Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 15 Feb 2006 17:18:16 -0600
From:      Dan Nelson <dnelson@allantgroup.com>
To:        Kris Kennaway <kris@obsecurity.org>
Cc:        Ivan Kolosovskiy <agava-develop@yandex.ru>, freebsd-stable@freebsd.org
Subject:   Re: Strange process
Message-ID:  <20060215231816.GI70956@dan.emsphone.com>
In-Reply-To: <20060215225421.GA56725@xor.obsecurity.org>
References:  <1140027060.83368.11.camel@r4.agava-guns.domain> <20060215194204.GC70956@dan.emsphone.com> <20060215215608.GA55676@xor.obsecurity.org> <20060215223432.GH70956@dan.emsphone.com> <20060215225421.GA56725@xor.obsecurity.org>

next in thread | previous in thread | raw e-mail | index | archive | help
In the last episode (Feb 15), Kris Kennaway said:
> On Wed, Feb 15, 2006 at 04:34:32PM -0600, Dan Nelson wrote:
> > In the last episode (Feb 15), Kris Kennaway said:
> > > I often see this too.  For example:
> > > 
> > >   PID USERNAME    THR PRI NICE   SIZE    RES STATE    TIME   WCPU COMMAND
> > >  5357 kkenn         1  96    0     0K     0K START    0:00  0.35% xpdf
> > > 
> > > > ps -waux  | grep xpdf
> > > kkenn    5357  0.3  0.0     0     0  ??  RE   Sun08PM   0:00.20 [xpdf]
> > > 
> > > > ps lp 5357
> > >   UID   PID  PPID CPU PRI NI   VSZ   RSS MWCHAN STAT  TT       TIME COMMAND
> > 
> > That syntax should have worked...  Try a plain "px axl | grep xpdf"
> > instead.
> 
> You're not mistaken, it's just not there.
> 
> > ps axl | grep xpdf
>  1000  5357 78788   2  96  0     0     0 -      RE    ??    0:00.20 [xpdf]

A wchan of "-" doesn't look good; I have no idea what that process
might be doing.  You know what?  I have some of these processes on my
system too :)

   0 14033   395 591  96  0     0    0 -      RE    ??    0:00.00 [sh]
   0 33631   395 591  96  0     0    0 -      RE    ??    0:00.00 [sh]


-- 
	Dan Nelson
	dnelson@allantgroup.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060215231816.GI70956>