chkproc - ukryte procesy

[Szymon 'Trasher' K]

4 lipca 2003 (01:16:24) Szymon 'Trasher' K napisal:
STK> # chkrootkit-chkproc
STK> You have     2 process hidden for readdir command
STK> You have     2 process hidden for ps command


How accurate is chkproc?

If you run chkproc on a server that runs lots
of short time processes it could report some false positives. chkproc
compares the ps output with the /proc contents. If processes are
created/killed during this operation chkproc could point out these
PIDs as suspicious.

Juz sie dowiedzialem. :-)

-- 
\                          szymon @ trashlandia.dyndns.org  /
 )  Szymon 'Trasher'      trasher @ void.univ.gda.pl       (
/                          gg:1496879                       \
http://pldusers.one.pl/ - Nieoficjalny serwis użytkowników PLD