From owner-freebsd-questions@FreeBSD.ORG Tue Aug 25 09:19:39 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 40183106568D for ; Tue, 25 Aug 2009 09:19:39 +0000 (UTC) (envelope-from mike@urgle.com) Received: from anchor-post-2.mail.demon.net (anchor-post-2.mail.demon.net [195.173.77.133]) by mx1.freebsd.org (Postfix) with ESMTP id 07E5F8FC35 for ; Tue, 25 Aug 2009 09:19:38 +0000 (UTC) Received: from cheddar.urgle.com ([80.177.40.53]) by anchor-post-2.mail.demon.net with esmtp (Exim 4.69) id 1MfsBl-0005RT-lp; Tue, 25 Aug 2009 09:19:37 +0000 Received: from mike by cheddar.urgle.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1MfsBl-000E2j-Ee; Tue, 25 Aug 2009 09:19:37 +0000 Date: Tue, 25 Aug 2009 10:19:37 +0100 From: Mike Bristow To: Colin Brace Message-ID: <20090825091937.GA53416@cheddar.urgle.com> References: <4A924601.3000507@lim.nl> <200908240807.n7O87o3U092052@banyan.cs.ait.ac.th> <200908241026.55693.j.mckeown@ru.ac.za> <25130058.post@talk.nabble.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <25130058.post@talk.nabble.com> User-Agent: Mutt/1.5.20 (2009-06-14) Cc: freebsd-questions@freebsd.org Subject: Re: what www perl script is running? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Aug 2009 09:19:39 -0000 On Tue, Aug 25, 2009 at 01:00:53AM -0700, Colin Brace wrote: > Ok, here is what lsof tells me: > > $ sudo lsof | grep perl > perl5.8.9 4272 www 3u IPv4 0xc33cf000 0t0 TCP > gw:51295->94.102.51.57:afs3-fileserver (ESTABLISHED) > > The last line would be appear to telling me something, but what? The script is talking to 94.102.51.57 on port 7000. Other useful things: ps ajxwwww will tell you the parent process of the script: this looks like it may be a (fast?)CGI script; if so then the parent would be the web server. It may also show the name of the script (but beware: the script can change that) which would be usefull to know. > After 24 hour since rebooting, this perl instance is still crunching away... Is it the same instance of the script, or a new copy each time? That is, does the PID change? If so, that points to a CGI; if not it points to a fastCGI - or something else. Cheers, -- :wq