[Asterisk-Users] [OT] What's changing /etc/hosts?

[Andrew Kohlsmith]

On Wednesday 18 August 2004 13:09, Mark Woods wrote:
> do a 'ps -ef | more' or 'ps -aux | more' and look at the processes that are
> listed to see if there is something running that might be doing it.
>
> Otherwise, I'd approach it by going through each of the startup scripts
> (rc#.d, etc.) and then each application's startup scripts.  A bit tedious,
> but...

Bah... just remove all write perms to it (use chattr +i if you have ext2/ext3 
fs) and watch for the process changing it to error out.  :-)

-A.