Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have installed rkhunter and would like the rootkit checks to be done automatically with alerts. How would i go about integrating RKhunter with nagios? One scenario would be if a root kit is found, i would receive a critical alert on nagios else the state is OK. I also notice that there is this script related to rkhunter, but have no idea how to use it. Any help would be appreciated. Thanks !

ps : i am able to do less complicated configurations and coding. other than that i need some guidance.

share|improve this question
When i run the ./check_rootkit plugin, i get this error ./check_rootkit: line 25: ./ No such file or directory – Anonymous Nov 5 '12 at 8:56
You need to run it in the directory where all of your other nagios plugins are. – Keith Nov 5 '12 at 16:43
Running it in /usr/local/nagios/libexec I get the following output : WARNING - rkhunter returned state 1 What does it mean? – Anonymous Nov 6 '12 at 1:08
up vote 1 down vote accepted

After some trial and error, i gave up on rkhunter and move to check_chkrootkit. Also available on nagios exchange.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.