Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Avoiding RootKits: CHKROOTKIT + RKhunter

[Carlos]

Hi,

My VPS has CHKROOTKIT and RKhunter installed to check for rootkits. Each day I get an infection report. While I like the peace of mind, reading the reports are rather tedious. Bascially, I don't need to know if 100s of files are NOT infected. I just need to know if a file is infected.

Is there a way to improve their email reports or is there a better tool?

thanks

[nukuki]

cant you do a grep for infected then do | mail -s ?

[david510]

You can use the options with chkrootkit and rhkunter to report warning only. Use the command as follows.

rkhunter -c --report-warnings-only

/path/to/chkrootkit -q