 Front Street, Ste C, New Haven, CT 06513-3203
> > _______________________________________________
> > cobalt-security mailing list
> > cobalt-security@xxxxxxxxxxxxxxx
> > http://list.cobalt.com/mailman/listinfo/cobalt-security
> >
> 
> 
> 
> --__--__--
> 
> Message: 3
> Date: Sun, 1 Dec 2002 03:00:00 +0300
> To: Cobalt security maillist <cobalt-security@xxxxxxxxxxxxxxx>
> From: Eugene Crosser <crosser@xxxxxxxxxxx>
> Subject: [cobalt-security] Cobalt security resource location
(automatic
> reminder)
> Reply-To: cobalt-security@xxxxxxxxxxxxxxx
> 
> [This is a reminder sent automatically every month.]
> 
> There is a "quick security guide" and some other
> Cobalt-related resources here:
> 
> 	http://www.average.org/cobalt/
> 
> Please feel free to contact me for proposed corrections/additions.
> --
> Eugene
> 
> 
> --__--__--
> 
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security
> 
> 
> End of cobalt-security Digest