[cobalt-users] Help Installing KSTAT

["Jay Fesco" <jay@xxxxxxxxxxxxxxxxxx>]

Hi, all.  I finally got the 'Possible LKM Trojan' message from ChkRootKit that I've read about.  It turned out to be transient but it was enough to make me start looking into some of the other tracking tools in case it was ever real.  I saw that KSTAT is one of the recommended tools for deeper tracking of these types of items, but I could not get the package to get past the make.  Anyone have any experience installing this?  Some of the errors include:

include-linux/linux.h:76: warning: data definition has no type or storage class
include-linux/linux.h:79: parse error before `}'
include-linux/linux.h:81: parse error before `size_t'
/usr/include/linux/coda.h:261: storage size of `va_atime' isn't known
/usr/include/linux/coda.h:262: storage size of `va_mtime' isn't known
/usr/include/linux/coda.h:263: storage size of `va_ctime' isn't known
/usr/include/linux/coda.h:563: storage size of `attr' isn't known
/usr/include/linux/fs.h:431: storage size of `f_owner' isn't known
/usr/include/linux/reiserfs_fs_sb.h:188: storage size of `j_journal_list' isn't known
/usr/include/linux/sched.h:288: storage size of `times' isn't known
make: *** [kstat] Error 1

This is a Raq4r, patches up to date, MySQL, SSH, & Webmin installed.  Thanks for any advice you can offer (the archives have 4, count 'em, 4 entries for KSTAT btw).

Jay Fesco