On Sat, 1 Mar 2003 16:51:50 -0600
Nicholas Marsh <[EMAIL PROTECTED]> wrote:
> Yikes! I have never seen a process by that name before (running as
> root even), but it may or may not be an issue.
>
> Are you running any special or custom software that may own that
> process? If not I would suggest you download and run chkrootkit at
> www.chkrootkit.org. Chkrootkit is kinda like a virus scanner for
> Linux.
>
>
Removeservice is one of the LogWatch scripts:
[EMAIL PROTECTED] /]$ locate removeservice
/etc/log.d/scripts/shared/removeservice
[EMAIL PROTECTED] /]$ cat /etc/log.d/scripts/shared/removeservice
#!/usr/bin/perl -w
#####################################################################
######
# $Id: removeservice,v 1.2 1998/02/23 01:17:04 kirk Exp $
#####################################################################
######
# $Log: removeservice,v $
# Revision 1.2 1998/02/23 01:17:04 kirk
# Getting ready for a first distribution
#
# Revision 1.1 1998/02/22 23:28:31 kirk
# Commented and rearranged some things
#
#####################################################################
######
########################################################
# This was written and is maintained by:
# Kirk Bauer <[EMAIL PROTECTED]>
#
# Please send all comments, suggestions, bug reports,
# etc, to [EMAIL PROTECTED]
#
########################################################
# This will remove the unwanted service from a logfile
# in the standard /var/log/messages format. Case insensitive
if ( $ENV{'LOGWATCH_DEBUG'} > 5 ) {
print STDERR "DEBUG: Inside RemoveService...\n";
}
$ServiceName = $ARGV[0];
while (defined($ThisLine = <STDIN>)) {
unless ( ($ThisLine =~ m/^... .. ..:..:.. [^ ]*
$ServiceName\[[0123456789]*\]: /oi) or
($ThisLine =~ m/^... .. ..:..:.. [^ ]* $ServiceName: /oi)
) {
print $ThisLine;
}
}
Regards,
Tom
--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
