core process eating up resources

jaggy00 · 04-22-2007, 07:29 AM

ulimit -c gives - 0. but core process still is showing up in top listing. does it always run? no matter what is set in /etc/profile? what are circumstances that start it? can I disable it?

jlliagre · 04-22-2007, 10:33 AM

"core" isn't supposed to be a process, but is a file stored under certain circumstances by the kernel, generally when a process badly crashes.

I don't know what your "core" process is, but it is unrelated to "ulimit -c", which just allow to limit the size of the generated core files.

jaggy00 · 04-23-2007, 04:11 AM

in other words you have no idea what the /bin/core binary is (btw i cann't find it anymore)? and what process is running periodically in my system? what creates core files? i think there just has to be some separate process.

thank you for your answer anyway.

i think if there is not any known legitimate 'core' process, then this maybe some kind of rootkit? how i can check this for sure? will rkhunter -c make this?