On Tue, Feb 28, 2017 at 01:01:41AM +0100, [email protected] wrote: > > The oddity is - these are the only two boxes with this issue, and we have a > > couple dozen at the same OS and level. Only these two, with this role and > > this particular package set have the issue.
reminds me of a rootkit infection we had to deal with some time ago, which did bitcoin mining (or similar). CPU load would go up whenever it received a workload from a C&C server. The binaries were invisible for userspace fs acces, and the processes/sockets were invisible to top/ps/..., but finally powertop would show them. It autostarted on every boot via /etc/rc.local. Regards Matthias _______________________________________________ Users mailing list: [email protected] http://lists.clusterlabs.org/mailman/listinfo/users Project Home: http://www.clusterlabs.org Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf Bugs: http://bugs.clusterlabs.org
