Script started on Tue Oct 10 19:59:19 2000
~/checkps$ tl[Ktelnet 127/ .0.0.1
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.

Red Hat Linux release 3.0.3 (Picasso)
Kernel 2.2.9 on a i686

io login: dps
Password: 
Last login: Tue Oct 10 18:57:21 from localhost
~$ su
Password:

/home/dps# cd checkps
/home/dps/checkps# sleep 600 &
[1] 28847
/home/dps/checkps# ./check_ps_test
Oct 10  19:59:56  pid 28809: pid 28809 state S, ppid=1 pgrp=28809 session=28792

Oct 10  19:59:56  pid 1: pid 1 state S, ppid=0 pgrp=0 session=0

Oct 10  19:59:56  pid 28809: pid 28809 state S, ppid=1 pgrp=28809 session=28792

Oct 10  19:59:56  Could not open /proc/28792/stat (errno  2 aka. No such file or directory)
Oct 10  19:59:56  Problem openning /proc/28792/stat. This is very suspicious
Oct 10  19:59:56  pid 28809: command `sleep' 
Oct 10  19:59:56  pid 1: command `init [5]' 
Oct 10  19:59:56  pid 1: fd 10 is fifo dev 1 (0:1) inode 40 (owner u=0 g=0)
Oct 10  19:59:56  Could not open /proc/28792/cmdline (errno  2 aka. No such file or directory)
Oct 10  19:59:56  pid 28792: could not obtain command line

Oct 10  19:59:56  pid 28809: command `sleep' 
Oct 10  19:59:57  Hidden pid 28809
Oct 10  19:59:57  pid 28847: pid 28847 state S, ppid=28846 pgrp=28847 session=28829

Oct 10  19:59:57  pid 28846: pid 28846 state S, ppid=28829 pgrp=28846 session=28829

Oct 10  19:59:57  pid 28847: pid 28847 state S, ppid=28846 pgrp=28847 session=28829

Oct 10  19:59:57  pid 28829: pid 28829 state S, ppid=28826 pgrp=28829 session=28829

Oct 10  19:59:57  pid 28847: command `sleep' 
Oct 10  19:59:57  pid 28826: command `in.telnetd' 
Oct 10  19:59:57  pid 28826: fd 5 is a stream (1) socket from 127.0.0.1, port 1211 to 127.0.0.1, port 23 (owner u=0 g=0)
Oct 10  19:59:57  pid 28826: fd 5 is a stream (1) socket from 127.0.0.1, port 1211 to 127.0.0.1, port 23 (owner u=0 g=0)
Oct 10  19:59:57  pid 28826: fd 5 is a stream (1) socket from 127.0.0.1, port 1211 to 127.0.0.1, port 23 (owner u=0 g=0)
Oct 10  19:59:57  pid 28826: fd 3 is block dev 502 (5:2) [file: dev 1 (0:1) inode 11 (owner u=0 g=0)]
Oct 10  19:59:57  pid 28829: command `-bash' 
Oct 10  19:59:57  pid 28829: fd 0 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  19:59:57  pid 28829: fd 1 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  19:59:57  pid 28829: fd 2 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  19:59:57  pid 28846: command `bash' 
Oct 10  19:59:57  pid 28846: fd 0 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  19:59:57  pid 28846: fd 1 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  19:59:57  pid 28846: fd 2 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  19:59:57  pid 28847: command `sleep' 
Oct 10  19:59:57  pid 28847: fd 0 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  19:59:57  pid 28847: fd 1 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  19:59:57  pid 28847: fd 2 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  19:59:57  Hidden pid 28847
Oct 10  19:59:57  Some pids seem to be fake
Please press enter to do retest (^Z enabled now)

Thankyou (^Z now disabled again)
Oct 10  20:00:04  rechecking ps
Oct 10  20:00:04  Fake pid 5999 detected
Oct 10  20:00:04  pid 28809: pid 28809 state S, ppid=1 pgrp=28809 session=28792

Oct 10  20:00:04  pid 1: pid 1 state S, ppid=0 pgrp=0 session=0

Oct 10  20:00:04  pid 28809: pid 28809 state S, ppid=1 pgrp=28809 session=28792

Oct 10  20:00:04  Could not open /proc/28792/stat (errno  2 aka. No such file or directory)
Oct 10  20:00:04  Problem openning /proc/28792/stat. This is very suspicious
Oct 10  20:00:04  pid 28809: command `sleep' 
Oct 10  20:00:04  pid 1: command `init [5]' 
Oct 10  20:00:04  pid 1: fd 10 is fifo dev 1 (0:1) inode 40 (owner u=0 g=0)
Oct 10  20:00:04  Could not open /proc/28792/cmdline (errno  2 aka. No such file or directory)
Oct 10  20:00:04  pid 28792: could not obtain command line

Oct 10  20:00:04  pid 28809: command `sleep' 
Oct 10  20:00:04  Hidden pid 28809
Oct 10  20:00:04  pid 28847: pid 28847 state S, ppid=28846 pgrp=28847 session=28829

Oct 10  20:00:04  pid 28846: pid 28846 state S, ppid=28829 pgrp=28846 session=28829

Oct 10  20:00:04  pid 28847: pid 28847 state S, ppid=28846 pgrp=28847 session=28829

Oct 10  20:00:04  pid 28829: pid 28829 state S, ppid=28826 pgrp=28829 session=28829

Oct 10  20:00:04  pid 28847: command `sleep' 
Oct 10  20:00:04  pid 28826: command `in.telnetd' 
Oct 10  20:00:04  pid 28826: fd 7 is a stream (1) socket from 127.0.0.1, port 1211 to 127.0.0.1, port 23 (owner u=0 g=0)
Oct 10  20:00:04  pid 28826: fd 7 is a stream (1) socket from 127.0.0.1, port 1211 to 127.0.0.1, port 23 (owner u=0 g=0)
Oct 10  20:00:04  pid 28826: fd 7 is a stream (1) socket from 127.0.0.1, port 1211 to 127.0.0.1, port 23 (owner u=0 g=0)
Oct 10  20:00:04  pid 28826: fd 3 is block dev 502 (5:2) [file: dev 1 (0:1) inode 11 (owner u=0 g=0)]
Oct 10  20:00:04  pid 28829: command `-bash' 
Oct 10  20:00:04  pid 28829: fd 0 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  20:00:04  pid 28829: fd 1 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  20:00:04  pid 28829: fd 2 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  20:00:04  pid 28846: command `bash' 
Oct 10  20:00:04  pid 28846: fd 0 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  20:00:04  pid 28846: fd 1 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  20:00:04  pid 28846: fd 2 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  20:00:04  pid 28847: command `sleep' 
Oct 10  20:00:04  pid 28847: fd 0 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  20:00:04  pid 28847: fd 1 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  20:00:04  pid 28847: fd 2 is block dev 8801 (136:1) [file: dev 1 (0:1) inode ec (owner u=405 g=7)]
Oct 10  20:00:04  Hidden pid 28847
/home/dps/checkps# exit
exit
~$ exit
logout
[H[2JConnection closed by foreign host.
~/checkps$ sleep 600 &
[1] 28882
~/checkps$ ./check_ps_test
Oct 10  20:01:40  pid 28809: pid 28809 state S, ppid=1 pgrp=28809 session=28792

Oct 10  20:01:40  pid 1: pid 1 state S, ppid=0 pgrp=0 session=0

Oct 10  20:01:40  pid 28809: pid 28809 state S, ppid=1 pgrp=28809 session=28792

Oct 10  20:01:40  Could not open /proc/28792/stat (errno  2 aka. No such file or directory)
Oct 10  20:01:40  Problem openning /proc/28792/stat. This is very suspicious
Oct 10  20:01:40  pid 28809: command `sleep' 
Oct 10  20:01:40  pid 1: command `init [5]' 
Oct 10  20:01:40  pid 1: could not open /proc/1/fd (error Permission denied)
Oct 10  20:01:40  Could not open /proc/28792/cmdline (errno  2 aka. No such file or directory)
Oct 10  20:01:40  pid 28792: could not obtain command line

Oct 10  20:01:40  pid 28809: command `sleep' 
Oct 10  20:01:40  Hidden pid 28809
Oct 10  20:01:40  pid 28847: pid 28847 state S, ppid=1 pgrp=28847 session=28829

Oct 10  20:01:40  pid 1: pid 1 state S, ppid=0 pgrp=0 session=0

Oct 10  20:01:40  pid 28847: pid 28847 state S, ppid=1 pgrp=28847 session=28829

Oct 10  20:01:40  Could not open /proc/28829/stat (errno  2 aka. No such file or directory)
Oct 10  20:01:40  Problem openning /proc/28829/stat. This is very suspicious
Oct 10  20:01:40  pid 28847: command `sleep' 
Oct 10  20:01:40  pid 1: command `init [5]' 
Oct 10  20:01:40  pid 1: could not open /proc/1/fd (error Permission denied)
Oct 10  20:01:40  Could not open /proc/28829/cmdline (errno  2 aka. No such file or directory)
Oct 10  20:01:40  pid 28829: could not obtain command line

Oct 10  20:01:40  pid 28847: command `sleep' 
Oct 10  20:01:40  pid 28847: could not open /proc/28847/fd (error Permission denied)
Oct 10  20:01:40  Hidden pid 28847
Oct 10  20:01:40  pid 28882: pid 28882 state S, ppid=28824 pgrp=28882 session=28824

Oct 10  20:01:40  pid 28824: pid 28824 state S, ppid=28823 pgrp=28824 session=28824

Oct 10  20:01:40  pid 28882: pid 28882 state S, ppid=28824 pgrp=28882 session=28824

Oct 10  20:01:40  pid 28824: pid 28824 state S, ppid=28823 pgrp=28824 session=28824

Oct 10  20:01:40  pid 28882: command `sleep' 
Oct 10  20:01:40  pid 28823: command `script' 
Oct 10  20:01:40  pid 28823: fd 1 is block dev 304 (3:4) [file: dev 1 (0:1) inode e6 (owner u=405 g=6)]
Oct 10  20:01:40  pid 28823: fd 2 is block dev 304 (3:4) [file: dev 1 (0:1) inode e6 (owner u=405 g=6)]
Oct 10  20:01:40  pid 28823: fd 3 is regular file dev 1605 (22:5), inode 11024 (owner u=405 g=6)
Oct 10  20:01:40  pid 28824: command `sh' 
Oct 10  20:01:40  pid 28824: fd 0 is block dev 305 (3:5) [file: dev 1 (0:1) inode eb (owner u=405 g=6)]
Oct 10  20:01:40  pid 28824: fd 1 is block dev 305 (3:5) [file: dev 1 (0:1) inode eb (owner u=405 g=6)]
Oct 10  20:01:40  pid 28824: fd 2 is block dev 305 (3:5) [file: dev 1 (0:1) inode eb (owner u=405 g=6)]
Oct 10  20:01:40  pid 28882: command `sleep' 
Oct 10  20:01:40  pid 28882: fd 0 is block dev 305 (3:5) [file: dev 1 (0:1) inode eb (owner u=405 g=6)]
Oct 10  20:01:40  pid 28882: fd 1 is block dev 305 (3:5) [file: dev 1 (0:1) inode eb (owner u=405 g=6)]
Oct 10  20:01:40  pid 28882: fd 2 is block dev 305 (3:5) [file: dev 1 (0:1) inode eb (owner u=405 g=6)]
Oct 10  20:01:40  Hidden pid 28882
Oct 10  20:01:40  Some pids seem to be fake
Please press enter to do retest (^Z enabled now)

Thankyou (^Z now disabled again)
Oct 10  20:01:43  rechecking ps
Oct 10  20:01:43  Fake pid 5999 detected
Oct 10  20:01:43  pid 28809: pid 28809 state S, ppid=1 pgrp=28809 session=28792

Oct 10  20:01:43  pid 1: pid 1 state S, ppid=0 pgrp=0 session=0

Oct 10  20:01:43  pid 28809: pid 28809 state S, ppid=1 pgrp=28809 session=28792

Oct 10  20:01:43  Could not open /proc/28792/stat (errno  2 aka. No such file or directory)
Oct 10  20:01:43  Problem openning /proc/28792/stat. This is very suspicious
Oct 10  20:01:43  pid 28809: command `sleep' 
Oct 10  20:01:43  pid 1: command `init [5]' 
Oct 10  20:01:43  pid 1: could not open /proc/1/fd (error Permission denied)
Oct 10  20:01:43  Could not open /proc/28792/cmdline (errno  2 aka. No such file or directory)
Oct 10  20:01:43  pid 28792: could not obtain command line

Oct 10  20:01:43  pid 28809: command `sleep' 
Oct 10  20:01:43  Hidden pid 28809
Oct 10  20:01:43  pid 28847: pid 28847 state S, ppid=1 pgrp=28847 session=28829

Oct 10  20:01:43  pid 1: pid 1 state S, ppid=0 pgrp=0 session=0

Oct 10  20:01:43  pid 28847: pid 28847 state S, ppid=1 pgrp=28847 session=28829

Oct 10  20:01:43  Could not open /proc/28829/stat (errno  2 aka. No such file or directory)
Oct 10  20:01:43  Problem openning /proc/28829/stat. This is very suspicious
Oct 10  20:01:43  pid 28847: command `sleep' 
Oct 10  20:01:43  pid 1: command `init [5]' 
Oct 10  20:01:43  pid 1: could not open /proc/1/fd (error Permission denied)
Oct 10  20:01:43  Could not open /proc/28829/cmdline (errno  2 aka. No such file or directory)
Oct 10  20:01:43  pid 28829: could not obtain command line

Oct 10  20:01:43  pid 28847: command `sleep' 
Oct 10  20:01:43  pid 28847: could not open /proc/28847/fd (error Permission denied)
Oct 10  20:01:43  Hidden pid 28847
Oct 10  20:01:43  pid 28882: pid 28882 state S, ppid=28824 pgrp=28882 session=28824

Oct 10  20:01:43  pid 28824: pid 28824 state S, ppid=28823 pgrp=28824 session=28824

Oct 10  20:01:43  pid 28882: pid 28882 state S, ppid=28824 pgrp=28882 session=28824

Oct 10  20:01:43  pid 28824: pid 28824 state S, ppid=28823 pgrp=28824 session=28824

Oct 10  20:01:43  pid 28882: command `sleep' 
Oct 10  20:01:43  pid 28823: command `script' 
Oct 10  20:01:43  pid 28823: fd 1 is block dev 304 (3:4) [file: dev 1 (0:1) inode e6 (owner u=405 g=6)]
Oct 10  20:01:43  pid 28823: fd 2 is block dev 304 (3:4) [file: dev 1 (0:1) inode e6 (owner u=405 g=6)]
Oct 10  20:01:43  pid 28823: fd 3 is regular file dev 1605 (22:5), inode 11024 (owner u=405 g=6)
Oct 10  20:01:43  pid 28824: command `sh' 
Oct 10  20:01:43  pid 28824: fd 0 is block dev 305 (3:5) [file: dev 1 (0:1) inode eb (owner u=405 g=6)]
Oct 10  20:01:43  pid 28824: fd 1 is block dev 305 (3:5) [file: dev 1 (0:1) inode eb (owner u=405 g=6)]
Oct 10  20:01:43  pid 28824: fd 2 is block dev 305 (3:5) [file: dev 1 (0:1) inode eb (owner u=405 g=6)]
Oct 10  20:01:43  pid 28882: command `sleep' 
Oct 10  20:01:43  pid 28882: fd 0 is block dev 305 (3:5) [file: dev 1 (0:1) inode eb (owner u=405 g=6)]
Oct 10  20:01:43  pid 28882: fd 1 is block dev 305 (3:5) [file: dev 1 (0:1) inode eb (owner u=405 g=6)]
Oct 10  20:01:43  pid 28882: fd 2 is block dev 305 (3:5) [file: dev 1 (0:1) inode eb (owner u=405 g=6)]
Oct 10  20:01:43  Hidden pid 28882
~/checkps$ exit

Script done on Tue Oct 10 20:01:53 2000
