Subject: Re: system possibly compromised
To: None <rgfisch@excite.com>
From: Herb Peyerl <hpeyerl@beer.org>
List: netbsd-help
Date: 02/24/2004 10:20:33 
Tue, 24 Feb 2004 12:15:16 -0500.
             <20040224171516.DDC5E3CF7@xprdmailfe10.nwk.excite.com> 
 > 
 > $ find /dev -type d
 > /dev
 > /dev/fd
 > /dev/altq

Yeah, that's all good, unless they wrapped "find".  I don't know
if there are any NetBSD rootkits and if there are, I don't know what
they do. I only know what the various Solaris ones do.