> I'd assumed (wrongly, apparently) that process_to_com would be a
> one-to-one mapping of process_id to command_id. If I look up the
> command name in the command table, it would seem that process 44 is
> both sshd and bash:
It's a PID roll-over problem. Since the target system re-uses PIDs as
p...
> one-to-one mapping of process_id to command_id. If I look up the
> command name in the command table, it would seem that process 44 is
> both sshd and bash:
It's a PID roll-over problem. Since the target system re-uses PIDs as
p...
[ more ]