Mike wrote: >how do you do it? I mean, will there be a new process (ps -e) or something? > > There may be, or your ps may be compromised and won't show anything unusual. There are some rootkit detectors out there, but I can't recall them. First, though: what makes you suspect you have been compromised? If you suspect something, the reason you suspect may be the biggest clue. -- Darrin Chandler | Phoenix BSD Users Group dwchandler@stilyagin.com | http://bsd.phoenix.az.us/ http://www.stilyagin.com/ | --------------------------------------------------- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change you mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss