Very Computer

by **Egon** » Sat, 16 Sep 2000 04:00:00

First at all thanx for reading this.
I cant find answers in any HOWTO about this Questions.
Can someone help ?

I got on a Linux-System (RedHat 6.1), some processes i cant kill,
it is the slocate process startet from crond,
there are about 20 process that cant be stopped
by any kill even SIGKILL as signal ???
What is it, can it be an attack ???

by **Wayne Polloc** » Sat, 16 Sep 2000 04:00:00

> First at all thanx for reading this.
> I cant find answers in any HOWTO about this Questions.
> Can someone help ?

> I got on a Linux-System (RedHat 6.1), some processes i cant kill,
> it is the slocate process startet from crond,
> there are about 20 process that cant be stopped
> by any kill even SIGKILL as signal ???
> What is it, can it be an attack ???

Most likely you were not root when you tried to kill the
processes. Only root can kill processes that don't belong to
the current user.

Less likely but possible is that the processes are already dead,
actually "zombie" processes. Not all zombies will be identified
as such when running ps. Such processes are not actually
running anymore, and the process table entry will be cleaned
up when you reboot.

A last possibility is that the process was started by init via
"respawn". You can check /etc/inittab to see if this was the problem.

-Wayne Pollock

by **Chris Ahlstro** » Sat, 16 Sep 2000 04:00:00

> First at all thanx for reading this.
> I cant find answers in any HOWTO about this Questions.
> Can someone help ?

> I got on a Linux-System (RedHat 6.1), some processes i cant kill,
> it is the slocate process startet from crond,
> there are about 20 process that cant be stopped
> by any kill even SIGKILL as signal ???
> What is it, can it be an attack ???

Run the "top" app from the command line. It'll give you a
"tab of processes" and try to count zombie processes.

Chris

--
[X] Check here to always trust content from Chris
[ ] Check here to accept charges from Microsoft

by **David Efflan** » Sun, 17 Sep 2000 11:29:12

>First at all thanx for reading this.
>I cant find answers in any HOWTO about this Questions.
>Can someone help ?

>I got on a Linux-System (RedHat 6.1), some processes i cant kill,
>it is the slocate process startet from crond,
>there are about 20 process that cant be stopped
>by any kill even SIGKILL as signal ???
>What is it, can it be an attack ???

It means that you are up too late, or too early. If this happens at
around 4:00 AM, it is just the cron.daily running /usr/bin/updatedb, so
your 'locate' command (officially slocate) has a current list of files.

Try: locate locate

--

http://www.autox.chicago.il.us/ http://www.berniesfloral.net/
http://hammer.prohosting.com/~cgi-wiz/ http://cgi-help.virtualave.net/

Very Computer

slocate-attack ???

slocate-attack ???

slocate-attack ???

slocate-attack ???

slocate-attack ???