chkrootkit - suspicious files question

[Mike Klinke]

On Sunday 03 April 2005 07:42, Jim Cornette wrote:

> Hopefully this does not indicate anything to be alarmed about. Is
> this a rational assumption?

These look to be a part of perl.

# locate .packlist
/usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi/auto/DCOP/.packlist
/usr/lib/perl5/5.8.5/i386-linux-thread-multi/.packlist
/usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi/auto/Gaim/.packlist
/usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi/auto/mod_perl/.packlist
/usr/lib/perl5/vendor_perl/5.8.3/i386-linux-thread-multi/auto/NKF/.packlist

# rpm -ql perl | grep pack
/usr/lib/perl5/5.8.5/i386-linux-thread-multi/.packlist