[sleuthkit-users] Zombies

[Angus M. <an...@n-...>]

I've been running some fairly long analysis sessions using Autopsy 
1.75/Sleuthkit 1.66 recently and have noticed my system running slower and 
slower over time.....

Checking ps shows that there are a *lot* of zombied processes hanging around 
in the system. Closer inspection suggeste it may be some unwanted interaction 
between KDE-launched mozilla and autopsy in fact. Here's the ps output for 
the latest session (just started) :

500       2264  0.0  0.4  4416 1064 ?        S    12:44   0:00 /bin/bash -c ps 
x |grep -q '[m]ozilla' && mozilla -remote "openURL(`echo 
'http://localhost:9000/37201582871632651365/autopsy'`, new-window)" || mozil     
la 'http://localhost:9000/37201582871632651365/autopsy'
500       2283  4.5 11.7 49740 29296 ?       S    12:44   0:48 
/usr/lib/mozilla-1.4.1/mozilla-bin http://l     
ocalhost:9000/37201582871632651365/autopsy
500       2292  0.0 11.7 49740 29296 ?       S    12:44   0:00 
/usr/lib/mozilla-1.4.1/mozilla-bin http://l     
ocalhost:9000/37201582871632651365/autopsy
500       2293  0.0 11.7 49740 29296 ?       S    12:44   0:00 
/usr/lib/mozilla-1.4.1/mozilla-bin http://l     
ocalhost:9000/37201582871632651365/autopsy
500       2294  0.0 11.7 49740 29296 ?       S    12:44   0:00 
/usr/lib/mozilla-1.4.1/mozilla-bin http://l     
ocalhost:9000/37201582871632651365/autopsy
500       2296  0.0 11.7 49740 29296 ?       S    12:44   0:00 
/usr/lib/mozilla-1.4.1/mozilla-bin http://l     
ocalhost:9000/37201582871632651365/autopsy
500       2318  0.0 11.7 49740 29296 ?       S    12:44   0:00 
/usr/lib/mozilla-1.4.1/mozilla-bin http://l     
ocalhost:9000/37201582871632651365/autopsy
root      2401  0.0  0.0     0    0 pts/1    Z    12:44   0:00 [autopsy 
<defunct>]
root      2417  0.0  0.0     0    0 pts/1    Z    12:45   0:00 [autopsy 
<defunct>]
root      2429  0.0  0.0     0    0 pts/1    Z    12:45   0:00 [autopsy 
<defunct>]
root      2431  0.0  0.0     0    0 pts/1    Z    12:45   0:00 [autopsy 
<defunct>]
root      2454  0.0  0.0     0    0 pts/1    Z    12:45   0:00 [autopsy 
<defunct>]
root      2455  0.0  0.0     0    0 pts/1    Z    12:45   0:00 [autopsy 
<defunct>]
root      2458  0.0  0.0     0    0 pts/1    Z    12:45   0:00 [autopsy 
<defunct>]
root      2467  0.0  0.9 10620 2296 pts/1    S    12:45   0:00 /usr/bin/perl 
-wT ./autopsy 9000 localhost


Anyone happen to know of a cure for this ? 

(Fedora Core1, custom 2.4.22 kernel)

And on an unrelated note - would anyone object to me posting a call for papers 
for a conference (digital evidence), that I'm chairing early next year, on 
this list ?