At 11:32 PM 10/16/01 -0400, you wrote: > > Guess maybe I can start sleeping again....Once it hits about 5am here I'm > > going to reboot the server and see if the user comes back immediately. > > >I believe running >netstat -tupan >should show all connected users/processes
Thanks. I checked netstat -tupan and didn't seen anything there either. The reboot took care of it. I'm going to keep monitoring today and see if/when the phantom user comes back. Thanks for all the help from everyone. Brian _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
