On Sat, 28 Aug 2010, Robert Nesius wrote:

> I apologize, Yaron.  I thought I had removed all DNS-related
> hangs from my root kit's logger. 

*grins* if you were trying to rootkit any of my machines I'd personally 
have gone with one that's, you know, on the internet like my mail or 
webservers, rather than my media server. I mean if you want my MythTV 
settings you can just ask!

> suppose you could ssh into the box and attach a stack tracer to the 
> daemon handling logins and follow forks...  (I haven't tried this, but 
> it could work.)


The SMALL problem with that is I'd have to ssh in as root which is just... 
ewww. But I'd do it on a temporary basis if it'll help solve this.

The bigger problems are A) What daemon do I attach a stack tracer to, and 
B) What the heck is a stack tracer? (ok I assume that's strace or truss or 
ptrace or whatever the Linux equivalent of those is).


-Yaron

--