Re: SHMEM question
From: Valdis . Kletnieks
Date: Mon Oct 26 2009 - 15:47:56 EST
On Mon, 26 Oct 2009 11:59:04 EDT, Gene Heskett said:
> -r-------- 1 root root 67108904 2009-10-24 00:28 pulse-shm-3880918577
> That pulse-shm-3880918577 file at over 67 megabytes is all $00 till $04000000
> into it, then there is 6 non-zero bytes and the rest is back to all balls.
>
> Is this some indicator of a new rootkit or WTF?
No, it's pulseaudio. It uses shared mem to move audio data between client
programs and the pulseaudio server.
Attachment:
pgp00000.pgp
Description: PGP signature