[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] How to Nail a hidden process.



Gerald Waugh wrote:

> What does top read?

As Steve pointed out, if the hacker did a kernel hack, top, ps, etc.,
all become suspect.  Imho, the best way to search for a root is to run
the latest version of chkrootkit.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net
P. O. Box 52672, Riverside, CA  92517
voice: (909) 778-9980  *  fax: (702) 548-9484