I have a redhat 9 machine behind a seperate hardware firewall. The redhat 9
machine is pinging a single address on the internet (flintstone.astro.rug.nl)
constantly - it will wait 10 seconds between ping 1 and ping 2, then 26 seconds
between ping 2 and 3, then 10 seconds again.... etc.

Is there any good awy to find out which process on the machine is doing this
pinging? I've had a good look at netstat -a etc and can't see anything that
looks relevant.

Are there any good scripts for linux that will look for suspicious items in the
environment (and tell me if the maachine has been exploited)?

thanks
alex