finding hidden processes

2001-12-03 Thread Tarjei Huse
Hi If I run chkproc from the chkrootid package I get: You have 3 process hidden for readdir command You have 3 process hidden for ps command How can I find these processes? Tarjei -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL

Re: finding hidden processes

2001-12-03 Thread Johan Kiviniemi
On Mon, Dec 03, 2001 at 06:14:55PM +0100, Tarjei Huse wrote: Hi If I run chkproc from the chkrootid package I get: You have 3 process hidden for readdir command You have 3 process hidden for ps command How can I find these processes? Tarjei Try running chkproc -v and cat

Re: finding hidden processes

2001-12-03 Thread bryan
Hi If I run chkproc from the chkrootid package I get: You have 3 process hidden for readdir command You have 3 process hidden for ps command How can I find these processes? Use a ps command from an uncorrupted system. If you made a bootable CD for installing your system you can

Re: finding hidden processes

2001-12-03 Thread Tarjei Huse
Could this be caused because I do not have all pids in the same dir? Tarjei [EMAIL PROTECTED] wrote: Hi If I run chkproc from the chkrootid package I get: You have 3 process hidden for readdir command You have 3 process hidden for ps command How can I find these processes?

Re: finding hidden processes

2001-12-03 Thread Robert Mognet
Hello, On Mon, Dec 03, 2001 at 06:14:33PM +0100, Tarjei Huse wrote: How can I find these processes? cd /proc for n in [0-9]* ; do echo -n pid: $n ; cat $n/cmdline; echo; done Hth Robert -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL

Re: Rãspuns: finding hidden processes

2001-12-03 Thread Tarjei Huse
, December 03, 2001 9:15 AM Catre: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subiect: finding hidden processes Hi If I run chkproc from the chkrootid package I get: You have 3 process hidden for readdir command You have 3 process hidden for ps command How can I find these processes

Re: Rãspuns: finding hidden processes

2001-12-03 Thread Tim Haynes
Tarjei Huse [EMAIL PROTECTED] writes upside-down: Thanks, I got: dev_to_tty tdev /dev/pts/%s /dev/%s /dev/tty%s /dev/pty%s /dev/%snsole Obsolete W option not supported. (You have a /dev/drum?) [snip] Identical to the same for /bin/ps on woody. I'd also include looking for `lib' as

Re: Rãspuns: Rãspuns: finding hidden processes

2001-12-03 Thread Tarjei Huse
, Dani. -Mesaj original- De la: Tarjei Huse [mailto:[EMAIL PROTECTED]] Trimis: Monday, December 03, 2001 1:01 PM Catre: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subiect: Re: Rãspuns: finding hidden processes Thanks, I got: dev_to_tty tdev /dev/pts/%s /dev/%s /dev/tty%s /dev/pty%s

Re: R?spuns: R?spuns: finding hidden processes

2001-12-03 Thread Uriah Welcome
On Mon, Dec 03, 2001 at 11:02:27PM +0100, Tarjei Huse wrote: Thanks to everyone who answered. I think I found the answer: I got three apps who has been installed --with-prefix=/usr/local/appname Their pidfiles will then be in /usr/local/app/var/ not? Thus they will not be in the

Re: finding hidden processes

2001-12-03 Thread Robert Mognet
On Mon, Dec 03, 2001 at 07:29:22PM +0100, Tarjei Huse wrote: For those few pid's which return no cmdline info (for instance): pid: 111 pid: 2 pid: 3 pid: 4 pid: 429 etc... You can usually get some helpful info using: cd /proc cat pid/status Regards, Robert -- To UNSUBSCRIBE,

finding hidden processes

2001-12-03 Thread Tarjei Huse
Hi If I run chkproc from the chkrootid package I get: You have 3 process hidden for readdir command You have 3 process hidden for ps command How can I find these processes? Tarjei

Re: finding hidden processes

2001-12-03 Thread Johan Kiviniemi
On Mon, Dec 03, 2001 at 06:14:55PM +0100, Tarjei Huse wrote: Hi If I run chkproc from the chkrootid package I get: You have 3 process hidden for readdir command You have 3 process hidden for ps command How can I find these processes? Tarjei Try running chkproc -v and cat

Re: finding hidden processes

2001-12-03 Thread bryan
Hi If I run chkproc from the chkrootid package I get: You have 3 process hidden for readdir command You have 3 process hidden for ps command How can I find these processes? Use a ps command from an uncorrupted system. If you made a bootable CD for installing your system you can

Re: finding hidden processes

2001-12-03 Thread Tarjei Huse
Could this be caused because I do not have all pids in the same dir? Tarjei [EMAIL PROTECTED] wrote: Hi If I run chkproc from the chkrootid package I get: You have 3 process hidden for readdir command You have 3 process hidden for ps command How can I find these processes?

Re: finding hidden processes

2001-12-03 Thread Robert Mognet
Hello, On Mon, Dec 03, 2001 at 06:14:33PM +0100, Tarjei Huse wrote: How can I find these processes? cd /proc for n in [0-9]* ; do echo -n pid: $n ; cat $n/cmdline; echo; done Hth Robert

Re: finding hidden processes

2001-12-03 Thread Tarjei Huse
Thanks to all who answered. I'm trying toanswer the question is this suspicious? and if yes what could normal explenations be? All help is highly appreciated :) PS: I'm running CyrusImapd, I seem to remember that cyrus does not use pid, could this be true? And would that be the answer to the

Rãspuns: finding hidden processes

2001-12-03 Thread Petre Daniel
-Mesaj original- De la: Tarjei Huse [mailto:[EMAIL PROTECTED] Trimis: Monday, December 03, 2001 9:15 AM Catre: debian-security@lists.debian.org Cc: debian-security@lists.debian.org Subiect: finding hidden processes Hi If I run chkproc from the chkrootid package I get: You have 3

Re: Rãspuns: finding hidden processes

2001-12-03 Thread Tarjei Huse
, December 03, 2001 9:15 AM Catre: debian-security@lists.debian.org Cc: debian-security@lists.debian.org Subiect: finding hidden processes Hi If I run chkproc from the chkrootid package I get: You have 3 process hidden for readdir command You have 3 process hidden for ps command How

Re: Rãspuns: finding hidden processes

2001-12-03 Thread Tim Haynes
Tarjei Huse [EMAIL PROTECTED] writes upside-down: Thanks, I got: dev_to_tty tdev /dev/pts/%s /dev/%s /dev/tty%s /dev/pty%s /dev/%snsole Obsolete W option not supported. (You have a /dev/drum?) [snip] Identical to the same for /bin/ps on woody. I'd also include looking for `lib' as well,

Rãspuns: Rãspuns: finding hidden processes

2001-12-03 Thread Petre Daniel
original- De la: Tarjei Huse [mailto:[EMAIL PROTECTED] Trimis: Monday, December 03, 2001 1:01 PM Catre: debian-security@lists.debian.org Cc: debian-security@lists.debian.org Subiect: Re: Rãspuns: finding hidden processes Thanks, I got: dev_to_tty tdev /dev/pts/%s /dev/%s /dev/tty%s /dev/pty%s /dev

Re: Rãspuns: Rãspuns: finding hidden processes

2001-12-03 Thread Tarjei Huse
, Dani. -Mesaj original- De la: Tarjei Huse [mailto:[EMAIL PROTECTED] Trimis: Monday, December 03, 2001 1:01 PM Catre: debian-security@lists.debian.org Cc: debian-security@lists.debian.org Subiect: Re: Rãspuns: finding hidden processes Thanks, I got: dev_to_tty tdev /dev/pts/%s

Re: R?spuns: R?spuns: finding hidden processes

2001-12-03 Thread Uriah Welcome
On Mon, Dec 03, 2001 at 11:02:27PM +0100, Tarjei Huse wrote: Thanks to everyone who answered. I think I found the answer: I got three apps who has been installed --with-prefix=/usr/local/appname Their pidfiles will then be in /usr/local/app/var/ not? Thus they will not be in the

Re: finding hidden processes

2001-12-03 Thread Robert Mognet
On Mon, Dec 03, 2001 at 07:29:22PM +0100, Tarjei Huse wrote: For those few pid's which return no cmdline info (for instance): pid: 111 pid: 2 pid: 3 pid: 4 pid: 429 etc... You can usually get some helpful info using: cd /proc cat pid/status Regards, Robert