Process List & Security??
VeeJay
maanjee at gmail.com
Wed Jan 10 13:12:54 UTC 2007
Hi
Can some good one at security side look into these running process? And see
if there is a Process some is dangerous/ security breach which a Bad User
has put? Thanks
$ ps xa
PID TT STAT TIME COMMAND
0 ?? WLs 0:00.00 [swapper]
1 ?? ILs 0:00.00 /sbin/init --
2 ?? DL 0:02.90 [g_event]
3 ?? DL 0:02.87 [g_up]
4 ?? DL 0:03.04 [g_down]
5 ?? DL 0:00.00 [thread taskq]
6 ?? DL 0:00.00 [acpi_task_0]
7 ?? DL 0:00.00 [acpi_task_1]
8 ?? DL 0:00.00 [acpi_task_2]
9 ?? DL 0:00.00 [kqueue taskq]
10 ?? RL 2775:10.56 [idle]
11 ?? WL 0:59.34 [swi4: clock sio]
12 ?? WL 0:00.00 [swi3: vm]
13 ?? WL 0:00.10 [swi1: net]
14 ?? DL 0:02.65 [yarrow]
15 ?? WL 0:00.00 [swi5: +]
16 ?? WL 0:00.00 [swi2: cambio]
17 ?? WL 0:00.00 [swi6: task queue]
18 ?? WL 0:00.00 [swi6: Giant taskq]
19 ?? WL 0:00.00 [irq9: acpi0]
20 ?? WL 0:00.22 [irq16: bce0 em0+]
21 ?? WL 0:00.32 [irq78: mfi0]
22 ?? WL 0:00.00 [irq17: em1]
23 ?? WL 0:00.00 [irq21: uhci0 uhci+]
24 ?? DL 0:00.01 [usb0]
25 ?? DL 0:00.00 [usbtask]
26 ?? WL 0:00.00 [irq20: uhci1]
27 ?? DL 0:00.01 [usb1]
28 ?? DL 0:00.01 [usb2]
29 ?? DL 0:00.01 [usb3]
30 ?? WL 0:00.00 [irq14: ata0]
31 ?? WL 0:00.00 [irq15: ata1]
32 ?? WL 0:00.00 [swi0: sio]
33 ?? WL 0:00.00 [irq1: atkbd0]
34 ?? DL 0:00.07 [pagedaemon]
35 ?? DL 0:00.00 [vmdaemon]
36 ?? DL 0:01.11 [pagezero]
37 ?? DL 0:00.30 [bufdaemon]
38 ?? DL 0:59.50 [syncer]
39 ?? DL 0:00.29 [vnlru]
40 ?? DL 0:00.43 [softdepflush]
41 ?? DL 0:01.41 [schedcpu]
151 ?? Is 0:00.00 adjkerntz -i
644 ?? Is 0:00.00 /sbin/devd
688 ?? Ss 0:00.14 /usr/sbin/syslogd -s
761 ?? Ss 0:00.09 /usr/sbin/usbd
809 ?? Is 0:00.06 /usr/sbin/sshd
815 ?? Ss 0:00.90 sendmail: accepting connections (sendmail)
819 ?? Is 0:00.02 sendmail: Queue runner at 00:30:00 for
/var/spool/clientmqueue (sendmail)
825 ?? Is 0:00.22 /usr/sbin/cron -s
1007 ?? Ss 0:01.10 /usr/local/apache/bin/httpd
1008 ?? I 0:00.00 /usr/local/apache/bin/httpd
1009 ?? I 0:00.00 /usr/local/apache/bin/httpd
1010 ?? I 0:00.00 /usr/local/apache/bin/httpd
1011 ?? I 0:00.00 /usr/local/apache/bin/httpd
1012 ?? I 0:00.00 /usr/local/apache/bin/httpd
1037 ?? I 0:00.00 /usr/local/apache/bin/httpd
7862 ?? Is 0:00.01 sshd: digill7b [priv] (sshd)
7866 ?? S 0:00.01 sshd: digill7b at ttyp0 (sshd)
866 v0 Is+ 0:00.00 /usr/libexec/getty Pc ttyv0
867 v1 Is+ 0:00.00 /usr/libexec/getty Pc ttyv1
868 v2 Is+ 0:00.00 /usr/libexec/getty Pc ttyv2
869 v3 Is+ 0:00.00 /usr/libexec/getty Pc ttyv3
870 v4 Is+ 0:00.00 /usr/libexec/getty Pc ttyv4
871 v5 Is+ 0:00.00 /usr/libexec/getty Pc ttyv5
872 v6 Is+ 0:00.00 /usr/libexec/getty Pc ttyv6
873 v7 Is+ 0:00.00 /usr/libexec/getty Pc ttyv7
7867 p0 Ss 0:00.00 -sh (sh)
7928 p0 R+ 0:00.00 ps xa
1015 p2- I 0:00.00 /bin/sh /usr/local/mysql/bin/mysqld_safe
1033 p2- S 0:11.97 /usr/local/mysql/libexec/mysqld
--basedir=/usr/local/mysql --datadir=/var/db/mysql --user=mysql
--pid-file=/var/db/mysql/localhost.maanjee.pid --port=33
$
--
Thanks!
BR / vj
More information about the freebsd-questions
mailing list