According to Douglas Egan:
>
>"Jeremy C. Reed" wrote:
>
>>
>>
>> On Tue, 17 Apr 2001, Douglas Egan wrote:
>> > > Not sure where they are coming from - possibly ssh or netscape.
>>
>> What are they called (command name and arguments)?
>
>root   9262  0.0  0.0     0     0 ?? Z          - 0:00.00 (sh)
>root   9273  0.0  0.0     0     0 ?? Z          - 0:00.00 (sh)
>

What is their PPID?  This will be the process that is spawning the
shells and not waiting for a status on them.  Do a "ps -al", check the
PPID column for the parent process of the zombies and go attack that
process for being a bad parent and not waiting on it's children.  Oh,
except if the PPID is 1, this means that the parent has exited and
left init with the children but in this case init should just do a
wait(2) on the children and clean them up.

-- 
===============================================================================
Brett Lymn, Computer Systems Administrator, BAE SYSTEMS
===============================================================================