Re: [Rkhunter-users] rkhunter and snort? promiscuous mode warning

[John H. <joh...@pl...>]

On Fri, 2008-04-18 at 09:01 +0200, Ulrich Althaus wrote:
> Hello,
> 
> I'm fairly new to rkhunter. I started a new job and took over all
> the servers. They all run rkhunter on a daily basis and produced alot of
> emails saying that more or less everything is alright. So I started
> reducing those emails. When it came to rkhunter I was able to stop all
> emails accept for one server running gentoo. The email I get is the
> following:
> 
> Running updater...
> Mirrorfile /usr/lib/rkhunter/db/mirrors.dat rotated
> Using mirror http://rkhunter.sourceforge.net
> [DB] Mirror file                      : Up to date
> [DB] MD5 hashes system binaries       : Up to date
>
You are running an old version of RKH, so I would first of all upgrade
to the latest. The config file (usually /etc/rkhunter.conf) will allow
whitelisting of processes using the network interfaces (look for
ALLOWPROCLISTEN).



John.

-- 
---------------------------------------------------------------
John Horne, University of Plymouth, UK  Tel: +44 (0)1752 587287
E-mail: Joh...@pl...       Fax: +44 (0)1752 233839