kurt@verruckt.org wrote:
> Maybe ive never noticed this before...
> 
> On a server I have, when I run chkrootkit, everything seems grand, then
> there is this one part:
> 
> Searching for suspicious files and dirs, it may take a while...
> /usr/lib/perl5/5.8.0/i386-linux-thread-multi/.packlist
> /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi/auto/mod_perl/.packli
> st
> 
> I have never noticed it before, and frankly, am not sure that it means
> anything at all. This is a RH9 system. Can anyone tell me if im being
> paranoid or is this is odd? Thanks.

It's in /usr/lib/perl5/5.8.0/i686-linux/ on a Gentoo system here, so it
appears to be a standard Perl thing.  What does

    rpm -qlf /usr/lib/perl5/5.8.0/i386-linux-thread-multi/.packlist

show on your system?