On Thu, 28 Mar 2002, David Savolainen wrote: > I checked to see if chkrootkit is installed, and it isn't. I just don't > see what process could be hung up. Unless I don't know how to fully > understand the output of ps. Here is a current ps -ef. Things have not > changed much from the ps -aux I attached ealier. > > thanks! > > David > > UID PID PPID C STIME TTY TIME CMD > root 1 0 0 Mar26 ? 00:00:06 init > root 2 1 0 Mar26 ? 00:00:00 [keventd] > root 3 1 0 Mar26 ? 00:00:00 [kapmd] > root 4 0 0 Mar26 ? 00:00:00 [ksoftirqd_CPU0] > root 5 0 0 Mar26 ? 00:00:11 [kswapd] > root 6 0 0 Mar26 ? 00:00:03 [bdflush] > root 7 0 0 Mar26 ? 00:00:03 [kupdated] > root 8 1 0 Mar26 ? 00:00:00 [mdrecoveryd] > root 11 1 0 Mar26 ? 00:00:00 [kreiserfsd] > root 65 1 0 Mar26 ? 00:00:00 devfsd /dev > root 278 1 0 Mar26 ? 00:00:00 [pagebuf_daemon] > root 603 1 0 Mar26 ? 00:00:00 [khubd] > root 1020 1 0 Mar26 ? 00:00:03 syslogd -m 0 > root 1029 1 0 Mar26 ? 00:00:00 klogd -2 > daemon 1083 1 0 Mar26 ? 00:00:00 /usr/sbin/atd > root 1206 1 0 Mar26 ? 00:00:00 cupsd > root 1340 1 0 Mar26 ? 00:00:00 /usr/sbin/amd -F > /etc/amd.conf -a /net > root 1378 1340 0 Mar26 ? 00:00:00 [rpciod] > rpc 1395 1 0 Mar26 ? 00:00:00 portmap > root 1468 1 0 Mar26 ? 00:00:00 /usr/sbin/automount > --timeout 60 /misc file /etc/auto.misc > root 1485 1 0 Mar26 ? 00:00:00 /usr/sbin/automount > --timeout 60 /net program /etc/auto.net > root 1599 1 0 Mar26 ? 00:00:00 gpm -t imps2 -m > /dev/psaux > root 1700 1 0 Mar26 ? 00:00:00 crond > xfs 1741 1 0 Mar26 ? 00:00:02 xfs -port -1 -daemon > -droppriv -user xfs > root 2030 1 0 Mar26 tty1 00:00:00 login -- david > root 2031 1 0 Mar26 tty2 00:00:00 /sbin/mingetty tty2 > root 2032 1 0 Mar26 tty3 00:00:00 /sbin/mingetty tty3 > root 2033 1 0 Mar26 tty4 00:00:00 /sbin/mingetty tty4 > root 2038 1 0 Mar26 tty5 00:00:00 /sbin/mingetty tty5 > root 2039 1 0 Mar26 tty6 00:00:00 /sbin/mingetty tty6 > david 2855 2030 0 Mar26 vc/1 00:00:00 -bash > david 2940 2855 0 Mar26 vc/1 00:00:00 /bin/sh > /usr/openwin/bin/startx > david 2957 2940 0 Mar26 vc/1 00:00:00 xinit > /home/david/.xinitrc -- -deferglyphs 16 > root 2959 2957 0 Mar26 ? 00:04:06 /etc/X11/X :0 > -deferglyphs 16 David, I always suspect the process with the highest cpu time. What is process PID # 2959, /etc/X11/X on the line above, suppose to be doing? 4 minutes and 6 seconds is a lot of processor time. What would happen if you kill it? John
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
