From owner-freebsd-security@FreeBSD.ORG Sun Jan 15 21:18:01 2006 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5AD4F16A41F for ; Sun, 15 Jan 2006 21:18:01 +0000 (GMT) (envelope-from dev@unixdaemon.org) Received: from skewer.dreamhost.com (skewer.dreamhost.com [64.111.107.13]) by mx1.FreeBSD.org (Postfix) with ESMTP id 29F5943D46 for ; Sun, 15 Jan 2006 21:18:01 +0000 (GMT) (envelope-from dev@unixdaemon.org) Received: from [192.168.1.100] (cpe-24-24-83-9.stny.res.rr.com [24.24.83.9]) by skewer.dreamhost.com (Postfix) with ESMTP id 7BF977B4A0 for ; Sun, 15 Jan 2006 13:18:00 -0800 (PST) From: Dev Tugnait To: freebsd-security@freebsd.org Content-Type: text/plain Date: Sun, 15 Jan 2006 16:17:56 -0500 Message-Id: <1137359877.2822.53.camel@dracula.transylvania.net> Mime-Version: 1.0 X-Mailer: Evolution 2.4.2.1 FreeBSD GNOME Team Port Content-Transfer-Encoding: 7bit Subject: Rogue Processes X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: dev@unixdaemon.org List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 Jan 2006 21:18:01 -0000 I seem to notice these two processes running with top. Netstat hasn't been issued by me and cant be killed with the START state. Can someone enlighten me on these processes. FreeBSD dracula.transylvania.net 6.0-RELEASE FreeBSD 6.0-RELEASE #4: Sun Dec 4 00:22:01 EST 2005 root@dracula.transylvania.net:/usr/src/sys/i386/compile/BLEACH i386 The box doesnt run ssh or telnet just postfix relaying to my external webhost. 89290 dark 1 96 0 0K 0K START 0:06 0.00% awt_robot 10208 dark 1 -8 0 0K 0K START 0:00 3.00% netstat Thanks -- Dev Tugnait