Re: Reload kernel?

[George N. White III]

On Tue, 29 Sep 2020 at 17:12, ToddAndMargo via users <
[e-mail]> wrote:
> > > *From: *"ToddAndMargo via users" <[e-mail]
> > > >
> > > *Date:* Tuesday, 29 September 2020 at 14:24:52
> > > *To: *"[e-mail]" <[e-mail]
> > > >
> > > *Cc: *"ToddAndMargo" <[e-mail] <mailto:
>
> [e-mail]>>
> > > *Subject:* Re: Reload kernel?
> > >
> > > On 2020-09-27 04:40, Roger Heflin wrote:
> > > > So the gui gets slow, a reboot clears it, does it clear up?
> > >
> > > GUI and the file system. A reboot fixes it
>
> On 2020-09-29 05:51, [e-mail] wrote:
> > A reboot does *not fix* anything.
>
> Hi J,
>
> After running for a while (random time), the problem
> manifests itself, I reboot, it goes away.  Does not
> always stay away, but at least I can do my backups.
>
> I am not sure where you are coming from.

J. is objection to your use of "fixes".  Rebooting doesn't
solve the underlying issue, so it is more of a workaround
than a cure, and may be erasing information that would
lead to an understanding of the problem.

Do you have means to capture packets from the problem
system?  Can you do a test with outgoing http, https, and ssh
blocked?

It might be interesting to try a linux stealth rootkit process decloaking
tool: sandfly-processdecloak
https://www.sandflysecurity.com/blog/linux-stealth-rootkit-process-decloaking-tool-sandfly-processdecloak/

You say you have a second similar system.   Can you swap storage media
between the two systems
to see if the problem moves with the media?