[wellylug] users logged in do not much current logged in users...

[Chris Hodgetts]

On Fri, 2006-02-03 at 12:45 +1300, Phillip Hutchings wrote:
> On 3/02/2006, at 12:28 PM, Chris Hodgetts wrote:
> 
> > I cant think of anything that might be causing this....
> 
> Some programs can create a login without attaching a shell, can't  
> really tell without ps output.

I wont bore any one with a ps output... :)

> It could be a kernel module rootkit. Is chkrootkit statically linked  
> against a clean install? I have a x86 bundle here of chkrootkit  
> linked against busybox, it also includes a utility to check the  
> kernel dispatch table against the System.map file.

right -- I might have a look at that... didnt think of that one.

> Other than that, have you had any issues with processes segfaulting  
> unexpectedly? Unexplainable load averages? Odd network traffic?

Nope not that I know of, and there has been no odd network traffic that
I can see.


Cheers :)