Is this "sniffer" line something bad?

[Metro2]

Seeing this is top right now:

/usr/bin/find /dev /tmp /lib /etc /var ( -name tcp.log -o -name .linux-sniff -o -name sniff-l0g -o -name core_ )

Server load is high. I'm a bit concerned. Can anyone confirm whether this is bad or not?
Thanks!

 

[ramprage]

ls -lah /proc/processid

And find out more about it, it doesn't look normal.
Also run Nobody Check on your server.

 

[chirpy]

That looks like a line from chkrootkit.