Yeah, I saw postings that refered to "time difference in ps and processing /proc" but did not know whether the postings could be trusted. I see no strange behavior on the machine. I run chkrootkit about once a month just in case.
On 12/23/06, Edwin Groothuis <[EMAIL PROTECTED]> wrote:
On Sat, Dec 23, 2006 at 03:57:35PM -0500, Matthew Herzog wrote: > I run FreeBSD 6.1-RELEASE-p7 on an UltraSparc 5 machine. > I ran chkrootkit yesterday and saw this: > Checking `lkm'... You have 94 process hidden for readdir command > chkproc: Warning: Possible LKM Trojan installed I thought this was related to the time difference in "ps" and the processing of the /proc directory. Edwin -- Edwin Groothuis | Personal website: http://www.mavetju.org [EMAIL PROTECTED] | Weblog: http://weblog.barnet.com.au/edwin/
_______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to "[EMAIL PROTECTED]"
