[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] How to Nail a hidden process.



The only way a process can hide from ps is if ps has been replaced (IOW you got hacked). See http://www.cs.wright.edu/people/faculty/pmateti/Courses/499/Fortification/obrien.html

At 07:01 AM 4/16/2002 -0700, you wrote:
REGARDING PROCESSES:

Hi,

Firstly, thanks to every one for earlier replies.

It might sound insane..  But I am facing this problem.
  Actually my Raq4 is slowing down (you can say
completely halt) allowing nothing more than a ping.
Every day this happens and happens at the same time.

I doubt it to be some cronjob.  I could not trace it
out in our regular cron files.  It is not displaying
even in ps -aux.  This program is a big memory hog.
because the  Raq is sending mails that 95% of memory
is being used.  Usually I dont have such usage of
memory at other times.

my doubt :  Whether any process running in a system
can hide from  ps -aux.  How to nail such processes.
Are there any hidden crontab files.

Thanks for the help in advance.

__________________________________________________
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users