|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
From: Seth Arnold (sarnold
wirex.com)Date: Tue Oct 09 2001 - 11:11:24 CDT
On Sat, Oct 06, 2001 at 11:40:31AM +0100, Crg wrote:
> Recently I've notice through top, a process running called "3" which
> takes up all my spare CPU cycles. Would anyone know what this is?
I'd suggest it is up to no good, but that is just a guess. :) (It could
just be a programming mistake.)
Check what files it has open with 'lsof' or 'fuser'. Check that against
what you find in /proc/<pid of '3'>/maps. See what the /proc/<pid of
'3'> directory contains in general.
Check netstat -a to see if you have any unexpected ports open. If you
can, compare this list against what you can find out using nmap from
another machine.
Depending on what you find here, and your experience, you may wish to
attach a debugger, such as gdb, to the running process and see what you
can see. See if 'pstree' will help you figure out where it got started.
Have fun :)
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]