Re: [sleuthkit-users] Zombies

[Brian C. <ca...@sl...>]

On Saturday, December 13, 2003, at 08:04  AM, Angus Marshall wrote:

> I've been running some fairly long analysis sessions using Autopsy
> 1.75/Sleuthkit 1.66 recently and have noticed my system running slower 
> and
> slower over time.....
>
> Checking ps shows that there are a *lot* of zombied processes hanging 
> around
> in the system. Closer inspection suggeste it may be some unwanted 
> interaction
> between KDE-launched mozilla and autopsy in fact. Here's the ps output 
> for
> the latest session (just started) :

Wow, these all exist just from opening the main menu window?  Autopsy 
does a wait for the children processes, so I wonder what is unique 
about this setup that causes the children to stay around.  I'm 
surprised that Mozilla is in a non-zombie state.  I'll add a bug entry 
and look into this.  Can you try a different browser and see if the 
same thing happens (lynx will even work).

> And on an unrelated note - would anyone object to me posting a call 
> for papers
> for a conference (digital evidence), that I'm chairing early next 
> year, on
> this list ?

Nope.  You may want to also consider the DFSci list at 
http://www.dfrws.org/listsrv/.

thanks,
brian