12-04-2009
Finding a rogue process
Afternoon all, hopefully someone can give me a hand with this (the following may be explained very poorly
)
I know there's a process running on one of our Solaris 10 boxes that runs approximately every 5 minutes. Unfortunately I've no idea, who owns it, what it is called, or how it is being called.
I know the users that it defintely isn't being called as, so a ps -ef would return enough info for me to find it, but only if I was constanly polling it for 5 minutes and managed to spot the process in the second or so it ran for - which is highly unlikely.
Is anyone aware of a way of viewing all process that have run in the last x minutes, not just ones that are currently running? Or can anyone think of a better solution?
Thanks.
9 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
is there a way to find the process id of a process because i have same process invoked several times.
when i need to kill them, i get confused with the id.
Thanks,
sskb
:( (8 Replies)
Discussion started by: sskb
8 Replies
2. UNIX for Dummies Questions & Answers
Hi,
If in a shell script i write a command
ls > bla &
ls
The output is redirected to bla and the next ls starts as first one is going on in background.
I want to find the PID of the first command.
Thanks in advance (2 Replies)
Discussion started by: vibhor_agarwali
2 Replies
3. Shell Programming and Scripting
Hi Gurus,
How can i find background process is completed or not. I have mentioned my scenario below.
Actually Pr1 Process is running in back ground, i just want to know whether this process completed or not. I can come to know the process id by typing pid=$! but i want to trigger... (4 Replies)
Discussion started by: krk_555
4 Replies
4. Linux
Hello,
Iam running a apache webserver in CentOS recenlty a hacker has attacked my server using RFI attack and did something in my server.. After that everyday at 8Pm my httpd is using about 5000 pid's actually in normal it takes only about 30 - 40 pid's. and also exim uses 2000 pid's totally my... (2 Replies)
Discussion started by: dheeraj4uuu
2 Replies
5. Shell Programming and Scripting
Hi
Any idea how to get the process id of the process using the ports
lsof -i :portnumber does not work in my machine. I am on sun Solaris SPARC.
Any suggestion is highly appreciated (1 Reply)
Discussion started by: kinny
1 Replies
6. UNIX for Advanced & Expert Users
hi all,
I am trying to find the process id of the subsequent process created via fork and exec calls in perl.
For eg:
envVarSetter dataCruncher.exe < input.txt > output.txt
When I fork and exec the above command,
it returns only the pid of envVarSetter and I don't know how to find the... (9 Replies)
Discussion started by: matrixmadhan
9 Replies
7. AIX
We are having a bit of trouble finding where the following process is being started from at bootup.
/opt/IBM/tdsV6.2db2/itma/aix526/ud/bin/kuddb2 db2tdsWe have looked in the typical areas /etc/inittab & /etc/rc.d but have had no luck finding it, any ideas? (10 Replies)
Discussion started by: j_aix
10 Replies
8. Shell Programming and Scripting
Hello,
The scenario is as follows, I have a background process running initially for which i know the PID on machine1. I use ssh from machine 2 to execute a script in machine 1. For some reason the back ground process is terminated. I would like to know which process caused the... (6 Replies)
Discussion started by: prasbala
6 Replies
9. Shell Programming and Scripting
Hi,
I am trying to find a file that have a different name than it should be processing, the file name is ( Fifa15 )
is there a command to use?
I got that file by
ps -ef | grep fifa15
but how do I know what is running ?
thanks a lot, I am learning unix so sorry if that is a... (2 Replies)
Discussion started by: latinooo
2 Replies
LEARN ABOUT OSF1
sched_rr_get_interval
sched_rr_get_interval(3) Library Functions Manual sched_rr_get_interval(3)
NAME
sched_rr_get_interval - Returns the current quantum for process execution under the SCHED_RR policy (P1003.1b)
LIBRARY
Realtime Library (librt.so, librt.a)
SYNOPSIS
#include <sched.h>
int sched_rr_get_interval (
pid_t pid,
struct timespec *interval);
PARAMETERS
pid Specifies the ID of the process for which the quantum is to be returned.
*interval Specifies the location to receive the current quantum for process execution under the SCHED_RR scheduling policy.
DESCRIPTION
The sched_rr_get_interval function updates the timespec structure referenced by the interval argument to contain the current quantum for
the process executing under the SCHED_RR policy. If a process running under the round-robin scheduling policy runs without blocking or
yielding for more than this amount of time, it may be preempted by another runnable process (at the same priority).
If the PID argument is zero, the current execution time limit for the calling process is returned.
No special privileges are needed to use the sched_rr_get_interval function.
RETURN VALUES
On a successful call, a value of 0 (zero) is returned. On an unsuccessful call, a value of -1 is returned and errno is set to indicate the
error.
ERRORS
The sched_rr_get_interval fails under the following condition:
[ESRCH] The value of the pid parameter does not indicate an existing process.
RELATED INFORMATION
Functions: sched_getparam(3), sched_getscheduler(3), sched_setparam(3), sched_setscheduler(3)
Guide to Realtime Programming delim off
sched_rr_get_interval(3)