WTF? several anon_inode and /dev/null listings with lsof search

Hal Burgiss hal at burgiss.net
Tue Aug 7 10:23:19 UTC 2012


On Tue, Aug 7, 2012 at 6:18 AM, Colin Law <clanlaw at googlemail.com> wrote:

>
> I would have thought a few sample lines rather than pasting it would
> have been enough anyway.
>
> oneconf-s 5646          colinl    0u      CHR        1,3      0t0
>  19 /dev/null
> oneconf-s 5646          colinl    1u      CHR        1,3      0t0
>  19 /dev/null
> oneconf-s 5646          colinl    2u      CHR        1,3      0t0
>  19 /dev/null
> oneconf-s 5646          colinl    6u      CHR        1,3      0t0
>  19 /dev/null
> dconf     5646 5647     colinl    0u      CHR        1,3      0t0
>  19 /dev/null
> dconf     5646 5647     colinl    1u      CHR        1,3      0t0
>  19 /dev/null
> dconf     5646 5647     colinl    2u      CHR        1,3      0t0
>  19 /dev/null
> dconf     5646 5647     colinl    6u      CHR        1,3      0t0
>  19 /dev/null
> gdbus     5646 5650     colinl    0u      CHR        1,3      0t0
>  19 /dev/null
> gdbus     5646 5650     colinl    1u      CHR        1,3      0t0
>  19 /dev/null
> gdbus     5646 5650     colinl    2u      CHR        1,3      0t0
>  19 /dev/null
> gdbus     5646 5650     colinl    6u      CHR        1,3      0t0
>  19 /dev/null
>
> oneconf-s 5646          colinl    3u     0000        0,9        0
> 7871 anon_inode
> oneconf-s 5646          colinl    8u     0000        0,9        0
> 7871 anon_inode
> oneconf-s 5646          colinl   11u     0000        0,9        0
> 7871 anon_inode
> oneconf-s 5646          colinl   15u     0000        0,9        0
> 7871 anon_inode
> dconf     5646 5647     colinl    3u     0000        0,9        0
> 7871 anon_inode
> dconf     5646 5647     colinl    8u     0000        0,9        0
> 7871 anon_inode
> dconf     5646 5647     colinl   11u     0000        0,9        0
> 7871 anon_inode
> dconf     5646 5647     colinl   15u     0000        0,9        0
> 7871 anon_inode
> gdbus     5646 5650     colinl    3u     0000        0,9        0
> 7871 anon_inode
> gdbus     5646 5650     colinl    8u     0000        0,9        0
> 7871 anon_inode
> gdbus     5646 5650     colinl   11u     0000        0,9        0
> 7871 anon_inode
> gdbus     5646 5650     colinl   15u     0000        0,9        0
> 7871 anon_inode
>
>
I have plenty of both on my home and work desktops (10.04).  And there is
no rootkit.


-- 
Hal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20120807/173dcefb/attachment.html>


More information about the ubuntu-users mailing list