Camaleón wrote:
On Thu, 10 Feb 2011 13:33:18 -0600, Hugo Vanwoerkom wrote:Camaleón wrote:On Thu, 10 Feb 2011 12:48:44 -0600, Hugo Vanwoerkom wrote:When I look of apcupsd in htop I see 2 pids: 2632 + 2610 When I do: ~Thu Feb 10-12:47:03SDA6# ps -Al|grep apcupsd 1 S 0 2610 1 0 100 0 - 11588 - ? 00:00:02 apcupsd I only see 1 pid. Why the difference? WHO IS 2632?"lsof -p 2632" (as root) may give you some ideas.that produces a blank: no ideas :-(Maybe because the process is already gone :-? Can you still see it under htop/top?
Rebooted, new PIDs, apcupsd on htop has 2: 2594 and 2550 but ps only shows 2550 and /proc/2550 exists, 2594 does not.
I don't think it is a rootkit because I get this on any system that I run apcupsd on, even new installs, and rkhunter shows nothing.
Where does htop get that PID? I will ask on the apcupsd mailing list. Hugo