Bernard Tyers the net:
> 4424 0.0 0.9 972 352 ? S 21:08 0:00
sleep 60
what's the parent process?
> 4443 0.0 1.0 884 400 p4 S 21:09 0:00 grep
>>obvioulsy, user names have been sniped. also too has the
telnet
>destination.
>>My question(s) is what is a sleep *0? (other than the
obvious) why/where
>would it be used?
>also run_rwbs? anyone ideas?
>>just wondered. have seen this sleeps runnin in other places
too.
Nice to see we are being talked about anyway...... The porgram in question
is called Roger Wilcon http://www.rogerwilco.com/ Its a "A virtual
walkie-talkie app that runs alongside your favorite multiplayer online
games. Hundreds of people per channel -- using 28.8 modems without a
server. "
This program is being run with permission by the user in question.
Thats also the
13029 0.0 2.0 1572 812 ? S N May 26 4:02 /bin/sh ./run_rwbs
I am persuming that this explains all the other stuff in the ps list.....
Well we are re-installing and upgrading tomorrow anyway so I that
will solve it if this is some sort of DoS attack.
---------------------------------------------------------------------
John Hegarty ,WIT Computer Society
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!