On Thu, Jun 12, 2003 at 12:44:57PM +0300, Martti Kuparinen wrote:
> Hello list,
> 
> I'm running tripwire on my NetBSD/i386 1.6.1 server and for some reason some
> of the checksums for some files are zero (not all checksums and not all
> files). Any ideas what might be the reason?
> 
> ### Phase 5:   Generating observed/expected pairs for changed files
> ###
> ### Attr        Observed (what it is)         Expected (what it should be)
> ### =========== ============================= =============================
> /usr/pkg/bin/killall
>  snefru (sig2): 0                             2A7sNz45OzpwJT7f8pFtNL
>   crc32 (sig3): 0                             2EHaEJ
>   crc16 (sig4): 0                             0007tC
>     md4 (sig5): 0                             2jTuP9BwrSCW6jo3OcDBPK
>     md2 (sig6): 0                             0FzL69V5Czynfv:exQH3Ks
>     sha (sig7): 0                             3L12XhGDo0RNEE:UuVeyqY1HEAc
>   haval (sig8): 0                             3qYU1rsVu3dKaJzj4mZIbh
> ---> File: '/usr/pkg/bin/killall'
> ---> Update entry?  [YN(y)nh?]

Did you check the size and content of the file ?
I guess only an empty file could lead to null checksum for all checksums.

-- 
Manuel Bouyer <bouyer@antioche.eu.org>
     NetBSD: 24 ans d'experience feront toujours la difference
--