Page is a not externally linkable
- Hardware and OS Related Technologies
-- Linux, Unix, and *nix like Operating Systems
---- Locate a malicious apache script /process - need help!


digitsix - 8:44 am on Feb 16, 2009 (gmt 0)


So my bandwidth for my server just got throttled the other day because my server started using extreme bandwidth all of the sudden. I noticed some strange netstat connections and tied it with two perl processes that were being parented by httpd processes. I have no idea how to "trace" the process to figure out the path to the script that is being run to cause me these problems. Is there a way to do this? I searched the net for a solution but havent found one.


Thread source:: http://www.webmasterworld.com/linux/3850459.htm
Brought to you by WebmasterWorld: http://www.webmasterworld.com