hello, who does use chkrootkit? i did it once. two lines of the output puzzle me. especially the second one listed here. 1.) Checking `sshd'... /usr/bin/strings: Warning: '/' is not an ordinary file not infected 2.) eth0: PACKET SNIFFER(/sbin/dhclient3[12518]) thanks in advance for explanation and necessary advices, René