From owner-freebsd-questions@FreeBSD.ORG Thu Dec 10 19:54:57 2009 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id ABC08106568B for ; Thu, 10 Dec 2009 19:54:57 +0000 (UTC) (envelope-from freebsd-questions@pp.dyndns.biz) Received: from proxy2.bredband.net (proxy2.bredband.net [195.54.101.72]) by mx1.freebsd.org (Postfix) with ESMTP id 61DD88FC0A for ; Thu, 10 Dec 2009 19:54:57 +0000 (UTC) Received: from ipb1.telenor.se (195.54.127.164) by proxy2.bredband.net (7.3.140.3) id 4AD3E1BC019FBF6D for questions@freebsd.org; Thu, 10 Dec 2009 20:34:34 +0100 X-SMTPAUTH-B2: X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AuZaADTcIEtV4js3PGdsb2JhbACBS5chglEBAQEBN7wYhCsEgWM X-IronPort-AV: E=Sophos;i="4.47,376,1257116400"; d="scan'208";a="14041213" Received: from c-373be255.107-1-64736c10.cust.bredbandsbolaget.se (HELO gatekeeper.pp.dyndns.biz) ([85.226.59.55]) by ipb1.telenor.se with ESMTP; 10 Dec 2009 20:34:34 +0100 Received: from [192.168.69.67] (phobos [192.168.69.67]) by gatekeeper.pp.dyndns.biz (8.14.3/8.14.3) with ESMTP id nBAJYW8a025699 for ; Thu, 10 Dec 2009 20:34:33 +0100 (CET) (envelope-from freebsd-questions@pp.dyndns.biz) Message-ID: <4B214D48.9060000@pp.dyndns.biz> Date: Thu, 10 Dec 2009 20:34:32 +0100 From: =?ISO-8859-1?Q?Morgan_Wesstr=F6m?= User-Agent: Thunderbird 2.0.0.23 (X11/20091010) MIME-Version: 1.0 To: FreeBSD Questions References: <20091030034812.GU29215@dan.emsphone.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: Subject: Re: Get the cwd of a process? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Dec 2009 19:54:57 -0000 patrick wrote: > I've made some headway... perl supports "sitecustomize.pl" which can > be used to execute code when any perl script is run. It doesn't seem > to be enabled by default, so I had to add the following line to > /usr/ports/lang/perl5.8/Makefile's CONFIGURE_ARGS: > > -Dusesitecustomize \ > > As a temporary measure, my sitecustomize.pl has: > > system "echo $$ $ENV{'PWD'} $0 ". (localtime) . " >>/tmp/scripts_used.lst"; > > (found this in another thread somewhere) > > So, hopefully the next time this spammer comes back, I will see the > original working directory, etc. before the process forks itself. > Fingers crossed! > > Patrick For the mail archives and also my personal interest - did you ever figure out what was running the script? /Morgan