/etc/cron.daily/chkrootkit:
eth0: PACKET SNIFFER(/sbin/dhclient[684], /sbin/dhclient[14352],
/sbin/dhclient[26469], /sbin/dhclient[21870], /sbin/dhclient[21888],
/sbin/dhclient[21941])