Tripwire detects change in .... tripwire

This morning I discovered that tripwire detected a change in the tripwire binary! Yikes! So I made tarballs of /etc and /var, then shut it down and started the process of rebuilding. Not what I expected to be doing today ...