Re: [cobalt-users] CHkrootkit output

["PageKeeper Service" <host@xxxxxxxxxxxxxxxxxxxxx>]

Subject: Re: [cobalt-users] CHkrootkit output


> > Might it maybe make it into a Zeffie raq3-4 package file?
> >   David Hahn
>
> well ya know I was thinking about that...  I don't think the way I make it
> for my security package would work because I don't know what you folks are
> living with now...  I produce an e-mail when I see a change and I get the
> feeling you folks get a full report daily?  is that something you still
> want?  I can do that fairly quickly... :)
>

By default I believe its set to -v verbose and it outputs a full report when
it runs.
I change (like) mine to -q quiet and it only outputs what changes.

Example of my chkrootkit cron:
# Run chkrootkit-0.42b 4 times daily at 12:30am & 6:30am & 12:30pm & 6:30pm
# and pipe output to root email. (chkrootkit output)
30 0,6,12,18 * * * (cd /usr/local/chkrootkit-0.42b; ./chkrootkit -q 2>&1 |
mail -s "chkrootkit output (NS)" root)

  David Hahn
  PageKeeper Service
  1512 Deborah Road #102
  Rio Rancho, New Mexico 87124 US
  505-892-8723
  http://www.pagekeeperservice.com