On Fri, 2008-03-28 at 12:07 +0200, Mika Mäkinen wrote: > hello > I have Debian 4.0 and possibly a rootkit. does []s indicate > a rootkit in ps aux result? I suppose [] does not belong to > regular ps aux result. > The use of square brackets ([]) in the ps output is perfectly normal. >From the ps man page:
Sometimes the process args will be unavailable; when this happens, ps will instead print the executable name in brackets. John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839 ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users
