Trying to find out what to do. A finger shows login sessions that do
not exist. There is no shell process or anything related to those TTY
IDs. Anyone know the cause? Anyone know how to get rid of them besides
rebooting our server?
Running
Linux mysrvr.com 2.4.21-20.EL #1 Thu Sep 16 14:30:02 EDT 2004 i686
i686 i386 GNU/Linux
Here's a sample of the finger result and a process list. Any
information about our user and process names I obscured. But the
revelant details are unchanged.
mysrvr-xxx: /usr/acct/acl_users > finger
Login Name Tty Idle Login Time Office Office
Phone
kkkk Paul user2 *pts/5 156d Apr 24 00:47 (xxx.xxxIPxx.xx
xxx Paul Support pts/1 Jun 6 12:54 (hqmachine.com)
pppp Paul User *pts/2 156d Apr 23 02:42 (pppp)
pppp Paul User *pts/3 156d Apr 23 04:08 (pppp)
pppp Paul User *pts/4 156d Apr 23 04:51 (pppp)
pppp Paul User pts/1 Apr 23 09:09 (xxx.xxxIPxx.xx)
pppp Paul User *pts/6 156d Apr 23 10:08 (xxx.xxxIPxx.xx)
pppp Paul User *pts/0 156d Apr 23 22:12 (xxx.xxxIPxx.xx)
mysrvr-xxx: /usr/acct/acl_users >
mysrvr-xxx: /usr/acct/acl_users > ps -ef
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 2006 ? 00:00:06 init [3]
root 2 1 0 2006 ? 00:00:13 [keventd]
root 3 1 0 2006 ? 00:00:00 [ksoftirqd/0]
root 6 1 0 2006 ? 00:00:00 [bdflush]
root 4 1 0 2006 ? 00:05:05 [kswapd]
root 5 1 0 2006 ? 00:01:41 [kscand]
root 7 1 0 2006 ? 00:00:01 [kupdated]
root 8 1 0 2006 ? 00:00:00 [mdrecoveryd]
root 15 1 0 2006 ? 00:00:00 [ahd_dv_0]
root 16 1 0 2006 ? 00:00:00 [scsi_eh_0]
root 20 1 0 2006 ? 00:00:01 [raid1d]
root 21 1 0 2006 ? 00:00:01 [raid1syncd]
root 22 1 0 2006 ? 00:00:01 [raid1d]
root 23 1 0 2006 ? 00:00:01 [raid1syncd]
root 24 1 0 2006 ? 00:00:02 [raid1d]
root 25 1 0 2006 ? 00:00:01 [raid1syncd]
root 26 1 0 2006 ? 00:00:00 [raid1d]
root 27 1 0 2006 ? 00:00:00 [raid1syncd]
root 28 1 0 2006 ? 00:00:41 [kjournald]
root 83 1 0 2006 ? 00:00:00 [khubd]
root 287 1 0 2006 ? 00:00:04 [kjournald]
root 288 1 0 2006 ? 00:01:52 [kjournald]
root 289 1 0 2006 ? 00:01:09 [kjournald]
root 597 1 0 2006 ? 00:00:27 syslogd -m 0
root 601 1 0 2006 ? 00:00:00 klogd -x
rpc 627 1 0 2006 ? 00:00:00 portmap
rpcuser 646 1 0 2006 ? 00:00:00 rpc.statd
root 758 1 0 2006 ? 00:04:54 /usr/sbin/sshd
root 772 1 0 2006 ? 00:00:01 xinetd -stayalive -
pidfile /var/
root 781 1 0 2006 ? 00:00:00 /usr/sbin/vsftpd /etc/
vsftpd/vsf
root 802 1 0 2006 ? 00:00:01 sendmail: accepting
connections
smmsp 811 1 0 2006 ? 00:00:00 sendmail: Queue
runner@01:00:00
root 821 1 0 2006 ? 00:00:00 gpm -t ps/2 -m /xxx/
mouse
root 1032 1 0 2006 ? 00:00:04 /usr/unify/lib/../bin/
odbcdmn
xfs 1063 1 0 2006 ? 00:00:00 xfs -droppriv -daemon
daemon 1072 1 0 2006 ? 00:00:00 /usr/sbin/atd
root 1084 1 0 2006 ? 00:00:42 mdadm --monitor --scan
root 1095 1 0 2006 ? 00:00:00 mdmpd
root 1158 1 0 2006 ? 00:00:03 /usr/bin/perl /usr/
libexec/webmi
root 1162 1 0 2006 tty1 00:00:00 /sbin/mingetty tty1
root 1163 1 0 2006 tty2 00:00:00 /sbin/mingetty tty2
root 1164 1 0 2006 tty3 00:00:00 /sbin/mingetty tty3
root 1165 1 0 2006 tty4 00:00:00 /sbin/mingetty tty4
root 1166 1 0 2006 tty5 00:00:00 /sbin/mingetty tty5
root 1167 1 0 2006 tty6 00:00:00 /sbin/mingetty tty6
root 1014 1 0 Jun03 ? 00:00:35 cupsd
root 1044 1014 0 Jun03 ? 00:00:00 socket://xxx.xxxIPxx.xx:3001/
32
root 24641 1 0 01:30 ? 00:00:00 /usr/sbin/crond
root 18893 772 0 09:09 ? 00:00:00 in.telnetd:
xx.xxxIPxx.xx
root 18894 18893 0 09:09 ? 00:00:00 login -- kkkk
kkkk 18895 18894 0 09:09 pts/13 00:00:00 -bash
kkkk 18997 18895 0 09:09 pts/13 00:00:00 ourApp
kkkk 29585 18997 0 11:06 pts/13 00:00:00 subprocess
kkkk 29586 18997 0 11:06 pts/13 00:00:00 subprocess
root 8167 758 0 12:51 ? 00:00:00 sshd: xxx [priv]
xxx 8169 8167 0 12:51 ? 00:00:00 sshd: xxx@pts/0
xxx 8170 8169 0 12:51 pts/0 00:00:00 -bash
root 8246 758 0 12:54 ? 00:00:00 sshd: xxx [priv]
xxx 8248 8246 0 12:54 ? 00:00:00 sshd: xxx@pts/1
xxx 8249 8248 0 12:54 pts/1 00:00:00 -bash
xxx 8303 8249 0 12:54 pts/1 00:00:00 ps -ef
|
Similar Threads
Linear Mode
