if the administrator uses logrotation AND tjek hi´s logfiles, he would proberly check (or used automated software) the size and crc of the most (or all) of the importent system programs.