I found 2 related bits of info so far.  Starting with lighter reading:
http://www.securityfocus.com/templates/column.html?id=12

Then there's another with quite a bit of data that I'm just starting to
wade into:
http://www.linuxsecurity.com/resource_files/host_security/lkm.htm

If you happen across some good reading on the topic I'd like to hear
about it.

Steve

"John (EBo) David" wrote:
> 
> ... snip
> hmmm... I've noticed some odd behaviour on my machine for quite a
> while.  It could well be valid system behaviour, but I've never been
> sure...  Where do you read up on these beasties?
> 
>  EBo --