Subject: Re: rogue process
To: Ray Phillips <r.phillips@mailbox.uq.edu.au>
From: David Brownlee <abs@netbsd.org>
List: port-i386
Date: 06/22/2001 15:34:31
telnet sounds like a client runnign from the netbsd box.
Good thing to run is 'ps axww | grep telnet' to get a ful listing
of any arguments given to telnet.
Also, 'netstat | grep telnet' will show you if anything is
connected inbound or outbound to the default telnet port (this
would not pick up if the telnet had been used to connect out
to a mud or similar on a different port).
--
David/absolute -- www.netbsd.org: No hype required --
On Fri, 15 Jun 2001, Ray Phillips wrote:
> Dear NetBSD/i386:
>
> This morning I ran top on a PC which is running NetBSD/i386 1.5 and found a
> telnet process was using about 50% of the CPU. There seemed to be no
> telnet session corresponding to it, so I killed the process. Doing so
> didn't seem to cause any problems. I've appended top's output before and
> after killing the process to this message.
>
> I assume the process was left over from when the Macintosh I was running a
> telnet session on crashed, but why would it have been using up so much of
> the CPU time; and why was that command named telnet instead of telnetd like
> the two near the bottom of the list?
>
>
> Ray Phillips
>
>
>
>
> Before:
> ------
> load averages: 2.33, 2.04, 1.59 12:04:53
> 14 processes: 2 runnable, 11 sleeping, 1 on processor
> CPU states: 55.7% user, 0.0% nice, 43.8% system, 0.0% interrupt, 0.5% idle
> Memory: 3712K Act, 1708K Inact, 144K Wired, 74M Free, 382M Swap free
>
> PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND
> 11259 root 64 0 204K 964K run 167.7H 49.07% 49.07% telnet
> 19038 ray 2 0 504K 220K sleep 2:15 25.29% 25.29% gunzip
> 19039 ray 62 0 56K 304K run 2:08 23.49% 23.49% tail
> 167 root 10 0 220K 420K sleep 0:08 0.00% 0.00% cron
> 84 root 2 0 100K 400K sleep 0:06 0.00% 0.00% syslogd
> 19057 ray 28 0 152K 604K onproc 0:00 0.00% 0.00% top
> 19041 ray 18 0 432K 292K sleep 0:00 0.00% 0.00% csh
> 17917 ray 18 0 432K 280K sleep 0:00 0.00% 0.00% csh
> 11172 root 18 0 428K 280K sleep 0:00 0.00% 0.00% csh
> 1 root 10 0 312K 192K sleep 0:00 0.00% 0.00% init
> 169 root 3 0 48K 436K sleep 0:00 0.00% 0.00% getty
> 19040 root 2 0 108K 960K sleep 0:00 0.00% 0.00% telnetd
> 17916 root 2 0 108K 960K sleep 0:00 0.00% 0.00% telnetd
> 164 root 2 0 76K 448K sleep 0:00 0.00% 0.00% inetd
>
> After:
> -----
> load averages: 1.75, 1.90, 1.60 12:07:41
> 13 processes: 2 runnable, 10 sleeping, 1 on processor
> CPU states: 85.1% user, 0.0% nice, 12.9% system, 0.0% interrupt, 2.0% idle
> Memory: 3400K Act, 1788K Inact, 136K Wired, 74M Free, 382M Swap free
>
> PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND
> 19038 ray 64 0 504K 220K run 3:34 51.12% 51.12% gunzip
> 19039 ray 64 0 56K 304K run 3:22 46.97% 46.97% tail
> 167 root 10 0 220K 420K sleep 0:08 0.00% 0.00% cron
> 84 root 2 0 100K 400K sleep 0:06 0.00% 0.00% syslogd
> 19062 root 28 0 152K 604K onproc 0:00 0.00% 0.00% top
> 19041 ray 18 0 432K 292K sleep 0:00 0.00% 0.00% csh
> 19059 root 18 0 432K 284K sleep 0:00 0.00% 0.00% csh
> 17917 ray 18 0 432K 280K sleep 0:00 0.00% 0.00% csh
> 1 root 10 0 312K 192K sleep 0:00 0.00% 0.00% init
> 169 root 3 0 48K 436K sleep 0:00 0.00% 0.00% getty
> 17916 root 2 0 108K 960K sleep 0:00 0.00% 0.00% telnetd
> 19040 root 2 0 108K 960K sleep 0:00 0.00% 0.00% telnetd
> 164 root 2 0 76K 448K sleep 0:00 0.00% 0.00% inetd
>
>
>