Web Hosting Talk







View Full Version : how do i find out who did this? mremap_pte


Matt2001
04-12-2004, 03:36 PM
I found this hogging CPU,

mremap_pte

How do i locate which user on my server was running it? I killed the process while it was running, how do i know if they were able to compromise the server? any help pleaes

rghf
04-12-2004, 03:44 PM
I would guess that your server has been exploited as that sounds/looks like an exploit for the mremap linux kernel bug

Rus

Matt2001
04-12-2004, 03:47 PM
how do i track down the person? I know i need to look at the .bash_history files, but the account that i think did it has no file there. I know this is a newbie question, but where are the main .bash_history files located?