Hey,
I've been running an algorithm for over a week and a half on my machine, and it seems to keep getting slower. When I check top, I keep seeing weird things popping up here in there, such as xfce-panel, even though this should not be running, these also keep changing the PID number each time they show up. When using top the CPU status indicates that it is running at 100%, but when looking at the processes running the only significant process is my algorithm which is only using 64% of the processor. What gives? Is someone using my machine, and hiding the processes from me? I highly doublt this, but you just never know.

Dissconnect the computer from the network. Then see if this helps. If it does, you have to do some digging. You may want to scan for torjans and rootkits.

thanks, I'll do that when I get to the office. Is there something I'm missing when looking at top though?

Use netstat to see if you have connections to computers you can't identify.

The "best" way to check would be to shut down the system, reboot with a bootable cdr like Knoppix, FIRE, PSK, Plan9 and run your filesystem integrity checker (that is, if you installed, configured and ran it and saved at least the databases to read-only media). This way there is nearly no way to circumvent detection. Else please read this first: Intruder Detection Checklist (CERT): http://www.cert.org/tech_tips/intrud...checklist.html to make sure you know what to do. Also search the Linux - Security forum for words like "compromise". We've written a lot of advice on checking integrity. Run "rpm -Va", check your passwd, group and shadow files for any users added you can't recognise, then check "last" and "lastlog" to see if any logged in, then check your system logs (the further back the better) for any "weird" lines. Make sure you know what services are running (also see Xinetd) and run "netstat -panel -A inet" to see listening services and the location/PID of the binary and investigate any unusual ones. Run Chkrootkit and Rootkit Hunter. If you're gonna post, please post output if you found anything weird or are unsure if it means something.

Moved: This thread is more suitable in Linux-Security and has been moved accordingly to help your thread/question get the exposure it deserves.