Search Results

just a pointer,

get the pids of daemons such as telnetd, sshd and other
accepting connections and granting ttys

periodically check for any child process of the parent pids extracted above....