This is a false positive, just got confirmation from NAI. They have an extra.dat to fix the problem, you can probably contact them for it, wait for 4315 which will include the update, or just create an exclude file with a line that reads '/sbin/ethtool' and use the exclude flag (--exclude </path/to/exclude/file>), or just ignore it, whatever works for you. Mostly I'm just happy it wasn't the worst. Jason