Re: Rogue Processes

On Sun, 2006-01-15 at 22:27 +0100, Gregory Nou wrote:
> Dev Tugnait wrote:
> > I seem to notice these two processes running with top.
> >
> > Netstat hasn't been issued by me and cant be killed with the START
> > state. Can someone enlighten me on these processes.
> >
> > FreeBSD dracula.transylvania.net 6.0-RELEASE FreeBSD 6.0-RELEASE #4: Sun
> > Dec 4 00:22:01 EST 2005
> > root@xxxxxxxxxxxxxxxxxxxxxxxx:/usr/src/sys/i386/compile/BLEACH i386
> >
> > The box doesnt run ssh or telnet just postfix relaying to my external
> > webhost.
> >
> >
> > 89290 dark 1 96 0 0K 0K START 0:06 0.00%
> > awt_robot
> >
> > 10208 dark 1 -8 0 0K 0K START 0:00 3.00%
> > netstat
> >
> > Thanks
> >
>
> I would be tempted to say that awt_robot is the java thing.
> http://java.sun.com/j2se/1.3/docs/api/java/awt/Robot.html
> It's is a class to allow you to program a demo.
> Do you have java installed on this machine ?

Yes killing java fixed that thanks. I still dont know why netstat is
eating my CPU

--
Dev Tugnait <dev@xxxxxxxxxxxxxx>

_______________________________________________
freebsd-security@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: Help, my machine has been hacked
    ... >> also take a look at processes running in your system, ... >> opened (netstat -tupan), environment changesetc. ... If you provide port 80 to the outside ... filter invalid packets, in particular tcp scans with invalid flags, where ...
    (comp.os.linux.security)
  • Rogue Processes
    ... I seem to notice these two processes running with top. ... Netstat hasn't been issued by me and cant be killed with the START ... Dev Tugnait ...
    (FreeBSD-Security)
  • Possible breakage in 2.6.16?
    ... no longer functions for anything as even a 'netstat --version' takes the ... increase in the number of processes running as reported by gkrellm, ... Is this a known problem because my net-tools rpm is old? ... Copyright 2006 by Maurice Eugene Heskett, ...
    (Linux-Kernel)
  • Re: redhat 9 machine pings out every 10 and 26 seconds
    ... I've had a good look at netstat -a etc and can't see anything that ... ps aux should list the processes running. ...
    (comp.os.linux.security)
  • Re: [SLE] Netstat reports static IP connection
    ... static ip connections: ... Is there a calling home function in the java module? ... Inside it is where java applets run when you go ... By the way, try "netstat -tupan" instead, for a more complete readout. ...
    (SuSE)