I am fairly new to the security world but i installed chkrootkit on one of my cobalts and have found it to be a great way to keep on top of the log files. My problem however is after I installed it I noticed when I ran top the following was in the list: (not sure if chkrootkit has anything to do with this) 1911 root 0 0 1660 1660 1388 S 0 0.0 1.2 0:00 sendmail 1912 root 0 0 1768 1768 1336 S 0 0.0 1.3 0:00 sendmail 2000 root 0 0 1660 1660 1384 S 0 0.0 1.2 0:00 sendmail 2001 root 0 0 1820 1820 1344 S 0 0.0 1.4 0:00 sendmail 2108 root 0 0 1660 1660 1388 S 0 0.0 1.2 0:00 sendmail 2111 root 0 0 1768 1768 1336 S 0 0.0 1.3 0:00 sendmail 2174 root 0 0 1660 1660 1388 S 0 0.0 1.2 0:00 sendmail 2175 root 0 0 1776 1776 1340 S 0 0.0 1.3 0:00 sendmail 2224 root 0 0 1660 1660 1384 S 0 0.0 1.2 0:00 sendmail 2225 root 0 0 1820 1820 1344 S 0 0.0 1.4 0:00 sendmail 2246 root 0 0 1660 1660 1388 S 0 0.0 1.2 0:00 sendmail 2248 root 0 0 1776 1776 1340 S 0 0.0 1.3 0:00 sendmail etc.... Any idea on what is causing this or what is going on? Is there a way to kill these or is it ok to have them running? I have about 15 sites on this server. Hope you guys can help. Cheers, Nick Damoulakis _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
