Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have installed rkhunter and would like the rootkit checks to be done automatically with alerts. How would i go about integrating RKhunter with nagios? One scenario would be if a root kit is found, i would receive a critical alert on nagios else the state is OK. I also notice that there is this script related to rkhunter, but have no idea how to use it. Any help would be appreciated. Thanks !

ps : i am able to do less complicated configurations and coding. other than that i need some guidance.

share|improve this question
    
When i run the ./check_rootkit plugin, i get this error ./check_rootkit: line 25: ./utils.sh: No such file or directory –  Anonymous Nov 5 '12 at 8:56
1  
You need to run it in the directory where all of your other nagios plugins are. –  Keith Nov 5 '12 at 16:43
    
Running it in /usr/local/nagios/libexec I get the following output : WARNING - rkhunter returned state 1 What does it mean? –  Anonymous Nov 6 '12 at 1:08
add comment

1 Answer 1

up vote 0 down vote accepted

After some trial and error, i gave up on rkhunter and move to check_chkrootkit. Also available on nagios exchange. http://exchange.nagios.org/directory/Plugins/Operating-Systems/Linux/check_chkrootkit/details

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.