In article <[EMAIL PROTECTED]> you wrote: > www-data 16848 1 14 14:01 ? 00:06:07 ping22
Looks like it is started from Apache, most likely a CGI. Have a look at CWD of that process or look into the access log. Gruss Bernd -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

