Hi all,
Does monitorying any of these provided features of "xenstat"
STATE CPU(sec) CPU(%) MEM(k) MEM(%) MAXMEM(k) MAXMEM(%) VCPUS
NETS NETTX(k) NETRX(k) VBDS VBD_OO VB
can show rootkit intrusion in guests? for example increasing cpu usage
or network rate can be a symptom of rootkits?Am I right?