Re: htop vs ps

[Camaleón <noelamac@gmail.com>]

On Thu, 10 Feb 2011 14:49:47 -0600, Hugo Vanwoerkom wrote:

> Camaleón wrote:

>>> that produces a blank: no ideas :-(
>> 
>> Maybe because the process is already gone :-?
>> 
>> Can you still see it under htop/top?
> 
> Rebooted, new PIDs, apcupsd on htop has 2: 2594 and 2550 but ps only
> shows 2550 and /proc/2550 exists, 2594 does not.
> 
> I don't think it is a rootkit because I get this on any system that I
> run apcupsd on, even new installs, and rkhunter shows nothing.
> 
> Where does htop get that PID?
> 
> I will ask on the apcupsd mailing list.

You can also make use of the switches of "htop" like "s" to strace the 
misterious process :-?

Greetings,

-- 
Camaleón