On Fri, 9 Oct 1998, Raymond A. Ingles wrote: > On Fri, 9 Oct 1998, Rob Collins wrote: > > > ...and a fairly larger problem: I've discovered I have a virus on my > > machine. [snip] > No, a boot-sector virus essentially runs under the BIOS. This *can* > infect a Linux machine but I find it difficult to believe that Linux would > still boot in such a circumstance. > > What leads you to believe the virus is running under Linux?
here's what I gather is relevant from ps, pstree, and slice; [EMAIL PROTECTED] root]# pstree -alnp init(1) |-xdm(413) -nodaemon | |-X(415) -auth /usr/X11R6/lib/X11/xdm/authdir/authfiles/A:0-a00413 | `-xdm(416) | `-fvwm2(427) -cmd FvwmM4\040-debug\040/etc/X11/AnotherLevel/fvwm2rc.m4 | |-FvwmTaskBar(507) 10 4 /tmp/fvwmrca00447 0 8 | |-FvwmButtons(508) 12 4 /tmp/fvwmrca00447 0 8 | |-nxterm(510) +ut -T darknesswithin.intr.net-Main -n Main ... | | `-bash(513) | | `-su(514) - | | `-bash(515) | | `-pppd(6591) debug /dev/ttyS1 38400 connect ... | |-xload(511) -nolabel -geometry 32x20+0+0 -bg grey60 -update 5 | |-FvwmPager(512) 12 4 /tmp/fvwmrca00447 0 8 0 1 | |-nxterm(5297) | | `-bash(5298) | | `-su(5404) - | | `-bash(5405) | |-nxterm(6065) | | `-bash(6066) | |-nxterm(9934) | | `-bash(9935) | | `-ssh(8012) -p23 pete | `-nxterm(32019) | `-bash(32022) | `-su(16642) - | `-bash(16643) | `-pstree(16662) -alnp |-xconsole(422) -geometry 480x130-0-0 -daemon -notify -verbose -fn fixed `-netscape-commun(14290) /usr/doc/HTML/index.html `-netscape-commun(14299) [EMAIL PROTECTED] root]# ps aef PID TTY STAT TIME COMMAND 416 ? S 0:00 \_ -:0 HOME=/ TERM=linux BOOT_IMAGE=linux AUTOBOOT=YES PATH=/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin RUNLEVEL=5 PREVLEVEL=N CONSOLE=/dev/console INIT_VERSION=sysvinit-2.71 [EMAIL PROTECTED] root]# top 55 processes: 54 sleeping, 1 running, 0 zombie, 0 stopped CPU states: 5.2% user, 2.2% system, 0.0% nice, 92.7% idle Mem: 127924K av, 67892K used, 60032K free, 37516K shrd, 4968K buff Swap: 104384K av, 20K used, 104364K free 13804K cached PID USER PRI NI SIZE RSS SHARE STAT LIB %CPU %MEM TIME COMMAND 413 root 0 0 840 840 724 S 0 0.0 0.6 0:00 xdm 416 root 0 0 1856 1856 1360 S 0 0.0 1.4 0:00 xdm What's with the "\_ -:0" command? well, here's the full ps, pstree, and top slice; [EMAIL PROTECTED] root]# pstree -alnp init(1) |-(kflushd,2) |-(kswapd,3) |-kerneld(25) |-syslogd(188) |-klogd(197) |-atd(209) |-crond(220) |-portmap(231) |-inetd(254) |-named(265) |-routed(276) |-sshd(287) |-lpd(298) |-rpc.mountd(310) |-rpc.nfsd(319) |-rwhod(330) |-gpm(354) -t MouseSystems |-mingetty(405) tty1 |-mingetty(406) tty2 |-mingetty(407) tty3 |-mingetty(408) tty4 |-mingetty(409) tty5 |-mingetty(410) tty6 |-update(412) |-xdm(413) -nodaemon | |-X(415) -auth /usr/X11R6/lib/X11/xdm/authdir/authfiles/A:0-a00413 | `-xdm(416) | `-fvwm2(427) -cmd FvwmM4\040-debug\040/etc/X11/AnotherLevel/fvwm2rc.m4 | |-FvwmTaskBar(507) 10 4 /tmp/fvwmrca00447 0 8 | |-FvwmButtons(508) 12 4 /tmp/fvwmrca00447 0 8 | |-nxterm(510) +ut -T darknesswithin.intr.net-Main -n Main ... | | `-bash(513) | | `-su(514) - | | `-bash(515) | | `-pppd(6591) debug /dev/ttyS1 38400 connect ... | |-xload(511) -nolabel -geometry 32x20+0+0 -bg grey60 -update 5 | |-FvwmPager(512) 12 4 /tmp/fvwmrca00447 0 8 0 1 | |-nxterm(5297) | | `-bash(5298) | | `-su(5404) - | | `-bash(5405) | |-nxterm(6065) | | `-bash(6066) | |-nxterm(9934) | | `-bash(9935) | | `-ssh(8012) -p23 pete | `-nxterm(32019) | `-bash(32022) | `-su(16642) - | `-bash(16643) | `-pstree(16662) -alnp |-xconsole(422) -geometry 480x130-0-0 -daemon -notify -verbose -fn fixed `-netscape-commun(14290) /usr/doc/HTML/index.html `-netscape-commun(14299) [EMAIL PROTECTED] root]# ps aef PID TTY STAT TIME COMMAND 1 ? S 5:48 init [5] HOME=/ TERM=linux BOOT_IMAGE=linux 2 ? SW 0:00 (kflushd) 3 ? SW< 0:00 (kswapd) 25 ? S 0:02 /sbin/kerneld INIT_VERSION=sysvinit-2.71 TERM=linux HOSTTYPE=i386 PATH=/bin:/sbin:/usr/bin:/usr/sbin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=S SHELL=/bin/bash AUTOBOOT=YES BOOT_IMAGE=linux OSTYPE=Linux SHLVL=1 188 ? S 0:03 syslogd INIT_VERSION=sysvinit-2.71 previous=N TERM=linux HOSTTYPE=i386 PATH=/sbin:/usr/sbin:/bin:/usr/bin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=5 SHELL=/bin/bash runlevel=5 AUTOBOOT=YES BOOT_IMAGE=linux OSTYP 197 ? S 0:00 klogd INIT_VERSION=sysvinit-2.71 previous=N TERM=linux HOSTTYPE=i386 PATH=/sbin:/usr/sbin:/bin:/usr/bin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=5 SHELL=/bin/bash runlevel=5 AUTOBOOT=YES BOOT_IMAGE=linux OSTYPE= 220 ? S 28:19 crond INIT_VERSION=sysvinit-2.71 previous=N TERM=linux HOSTTYPE=i386 PATH=/usr/bin:/bin n:/bin:/usr/bin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=5 SHELL=/bin/bash runlevel=5 AUTOBOOT=YES BOOT_IMAGE=linux OSTYPE= 254 ? S 0:00 inetd INIT_VERSION=sysvinit-2.71 previous=N TERM=linux HOSTTYPE=i386 PATH=/sbin:/usr/sbin:/bin:/usr/bin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=5 SHELL=/bin/bash runlevel=5 AUTOBOOT=YES BOOT_IMAGE=linux OSTYPE= 265 ? S 0:00 named INIT_VERSION=sysvinit-2.71 previous=N TERM=linux HOSTTYPE=i386 PATH=/sbin:/usr/sbin:/bin:/usr/bin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=5 SHELL=/bin/bash runlevel=5 AUTOBOOT=YES BOOT_IMAGE=linux OSTYPE= 276 ? S 0:00 routed INIT_VERSION=sysvinit-2.71 previous=N TERM=linux HOSTTYPE=i386 PATH=/sbin:/usr/sbin:/bin:/usr/bin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=5 SHELL=/bin/bash runlevel=5 AUTOBOOT=YES BOOT_IMAGE=linux OSTYPE 287 ? S 0:01 /usr/sbin/sshd INIT_VERSION=sysvinit-2.71 previous=N TERM=linux HOSTTYPE=i386 PATH=/sbin:/usr/sbin:/bin:/usr/bin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=5 SHELL=/bin/bash runlevel=5 AUTOBOOT=YES BOOT_IMAGE=linu 298 ? S 0:00 lpd INIT_VERSION=sysvinit-2.71 previous=N TERM=linux HOSTTYPE=i386 PATH=/sbin:/usr/sbin:/bin:/usr/bin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=5 SHELL=/bin/bash runlevel=5 AUTOBOOT=YES BOOT_IMAGE=linux OSTYPE=Li 310 ? S 0:00 rpc.mountd INIT_VERSION=sysvinit-2.71 previous=N TERM=linux HOSTTYPE=i386 PATH=/sbin:/usr/sbin:/bin:/usr/bin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=5 SHELL=/bin/bash runlevel=5 AUTOBOOT=YES BOOT_IMAGE=linux OS 319 ? S 0:00 rpc.nfsd INIT_VERSION=sysvinit-2.71 previous=N TERM=linux HOSTTYPE=i386 PATH=/sbin:/usr/sbin:/bin:/usr/bin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=5 SHELL=/bin/bash runlevel=5 AUTOBOOT=YES BOOT_IMAGE=linux OSTY 330 ? S 0:00 rwhod INIT_VERSION=sysvinit-2.71 previous=N TERM=linux HOSTTYPE=i386 PATH=/sbin:/usr/sbin:/bin:/usr/bin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=5 SHELL=/bin/bash runlevel=5 AUTOBOOT=YES BOOT_IMAGE=linux OSTYPE= 354 ? S 0:00 gpm -t MouseSystems INIT_VERSION=sysvinit-2.71 previous=N TERM=linux HOSTTYPE=i386 PATH=/sbin:/usr/sbin:/bin:/usr/bin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=5 SHELL=/bin/bash runlevel=5 AUTOBOOT=YES BOOT_IMAGE 405 1 S 0:00 /sbin/mingetty tty1 HOME=/ TERM=linux BOOT_IMAGE=linux AUTOBOOT=YES PATH=/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin RUNLEVEL=5 PREVLEVEL=N CONSOLE=/dev/console INIT_VERSION=sysvinit-2.71 406 2 S 0:00 /sbin/mingetty tty2 HOME=/ TERM=linux BOOT_IMAGE=linux AUTOBOOT=YES PATH=/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin RUNLEVEL=5 PREVLEVEL=N CONSOLE=/dev/console INIT_VERSION=sysvinit-2.71 407 3 S 0:00 /sbin/mingetty tty3 HOME=/ TERM=linux BOOT_IMAGE=linux AUTOBOOT=YES PATH=/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin RUNLEVEL=5 PREVLEVEL=N CONSOLE=/dev/console INIT_VERSION=sysvinit-2.71 408 4 S 0:00 /sbin/mingetty tty4 HOME=/ TERM=linux BOOT_IMAGE=linux AUTOBOOT=YES PATH=/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin RUNLEVEL=5 PREVLEVEL=N CONSOLE=/dev/console INIT_VERSION=sysvinit-2.71 409 5 S 0:00 /sbin/mingetty tty5 HOME=/ TERM=linux BOOT_IMAGE=linux AUTOBOOT=YES PATH=/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin RUNLEVEL=5 PREVLEVEL=N CONSOLE=/dev/console INIT_VERSION=sysvinit-2.71 410 6 S 0:00 /sbin/mingetty tty6 HOME=/ TERM=linux BOOT_IMAGE=linux AUTOBOOT=YES PATH=/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin RUNLEVEL=5 PREVLEVEL=N CONSOLE=/dev/console INIT_VERSION=sysvinit-2.71 412 ? S 0:01 update (bdflush) sh) 413 ? S 0:00 /usr/bin/X11/xdm -nodaemon HOME=/ TERM=linux BOOT_IMAGE=linux AUTOBOOT=YES PATH=/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin RUNLEVEL=5 PREVLEVEL=N CONSOLE=/dev/console INIT_VERSION=sysvinit-2.71 415 ? R 14:15 \_ /usr/X11R6/bin/X -auth /usr/X11R6/lib/X11/xdm/authdir/authfiles/A:0-a00413 HOME=/ TERM=linux BOOT_IMAGE=linux AUTOBOOT=YES PATH=/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin RUNLEVEL=5 PREVLEVEL=N CONSOLE=/dev/conso 416 ? S 0:00 \_ -:0 HOME=/ TERM=linux BOOT_IMAGE=linux AUTOBOOT=YES PATH=/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin RUNLEVEL=5 PREVLEVEL=N CONSOLE=/dev/console INIT_VERSION=sysvinit-2.71 427 ? S 1:34 \_ fvwm2 -cmd FvwmM4 -debug /etc/X11/AnotherLevel/fvwm2rc.m4 USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=dumb HOSTTYPE= 510 ? S 0:00 \_ nxterm +ut -T darknesswithin.intr.net-Main -n Main -geometry +192+153 USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TER 513 p1 S 0:00 | \_ bash USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=xterm HOSTTYPE=i386 PATH=.:/usr/local/bin:/bin:/usr/bin:/us 514 p1 S 0:00 | \_ su - USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERMCAP=xterm|vs100|xterm terminal emulator (X11R6 Window Sy 515 p1 S 28:01 | \_ -bash TERM=xterm HOME=/root SHELL=/bin/bash USER=root LOGNAME=root PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/usr/bin/X11 6591 p1 S N 2:54 | \_ /usr/sbin/pppd debug /dev/ttyS1 38400 connect /etc/ppp/ppp-on-dialer USERNAME=root ENV=/root/.bashrc HISTSIZE=1000 LYX_DIR=/usr/lib/lyx HOSTNAME=darknesswithin.intr.net LOGNAME=root HISTFILES 5297 ? S 0:02 \_ nxterm USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=dumb HOSTTYPE=i386 PATH=.:/usr/local/bin:/bin:/usr/bin:/usr/X 5298 p3 S 0:41 | \_ bash USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=xterm HOSTTYPE=i386 PATH=.:/usr/local/bin:/bin:/usr/bin:/us 5404 p3 S 0:00 | \_ su - USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERMCAP=xterm|vs100|xterm terminal emulator (X11R6 Window Sy 5405 p3 S 0:04 | \_ -bash TERM=xterm HOME=/root SHELL=/bin/bash USER=root LOGNAME=root PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/usr/bin/X11 6065 ? S 0:00 \_ nxterm USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=dumb HOSTTYPE=i386 PATH=.:/usr/local/bin:/bin:/usr/bin:/usr/X 6066 p5 S 0:00 | \_ bash USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=xterm HOSTTYPE=i386 PATH=.:/usr/local/bin:/bin:/usr/bin:/us 9934 ? S 0:04 \_ nxterm USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=dumb HOSTTYPE=i386 PATH=.:/usr/local/bin:/bin:/usr/bin:/usr/X 9935 p4 S 0:09 | \_ bash USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=xterm HOSTTYPE=i386 PATH=.:/usr/local/bin:/bin:/usr/bin:/us 8012 p4 S 0:00 | \_ ssh -p23 pete USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERMCAP=xterm|vs100|xterm terminal emulator (X11R6 32019 ? S 0:06 \_ nxterm USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=dumb HOSTTYPE=i386 PATH=.:/usr/local/bin:/bin:/usr/bin:/usr/X 32022 p2 S 5:10 | \_ bash USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=xterm HOSTTYPE=i386 PATH=.:/usr/local/bin:/bin:/usr/bin:/us 16642 p2 S 0:00 | \_ su - USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERMCAP=xterm|vs100|xterm terminal emulator (X11R6 Window Sy 16643 p2 S 0:00 | \_ -bash TERM=xterm HOME=/root SHELL=/bin/bash USER=root LOGNAME=root PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/usr/bin/X11 16663 p2 R 0:00 | \_ ps axSww aef USERNAME=root ENV=/root/.bashrc HISTSIZE=1000 LYX_DIR=/usr/lib/lyx HOSTNAME=darknesswithin.intr.net LOGNAME=root HISTFILESIZE=1000 MAIL=/var/spool/mail/root LD_LIBRARY_PATH=/usr/ 507 ? S 0:05 \_ /usr/X11R6/lib/X11/fvwm2//FvwmTaskBar 10 4 /tmp/fvwmrca00447 0 8 USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=dum 508 ? S 0:01 \_ /usr/X11R6/lib/X11/fvwm2//FvwmButtons 12 4 /tmp/fvwmrca00447 0 8 USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=dum 511 ? S N 0:02 \_ xload -nolabel -geometry 32x20+0+0 -bg grey60 -update 5 USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=dumb HOSTTYP 512 ? S 0:06 \_ /usr/X11R6/lib/X11/fvwm2//FvwmPager 12 4 /tmp/fvwmrca00447 0 8 0 1 USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=d 422 ? S 0:00 /usr/X11R6/bin/xconsole -geometry 480x130-0-0 -daemon -notify -verbose -fn fixed -exitOnFail TERM=dumb HOSTTYPE=i386 PATH=/sbin:/usr/sbin:/bin:/usr/bin SHELL=/bin/sh XAUTHORITY=/usr/X11R6/lib/X11/xdm/authdir/authfiles/A 231 ? S 0:00 portmap INIT_VERSION=sysvinit-2.71 previous=N TERM=linux HOSTTYPE=i386 PATH=/sbin:/usr/sbin:/bin:/usr/bin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=5 SHELL=/bin/bash runlevel=5 AUTOBOOT=YES BOOT_IMAGE=linux OSTYP 209 ? S 0:00 /usr/sbin/atd INIT_VERSION=sysvinit-2.71 previous=N TERM=linux HOSTTYPE=i386 PATH=/sbin:/usr/sbin:/bin:/usr/bin CONSOLE=/dev/console HOME=/ PREVLEVEL=N RUNLEVEL=5 SHELL=/bin/bash runlevel=5 AUTOBOOT=YES BOOT_IMAGE=linux 14290 ? S 47:59 /usr/lib/netscape/netscape-communicator /usr/doc/HTML/index.html USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=dumb HOSTTYPE=i 14299 ? S 0:00 \_ (dns helper) USERNAME= ENV=/home/rob/.bashrc HISTSIZE=1000 HOSTNAME=darknesswithin.intr.net LOGNAME=rob HISTFILESIZE=1000 MAIL=/var/spool/mail/rob TERM=dumb HOSTTYPE=i386 PATH=.:/usr/local/bin:/bin:/usr/bin:/usr/X11 [EMAIL PROTECTED] root]# top 8:42pm up 10 days, 15:20, 5 users, load average: 0.00, 0.06, 0.11 55 processes: 54 sleeping, 1 running, 0 zombie, 0 stopped CPU states: 7.6% user, 5.9% system, 0.0% nice, 86.4% idle Mem: 127924K av, 67876K used, 60048K free, 37516K shrd, 4968K buff Swap: 104384K av, 20K used, 104364K free 13804K cached PID USER PRI NI SIZE RSS SHARE STAT LIB %CPU %MEM TIME COMMAND 16664 root 17 0 600 600 468 R 0 11.9 0.4 0:00 top 415 root 9 0 14532 14M 1496 S 0 1.7 11.3 14:19 X 1 root 0 0 408 408 332 S 0 0.0 0.3 0:00 init 2 root 0 0 0 0 0 SW 0 0.0 0.0 0:00 kflushd 3 root -12 -12 0 0 0 SW< 0 0.0 0.0 0:00 kswapd 413 root 0 0 840 840 724 S 0 0.0 0.6 0:00 xdm 405 root 0 0 300 300 248 S 0 0.0 0.2 0:00 mingetty 406 root 0 0 300 300 248 S 0 0.0 0.2 0:00 mingetty 25 root 0 0 352 352 300 S 0 0.0 0.2 0:00 kerneld 188 root 0 0 432 432 356 S 0 0.0 0.3 0:03 syslogd 197 root 0 0 532 532 328 S 0 0.0 0.4 0:00 klogd 209 daemon 0 0 416 416 340 S 0 0.0 0.3 0:00 atd 220 root 0 0 488 488 404 S 0 0.0 0.3 0:00 crond 231 bin 0 0 348 348 280 S 0 0.0 0.2 0:00 portmap 265 root 0 0 620 612 500 S 0 0.0 0.4 0:00 named 254 root 0 0 420 420 348 S 0 0.0 0.3 0:00 inetd 276 root 0 0 424 424 352 S 0 0.0 0.3 0:00 routed 287 root 0 0 616 616 488 S 0 0.0 0.4 0:01 sshd 298 root 0 0 424 424 352 S 0 0.0 0.3 0:00 lpd 310 root 0 0 496 492 412 S 0 0.0 0.3 0:00 rpc.mountd 319 root 0 0 512 504 424 S 0 0.0 0.3 0:00 rpc.nfsd 330 root 0 0 456 456 384 S 0 0.0 0.3 0:00 rwhod 354 root 0 0 356 356 308 S 0 0.0 0.2 0:00 gpm 407 root 0 0 304 304 252 S 0 0.0 0.2 0:00 mingetty 408 root 0 0 304 304 252 S 0 0.0 0.2 0:00 mingetty 409 root 0 0 304 304 252 S 0 0.0 0.2 0:00 mingetty 410 root 0 0 304 304 252 S 0 0.0 0.2 0:00 mingetty 412 root 0 0 228 228 188 S 0 0.0 0.1 0:01 update 416 root 0 0 1856 1856 1360 S 0 0.0 1.4 0:00 xdm 427 rob 1 0 1312 1312 880 S 0 0.0 1.0 0:34 fvwm2 511 rob 16 16 1232 1232 1020 S N 0 0.0 0.9 0:02 xload 422 root 0 0 1316 1316 1104 S 0 0.0 1.0 0:00 xconsole 507 rob 0 0 1244 1244 672 S 0 0.0 0.9 0:05 FvwmTaskBar 508 rob 0 0 840 840 728 S 0 0.0 0.6 0:01 FvwmButtons 512 rob 0 0 724 724 616 S 0 0.0 0.5 0:06 FvwmPager 510 root 0 0 1528 1528 1188 S 0 0.0 1.1 0:00 nxterm 513 rob 0 0 780 780 596 S 0 0.0 0.6 0:00 bash 514 root 0 0 880 880 528 S 0 0.0 0.6 0:00 su 515 root 0 0 888 888 628 S 0 0.0 0.6 0:02 bash 6591 root 5 5 744 744 596 S N 0 0.0 0.5 0:00 pppd 5297 root 0 0 1752 1752 1228 S 0 0.0 1.3 0:02 nxterm 14299 rob 0 0 908 908 580 S 0 0.0 0.7 0:00 netscape-com 14290 rob 2 0 36784 35M 6456 S 0 0.0 28.7 48:00 netscape-com 9934 root 0 0 1740 1740 1192 S 0 0.0 1.3 0:04 nxterm 9935 rob 0 0 816 816 624 S 0 0.0 0.6 0:00 bash 5298 rob 0 0 816 816 624 S 0 0.0 0.6 0:00 bash 5404 root 0 0 908 908 556 S 0 0.0 0.7 0:00 su 16642 root 0 0 908 908 556 S 0 0.0 0.7 0:00 su 5405 root 0 0 832 832 644 S 0 0.0 0.6 0:00 bash 6065 root 0 0 1492 1492 1180 S 0 0.0 1.1 0:00 nxterm 6066 rob 0 0 800 800 616 S 0 0.0 0.6 0:00 bash 16643 root 5 0 812 812 628 S 0 0.0 0.6 0:00 bash 32019 root 0 0 1732 1732 1196 S 0 0.0 1.3 0:07 nxterm 32022 rob 0 0 820 820 624 S 0 0.0 0.6 0:01 bash 8012 root 0 0 844 844 644 S 0 0.0 0.6 0:00 ssh -- quiet rob ----------- "Just keep telling yourself you are immortal" --Albert Hofmann