From owner-freebsd-questions Mon Jun 22 12:32:09 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA04239 for freebsd-questions-outgoing; Mon, 22 Jun 1998 12:32:09 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from ikhala.tcimet.net (ikhala.tcimet.net [198.109.166.215]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA04183 for ; Mon, 22 Jun 1998 12:31:54 -0700 (PDT) (envelope-from dervish@ikhala.tcimet.net) Received: (from dervish@localhost) by ikhala.tcimet.net (8.8.8/8.8.8) id PAA10235; Mon, 22 Jun 1998 15:36:19 -0400 (EDT) (envelope-from dervish) From: bush doctor Message-Id: <199806221936.PAA10235@ikhala.tcimet.net> Subject: Re: Looking for hackers with netstat In-Reply-To: from Jeremy Shaffner at "Jun 22, 98 01:10:00 pm" To: jer@jorsm.com (Jeremy Shaffner) Date: Mon, 22 Jun 1998 15:36:19 -0400 (EDT) Cc: questions@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL38 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Once upon a time said: > On Mon, 22 Jun 1998, bush doctor wrote: > > > 3. command& # executed on remote host ... > > Because you put it in the background. ok ... > > > I notice that my processes no longer show up in w or who commands ... > > is this one of the things hackers are doing to advoid detection. > > Processes does still show up with a `ps -axl' > > guess it's time to get a couple of titles on security ... > > > -===================================================================- > Jeremy Shaffner JORSM Internet > Senior Technical Support Northwest Indiana's Premium > jer@jorsm.com Internet Service Provider > support@jorsm.com http://www.jorsm.com > -===================================================================- > > thanxs ... =;-) -- bush doctor To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message