[nmglug] unknown processes, sh -i

[Mars DeLapp]

Andres Paglayan wrote:
> someone running your bash shell interactively?
> SYN_SENT has to do with scanning

Or four shells, one of which is doing some scanning.

Your next step should probably be to unplug the network connection if you have not done that already.

Then follow these steps:

http://www.cert.org/tech_tips/win-UNIX-system_compromise.html



Mars


-- 
=============================================================
J. Marsden DeLapp, PE
President
DeLapp & Associates, Inc. dba DeLapp Engineering®
Providing lighting and power planning, design and analysis services
for commercial, industrial and large residential facilities.
1190 Harrison Rd Ste 3a
Santa Fe NM 87507
(505) 983-5557
http://DeLapp.com
=============================================================