root@linux9113:~# less /var/mail/tsteele
From root@linux9113.inspinc.ad  Tue May 11 12:45:53 2010
Return-Path: <root@linux9113.inspinc.ad>
X-Original-To: tsteele
Delivered-To: tsteele@linux9113.inspinc.ad
Received: by linux9113.inspinc.ad (Postfix, from userid 0)
        id 2816B832B10; Tue, 11 May 2010 12:45:53 -0700 (PDT)
To: tsteele@linux9113.inspinc.ad
Subject: 10-05-11 linux1111
Message-Id: <20100511194553.2816B832B10@linux9113.inspinc.ad>
Date: Tue, 11 May 2010 12:45:53 -0700 (PDT)
From: root@linux9113.inspinc.ad (root)
Status: RO
Content-Length: 68
Lines: 4


AIDE, version 0.14

### All files match AIDE database. Looks okay!

From root@linux9113.inspinc.ad  Tue May 11 12:48:03 2010
Return-Path: <root@linux9113.inspinc.ad>
X-Original-To: tsteele
Delivered-To: tsteele@linux9113.inspinc.ad
Received: by linux9113.inspinc.ad (Postfix, from userid 0)
        id 4217B832B10; Tue, 11 May 2010 12:48:03 -0700 (PDT)
To: tsteele@linux9113.inspinc.ad
Subject: 10-05-11 linux9113
Message-Id: <20100511194803.4217B832B10@linux9113.inspinc.ad>
Date: Tue, 11 May 2010 12:48:03 -0700 (PDT)
From: root@linux9113.inspinc.ad (root)

AIDE found differences between database and filesystem!!
Start timestamp: 2010-05-11 12:48:02

Summary:
  Total number of files:        2827
  Added files:                  1
  Removed files:                0
  Changed files:                1


---------------------------------------------------
Added files:
---------------------------------------------------

added: /bin/root-kit

---------------------------------------------------
Changed files:
---------------------------------------------------

changed: /bin

--------------------------------------------------
Detailed information about changes:
---------------------------------------------------


Directory: /bin
  Mtime    : 2010-05-06 12:54:14              , 2010-05-11 12:47:58
 Ctime    : 2010-05-06 12:54:14              , 2010-05-11 12:47:58

From root@linux9113.inspinc.ad  Tue May 11 20:19:53 2010
Return-Path: <root@linux9113.inspinc.ad>
X-Original-To: tsteele
Delivered-To: tsteele@linux9113.inspinc.ad
Received: by linux9113.inspinc.ad (Postfix, from userid 0)
        id 7915A832B10; Tue, 11 May 2010 20:19:53 -0700 (PDT)
To: tsteele@linux9113.inspinc.ad
Subject: 10-05-11 linux88888
Message-Id: <20100512031953.7915A832B10@linux9113.inspinc.ad>
Date: Tue, 11 May 2010 20:19:53 -0700 (PDT)
From: root@linux9113.inspinc.ad (root)

AIDE found differences between database and filesystem!!
Start timestamp: 2010-05-11 20:19:52

Summary:
  Total number of files:        2829
  Added files:                  3
  Removed files:                0
  Changed files:                2


---------------------------------------------------
Added files:
---------------------------------------------------

added: /etc/perl/CPAN/Config.pm~
added: /etc/perl/CPAN/Config.pm
added: /bin/root-kit

---------------------------------------------------
Changed files:
---------------------------------------------------

changed: /etc/perl/CPAN
changed: /bin

--------------------------------------------------
Detailed information about changes:
---------------------------------------------------


Directory: /etc/perl/CPAN
  Size     : 6                                , 39
  Mtime    : 2010-04-11 13:22:23              , 2010-05-11 16:09:17
  Ctime    : 2010-05-04 17:25:02              , 2010-05-11 16:09:17

Directory: /bin
  Mtime    : 2010-05-06 12:54:14              , 2010-05-11 12:47:58
  Ctime    : 2010-05-06 12:54:14              , 2010-05-11 12:47:58