[hobbit] phantom processes causing false alerts

Odinn odinn_asgaard at yahoo.com
Sat Apr 10 17:23:04 CEST 2010


It sound like your hobbit server is in several different groups in hobbit-clients.cfg

each group that it matches, it adds the checks from that group to its list of checks, it doesn't match a group and then leave the hobbit-clients, it's additive all the way to the end for groups that match.

example

PAGE=servers
  PROC sshd

HOST=hobbitsrv
  PROC sshd
  PROC hobbitd

HOST=%(.*)srv(.*)
  PROC telnetd


if hobbitsrv is in the servers page, then it will check procs for sshd, sshd (again), hobbitd, and telnetd
 --


Jim Sloan


Just remember, today is the day you thought tomorrow was going to be yesterday.



----- Original Message ----
From: "shea_greg at emc.com" <shea_greg at emc.com>
To: hobbit at hswn.dk
Cc: shea_greg at emc.com
Sent: Fri, April 9, 2010 5:35:15 PM
Subject: [hobbit] phantom processes causing false alerts


Hi all,

I have a strange problem with procs and am reaching out to the group for
help.  In the picture below
there are numerous 'cron' and 'sshd'  processes showing up for this
particular host (the hobbitserver).
The problem is, all these processes and in particular the ones in error
(red) don't belong on this server.

I have tried to locate where these phantom processes are coming from,
searching hist, histlog, hostdata
directories but I'm stuck.  The Client Data file does not have any of
these processes. 

Any assistance would be appreciated

Thanks
Gregory R Shea
EMC Corporation


========================================================================
=

Entry from hobbit-alerts.cfg
## HobbitServer
GROUP=HHEARTBEAT
        SCRIPT /apps/hobbit/server/etc/hb-alert.pl heartbeat

========================================================================
=

Entry from hobbit-clients.cfg
HOST=hobbitserver
        LOAD 40.0 45.0
        MEMPHYS 101 102
        MEMACT  98 99
        MEMSWAP 97 98
        #PROC hobbitd_channel
        PROC heartbeat 1 1 yellow GROUP=HHEARTBEAT
        #PROC sendmail TRACK=sendmail
        FILE /apps/hobbit/server/etc/bb-hosts yellow MTIME>600 TRACK
        FILE /apps/hobbit/server/etc/hobbit-alerts.cfg yellow MTIME>600
TRACK
        FILE /apps/hobbit/server/etc/hobbit-clients.cfg yellow MTIME>600
TRACK
        PORT LOCAL=0.0.0.0:1984 TEXT=HobbitD

========================================================================
==

http://hobbitserver/hobbit-cgi/bb-hostsvc.sh?HOST=hobbitmon&SERVICE=proc
s
Mon Mar 22 20:55:39 EDT 2010 - Processes NOT ok
  heartbeat (found 0, req. 1 or more)                This should be
YELLOW
  crond (found 1, req. 1 or more)
  /usr/sbin/sshd (found 1, req. 1 or more)
  cron (found 1, req. 1 or more)
  sshd (found 5, req. 1 or more)
  crond (found 1, req. 1 or more)
  /usr/sbin/sshd (found 1, req. 1 or more)
  crond (found 1, req. 1 or more)
  /usr/sbin/sshd (found 1, req. 1 or more)
  crond (found 1, req. 1 or more)
  /usr/sbin/sshd (found 1, req. 1 or more)
  crond (found 1, req. 1 or more)
  /usr/sbin/sshd (found 1, req. 1 or more)
  cron (found 1, req. 1 or more)
  sshd (found 5, req. 1 or more)
  crond (found 1, req. 1 or more)
  sshd (found 5, req. 1 or more)
  crond (found 1, req. 1 or more)
  sshd (found 5, req. 1 or more)
  cron (found 1, req. 1 or more)
  sshd (found 5, req. 1 or more)
  crond (found 1, req. 1 or more)
  /usr/sbin/sshd (found 1, req. 1 or more)
  cron (found 1, req. 1 or more)
  sshd (found 5, req. 1 or more)
  cron (found 1, req. 1 or more)
  sshd (found 5, req. 1 or more)
  sshd (found 5, req. 1 or more)
  ns-slapd (found 0, req. 1 or more)                These 2 are RED
  ns-httpd (found 0, req. 1 or more)                These 2 are RED
  cron (found 1, req. 1 or more)
  sshd (found 5, req. 1 or more)
  /usr/sbin/sshd (found 1, req. 1 or more)
  crond (found 1, req. 1 or more)
  sshd (found 5, req. 1 or more)
  crond (found 1, req. 1 or more)
  crond (found 1, req. 1 or more)
  /usr/sbin/sshd (found 1, req. 1 or more)
  crond (found 1, req. 1 or more)
  /usr/sbin/sshd (found 1, req. 1 or more)
  crond (found 1, req. 1 or more)
  sshd (found 5, req. 1 or more)

  PID  PPID USER      STARTED S PRI %CPU     TIME %MEM  RSZ   VSZ CMD
    1     0 root       Mar 21 S  24  0.0 00:00:02  0.0  568  4772 init
[3]

    2     1 root       Mar 21 S 139  0.0 00:00:13  0.0    0     0
[migration/0]
    3     1 root       Mar 21 S   5  0.0 00:00:02  0.0    0     0
[ksoftirqd/0]
    4     1 root       Mar 21 S 139  0.0 00:00:19  0.0    0     0
[migration/1]
    5     1 root       Mar 21 S   5  0.0 00:00:03  0.0    0     0
[ksoftirqd/1]
    6     1 root       Mar 21 S 139  0.0 00:00:27  0.0    0     0
[migration/2]
    7     1 root       Mar 21 S   5  0.0 00:00:03  0.0    0     0
[ksoftirqd/2]
    8     1 root       Mar 21 S 139  0.0 00:00:23  0.0    0     0
[migration/3]
    9     1 root       Mar 21 S   5  0.0 00:00:04  0.0    0     0
[ksoftirqd/3]
   10     1 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[events/0]
   11     1 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[events/1]
   12     1 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[events/2]
   13     1 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[events/3]
   14    10 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[khelper]
   15    10 root       Mar 21 S  24  0.0 00:00:00  0.0    0     0
[kacpid]
   73    10 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[kblockd/0]
   74    10 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[kblockd/1]
   75    10 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[kblockd/2]
   76    10 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[kblockd/3]
   77     1 root       Mar 21 S  24  0.0 00:00:00  0.0    0     0
[khubd]
  112    10 root       Mar 21 S  19  0.0 00:00:00  0.0    0     0
[pdflush]
  113    10 root       Mar 21 S  24  0.0 00:01:46  0.0    0     0
[pdflush]
  114     1 root       Mar 21 S  24  0.0 00:00:35  0.0    0     0
[kswapd0]
  115    10 root       Mar 21 S  30  0.0 00:00:00  0.0    0     0
[aio/0]
  116    10 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[aio/1]
  117    10 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[aio/2]
  118    10 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[aio/3]
  262     1 root       Mar 21 S  18  0.0 00:00:00  0.0    0     0
[kseriod]
  310 32684 hobbit   20:56:55 S  23  0.0 00:00:00  0.0  944  7424
/usr/sbin/ntpq -n -c rv xxx.xxx.xxx.xxx
  316 32667 hobbit   20:56:55 S  18  0.0 00:00:00  0.0  364  2608
/apps/hobbit/client/bin/bb xxx.xxx.xxx.xxx status hobbitserver.mailq
green Mon Mar 22 20:56:55 EDT 2010?Mail queue contains 0 requests?
  337 32675 hobbit   20:56:55 S  21  0.0 00:00:00  0.0  364  2608
/apps/hobbit/client/bin/bb xxx.xxx.xxx.xxx status hobbitserver.sendmail
green Mon Mar 22 20:56:55 EDT 2010  <sendmail>?Statistics from Tue Dec
12 04:02:02 2006? M   msgsfr  bytes_from   msgsto    bytes_to  msgsrej
msgsdis msgsqur  Mailer? 3        2          2K        0          0K
0       0       0  smtp? 4    16709      82093K    16515      80675K 0
0       0  esmtp? 7        0          0K  4686309    9618429K 0       0
0  relay? 8        0          0K        2          2K 0       0       0
procmail? 9  4695543   10022009K     8595    1678935K 0       0       0
local?==================================================================
===? T  4712254   10104104K  4711421   11378041K        0       0 0? C
4640434              4695450                    0
  356 32661 hobbit   20:56:55 S  21  0.0 00:00:00  0.0  364  2608
/apps/hobbit/client/bin/bb xxx.xxx.xxx.xxx status hobbitserver.temp
green Mon Mar 22 20:56:54 EDT 2010 Temperature status: ?Device Temp(C)
Temp(F)
Threshold(C)?------------------------------------------------------?&gre
en System Board Ambient Temp    22       71
42?------------------------------------------------------?Status green:
All devices look okay
  385  4788 apache   18:41:00 S  23  0.0 00:00:00  0.0 7836 119508
/usr/sbin/httpd
  386  4788 apache   18:41:00 S  23  0.0 00:00:00  0.0 7840 119508
/usr/sbin/httpd
  448 32663 hobbit   20:56:55 Z  23  0.0 00:00:00  0.0    0     0
[letstat.pl] <defunct>
  505     1 root       Mar 21 S  20  0.0 00:00:00  0.0    0     0
[scsi_eh_0]
  522 32663 hobbit   20:56:55 S  22  0.0 00:00:00  0.0  364  2608
/apps/hobbit/client/bin/bb xxx.xxx.xxx.xxx status hobbitserver.network
green Mon Mar 22 20:56:54 EDT 2010 - EMS - ?No Recent Network
Input/Output Errors detected. ??eth0: autoneg on, 1GB/s-FDX, link
ok.?eth1: autoneg on, 1GB/s-FDX, link ok.? ? ?Name   Mtu   Net/Dest
Address               Ipkts        Ierrs  Opkts        Oerrs  Collis
Queue ?lo     16436  loopback             loopback             381956450
38195645     0      0        0    ?eth1   16896  hobbitserver
hobbitserver            5078278      0      2000647      0      0 0
?eth0   16896  hobbitserver         hobbitserver 203321736    0
135196037    0      0        0    ? 
  556     1 root       Mar 21 S  24  0.0 00:01:29  0.0    0     0
[kjournald]
  597 32725 hobbit   20:56:55 S  23  0.0 00:00:00  0.0  648 52952
/bin/sh /apps/hobbit/client/ext/bb-omsa-raid.sh
  603   597 hobbit   20:56:55 S  21  0.0 00:00:00  0.0  784 52952
/bin/sh /apps/hobbit/client/ext/bb-omsa-raid.sh
  966   603 hobbit   20:56:55 S  19  0.0 00:00:00  0.0 1088 52812
/bin/bash /usr/bin/omreport storage adisk vdisk=1 controller=0 -fmt ssv
  967   603 hobbit   20:56:55 S  21  0.0 00:00:00  0.0  672 51124 grep
-v List
  969   603 hobbit   20:56:55 S  21  0.0 00:00:00  0.0  676 51124 grep
-v Controller
  970   603 hobbit   20:56:55 S  17  0.0 00:00:00  0.0  664 51124 grep
-v ^$
  971   603 hobbit   20:56:55 S  21  0.0 00:00:00  0.0  592 52952
/bin/sh /apps/hobbit/client/ext/bb-omsa-raid.sh
  974   966 hobbit   20:56:55 R  20  0.0 00:00:00  0.0 4996 18008
/etc/delloma.d/oma/bin/omreport storage adisk vdisk=1 controller=0 -fmt
ssv
  981     1 hobbit   08:14:49 S  16  0.0 00:00:00  0.0  444  2592
/apps/hobbit/client/bin/hobbitlaunch
--config=/apps/hobbit/client/etc/clientlaunch.cfg
--log=/apps/hobbit/client/logs/clientlaunch.log
--pidfile=/apps/hobbit/client/logs/clientlaunch.hobbitserver.pid
1034 32678 hobbit   20:56:55 R  21  0.0 00:00:00  0.0  884  8716 ps -Aw
-o pid,ppid,user,start,state,pri,pcpu,time,pmem,rsz,vsz,cmd
1485    13 root       Mar 21 S  33  0.0 00:00:00  0.0    0     0
[kauditd]
1643  4788 apache   20:05:30 S  23  0.0 00:00:00  0.0 7752 119508
/usr/sbin/httpd
2283    13 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[ata/0]
2284    13 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[ata/1]
2285    13 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[ata/2]
2286    13 root       Mar 21 S  31  0.0 00:00:00  0.0    0     0
[ata/3]
2287    13 root       Mar 21 S  31  0.0 00:00:00  0.0    0     0
[ata_aux]
2314     1 root       Mar 21 S  33  0.0 00:00:00  0.0  460  3624 udevd
2480     1 hobbit   11:16:55 S  23  0.0 00:00:00  0.1 9772 114472
/usr/local/ora-ic10.2-64/sqlplus -L -S @/usr/local/ora-ic10.2-64/abs.sql
2497    11 root       Mar 21 S  34  0.0 00:00:00  0.0    0     0
[kedac]
2498     1 hobbit   11:16:55 S  23  0.0 00:00:00  0.1 9772 114472
/usr/local/ora-ic10.2-64/sqlplus -L -S
@/usr/local/ora-ic10.2-64/esrs.sql
2511     1 hobbit   11:16:55 S  23  0.0 00:00:00  0.1 9772 114472
/usr/local/ora-ic10.2-64/sqlplus -L -S @/usr/local/ora-ic10.2-64/drm.sql
2756     1 hobbit   11:16:56 S  23  0.0 00:00:00  0.1 9772 114472
/usr/local/ora-ic10.2-64/sqlplus -L -S @/usr/local/ora-ic10.2-64/ras.sql
3302     1 root       Mar 21 S  19  0.0 00:00:00  0.0    0     0
[scsi_eh_1]
3303     1 root       Mar 21 S  24  0.0 00:00:08  0.0    0     0
[usb-storage]
3309     1 root       Mar 21 S  19  0.0 00:00:00  0.0    0     0
[scsi_eh_2]
3318     1 root       Mar 21 S  24  0.0 00:00:03  0.0    0     0
[usb-storage]
3842     1 root       Mar 21 S  24  0.0 00:00:00  0.0    0     0
[kjournald]
3843     1 root       Mar 21 S  23  0.0 00:00:15  0.0    0     0
[kjournald]
3844     1 root       Mar 21 S  20  0.0 00:00:00  0.0    0     0
[kjournald]
4483     1 root       Mar 21 S  24  0.0 00:00:01  0.0  628  3648
syslogd -m 0
4487     1 root       Mar 21 S  24  0.0 00:00:00  0.0  380  2556 klogd
-x
4501     1 root       Mar 21 S  23  0.0 00:00:00  0.0  304  2568
irqbalance
4520     1 rpc        Mar 21 S  23  0.0 00:00:26  0.0  688  6900
portmap
4540     1 rpcuser    Mar 21 S  22  0.0 00:00:00  0.0  780  5828
rpc.statd
4573     1 root       Mar 21 S  23  0.0 00:00:00  0.0  448 24208
rpc.idmapd
4629     1 root       Mar 21 S  23  0.0 00:00:00  0.0  440 72668 ypbind
4647     1 root       Mar 21 S  19  0.0 00:00:00  0.0  452  2560
/usr/sbin/acpid
4690     1 root       Mar 21 S  23  0.0 00:00:00  0.0 1312 24092
/usr/sbin/sshd
4716     1 root       Mar 21 S  24  0.0 00:00:00  0.0  848 10876 xinetd
-stayalive -pidfile /var/run/xinetd.pid
4746     1 ntp        Mar 21 S  24  0.0 00:00:00  0.0 5576 21832 ntpd
-u ntp:ntp -p /var/run/ntpd.pid
4767     1 root       Mar 21 S  23  0.0 00:00:02  0.0 2500 37168
sendmail: accepting connections
4776     1 smmsp      Mar 21 S  23  0.0 00:00:00  0.0 1928 29964
sendmail: Queue runner at 01:00:00 for /var/spool/clientmqueue
4788     1 root       Mar 21 S  23  0.0 00:00:00  0.1 12832 119284
/usr/sbin/httpd
4894     1 root       Mar 21 S  23  0.0 00:00:00  0.0 1040 60364 crond
5328     1 root       Mar 21 S  23  0.0 00:00:00  0.0  464 12180
/usr/sbin/atd
5338     1 root       Mar 21 S  23  0.0 00:00:00  0.1 10384 156896
/usr/sbin/nsrexecd
7650     1 hobbit   20:55:40 S  22  0.0 00:00:00  0.0  960  5392 sh -c
vmstat 300 2 1>/apps/hobbit/client/tmp/hobbit_vmstat.hobbitserver.7402
2>&1; mv apps/hobbit/client/tmp/hobbit_vmstat.hobbitserver.7402
/apps/hobbit/client/tmp/hobbit_vmstat.hobbitserver
7653  7650 hobbit   20:55:40 S  21  0.0 00:00:00  0.0  528  3664 vmstat
300 2
7872  4788 apache   15:58:33 S  24  0.0 00:00:01  0.0 7872 119504
/usr/sbin/httpd
8271     1 root       Mar 21 S  22  0.0 00:00:00  0.0 2112 109748
/opt/dell/srvadmin/oma/bin/dsm_om_shrsvc32d
9292 12847 root       Mar 21 S  22  0.0 00:00:00  0.0 3052 135268
/opt/dell/srvadmin/dataeng/bin/dsm_sa_datamgr32d
9543    10 root       Mar 21 S   5  3.1 00:58:42  0.0    0     0
[kipmi0]
11407  4788 apache   16:09:44 S  23  0.0 00:00:01  0.0 7856 119508
/usr/sbin/httpd
11563     1 root       Mar 21 S   4  0.0 00:00:21  0.0 6216 90532
/usr/sbin/snmpd -Lsd -Lf /dev/null -p /var/run/snmpd.pid -a
12350     1 hobbit     Mar 21 S  23  0.0 00:00:00  0.0  468  2608
/apps/hobbit/server/bin/hobbitlaunch
--config=/apps/hobbit/server/etc/hobbitlaunch.cfg
--env=/apps/hobbit/server/etc/hobbitserver.cfg
--log=/var/log/hobbit/hobbitlaunch.log
--pidfile=/var/log/hobbit/hobbitlaunch.pid
12351 12350 hobbit     Mar 21 S  23  3.9 01:13:42  4.3 352672 365164
hobbitd --pidfile=/var/log/hobbit/hobbitd.pid
--restart=/apps/hobbit/server/tmp/hobbitd.chk
--checkpoint-file=/apps/hobbit/server/tmp/hobbitd.chk
--checkpoint-interval=600 --log=/var/log/hobbit/hobbitd.log
--admin-senders=xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx --store-clientlogs=!msgs
12445 12350 hobbit     Mar 21 S  23  0.0 00:00:01  0.0 1448  7940
hobbitd_channel --channel=stachg --log=/var/log/hobbit/history.log
hobbitd_history
12446 12350 hobbit     Mar 21 S  23  0.0 00:00:00  0.0 2752  7992
hobbitd_channel --channel=clichg --log=/var/log/hobbit/hostdata.log
hobbitd_hostdata
12447 12350 hobbit     Mar 21 S  24  0.0 00:00:10  0.0 1276  7944
hobbitd_channel --channel=page --log=/var/log/hobbit/page.log
hobbitd_alert --checkpoint-file=/apps/hobbit/server/tmp/alert.chk
--checkpoint-interval=600 --cfid
12448 12350 hobbit     Mar 21 S  23  0.6 00:12:03  0.0 3776  7940
hobbitd_channel --channel=status --log=/var/log/hobbit/rrd-status.log
hobbitd_rrd --rrddir=/apps/hobbit/data/rrd
12449 12350 hobbit     Mar 21 S  23  0.0 00:00:58  0.0  960  5900
hobbitd_channel --channel=data hobbitd_rrd
--rrddir=/apps/hobbit/data/rrd
12450 12350 hobbit     Mar 21 S  23  0.1 00:02:22  0.0 3868  7972
hobbitd_channel --channel=client --log=/var/log/hobbit/clientdata.log
hobbitd_client
12451 12350 hobbit     Mar 21 S  23  0.6 00:12:11  0.0 3780  7944
hobbitd_channel --channel=status --log=/var/log/hobbit/esrs1bea.log
/apps/hobbit/server/ext/esrs1bea.pl
12453 12445 hobbit     Mar 21 S  23  0.0 00:00:13  0.0 3700  5744
hobbitd_history
12454 12448 hobbit     Mar 21 S  23  2.4 00:46:06  0.5 40844 53604
hobbitd_rrd --rrddir=/apps/hobbit/data/rrd
12458 12451 hobbit     Mar 21 R  23 10.8 03:22:40  0.0 1788 60956
/usr/bin/perl /apps/hobbit/server/ext/esrs1bea.pl
12469 12447 hobbit     Mar 21 S  24  0.1 00:03:13  0.0 5156  8676
hobbitd_alert --checkpoint-file=/apps/hobbit/server/tmp/alert.chk
--checkpoint-interval=600 --cfid
12477 12450 hobbit     Mar 21 S  24  0.8 00:16:40  0.1 14464 21960
hobbitd_client
12576 12449 hobbit     Mar 21 S  24  0.3 00:05:46  0.2 20372 33156
hobbitd_rrd --rrddir=/apps/hobbit/data/rrd
12847     1 root       Mar 21 S  23  0.0 00:00:43  0.0 6120 135268
/opt/dell/srvadmin/dataeng/bin/dsm_sa_datamgr32d
14575  4788 apache   17:21:56 S  24  0.0 00:00:00  0.0 7836 119508
/usr/sbin/httpd
15177  4788 apache   18:01:01 S  23  0.0 00:00:00  0.0 7832 119508
/usr/sbin/httpd
15189 12446 hobbit     Mar 21 S  23  0.0 00:00:00  0.0 3536  5700
hobbitd_hostdata
17015     1 root       Mar 21 S  21  0.0 00:00:01  0.0 2124 14180
/opt/dell/srvadmin/dataeng/bin/dsm_sa_eventmgr32d
17077     1 root       Mar 21 S  23  0.0 00:00:16  0.0 3304 47224
/opt/dell/srvadmin/dataeng/bin/dsm_sa_snmp32d
17896     1 root       Mar 21 S  24  0.0 00:00:00  0.0  468  1912
/opt/dell/srvadmin/iws/bin/linux/dsm_om_connsvc32d -run
17925 17896 root       Mar 21 S  23  0.0 00:00:13  0.3 25884 272428
/opt/dell/srvadmin/iws/bin/linux/dsm_om_connsvc32d -run
18466     1 dbus       Mar 21 S  23  0.0 00:00:00  0.0  860 12848
dbus-daemon-1 --system
18632     1 root       Mar 21 S  24  0.0 00:00:00  0.0  288 49932 rhnsd
--interval 240
18755  4788 apache   16:27:15 S  23  0.0 00:00:01  0.0 7848 119508
/usr/sbin/httpd
18908     1 root       Mar 21 S  23  0.0 00:00:44  0.0 2944 15708 hald
19156  4788 apache   16:03:49 S  23  0.0 00:00:01  0.0 7848 119508
/usr/sbin/httpd
19406     1 root       Mar 21 S  18  0.0 00:00:00  0.0 1288 57120 sh
/usr/local/Dell SAS RAID Storage Manager/Framework/startup.sh
19420 19406 root       Mar 21 S  24  0.0 00:00:02  0.2 17236 220980
../jre/bin/java -classpath
../jre/lib/rt.jar:../jre/lib/jsse.jar:../jre/lib/jce.jar
-Djava.library.path=. -jar Framework.jar
20377  4788 apache   20:11:07 S  23  0.0 00:00:00  0.0 7744 119508
/usr/sbin/httpd
21178  4690 root     21:01:13 S  23  0.0 00:00:00  0.0 2652 39260 sshd:
hobbit [priv]
22190     1 root       Mar 21 S  21  0.0 00:00:00  0.0 4480 40904
/usr/local/bin/mrmonitord
22239  4788 apache   17:20:48 S  24  0.0 00:00:00  0.0 7848 119508
/usr/sbin/httpd
22545 22190 root       Mar 21 S  23  0.0 00:00:00  0.0 1636  8124
/usr/local/bin/mrmonitord
22694     1 root       Mar 21 S  22  0.0 00:00:00  0.0 1388 29736 login
-- root    
22695     1 root       Mar 21 S  21  0.0 00:00:00  0.0  412  2544
/sbin/mingetty tty2
22696     1 root       Mar 21 S  20  0.0 00:00:00  0.0  412  2544
/sbin/mingetty tty3
22697     1 root       Mar 21 S  21  0.0 00:00:00  0.0  412  2544
/sbin/mingetty tty4
22698     1 root       Mar 21 S  21  0.0 00:00:00  0.0  412  2544
/sbin/mingetty tty5
22699     1 root       Mar 21 S  21  0.0 00:00:00  0.0  412  2544
/sbin/mingetty tty6
23480 21178 hobbit   21:01:21 S  23  0.0 00:00:01  0.0 1772 39388 sshd:
hobbit at pts/1
23917  4788 apache   20:06:33 S  23  0.0 00:00:00  0.0 7808 119508
/usr/sbin/httpd
25281  4788 apache   17:20:54 S  24  0.0 00:00:00  0.0 7848 119508
/usr/sbin/httpd
25915 23480 hobbit   21:01:28 S  23  0.0 00:00:00  0.0 1712 57264 -bash
25966  4788 apache   18:35:58 S  23  0.0 00:00:00  0.0 7852 119508
/usr/sbin/httpd
26600  4690 root       Mar 21 S  23  0.0 00:00:00  0.0 2652 39260 sshd:
hobbit [priv]
26603 26600 hobbit     Mar 21 S  23  0.0 00:00:04  0.0 1740 39388 sshd:
hobbit at pts/0
26604 26603 hobbit     Mar 21 S  23  0.0 00:00:19  0.7 62448 117996
-bash
28242  4788 apache   17:56:59 S  23  0.0 00:00:00  0.0 7848 119504
/usr/sbin/httpd
29575 22694 root       Mar 21 S  24  0.0 00:00:00  0.0 1688 57392 -bash
29978 25915 hobbit   21:01:41 S  24  0.0 00:00:02  0.0 3244 58780 bash
31574 29978 hobbit   18:19:16 S  24  0.0 00:00:00  0.0 1780 57412 bash
31718  4788 apache   16:02:46 S  23  0.0 00:00:01  0.0 7864 119504
/usr/sbin/httpd
32570  4788 apache   18:40:59 S  23  0.0 00:00:00  0.0 7840 119508
/usr/sbin/httpd
32660   981 hobbit   20:56:55 S  23  0.0 00:00:00  0.0 1116 52816
/bin/sh /apps/hobbit/client/bin/hobbitclient.sh
32661   981 hobbit   20:56:55 S  22  0.0 00:00:00  0.0 1220 52948
/bin/sh /apps/hobbit/client/ext/temperature.sh
32663   981 hobbit   20:56:55 S  23  0.0 00:00:00  0.0 1872 60956
/usr/bin/perl -- /apps/hobbit/client/ext/bb-neterr.pl
32664   981 hobbit   20:56:55 S  20  0.0 00:00:00  0.0 1156 52948
/bin/sh /apps/hobbit/client/ext/bb-ntp.sh
32665   981 hobbit   20:56:55 S  21  0.0 00:00:00  0.0 1192 52944
/bin/sh /apps/hobbit/client/ext/bb-omsa-raid.sh
32667   981 hobbit   20:56:55 S  19  0.0 00:00:00  0.0 1080 52812
/bin/sh /apps/hobbit/client/ext/bb-mailq.sh
32669   981 hobbit   20:56:55 S  15  0.0 00:00:00  0.0 1116 52812
/bin/sh /apps/hobbit/client/ext/bb-sar-hm.sh
32675     1 hobbit   20:56:55 S  19  0.0 00:00:00  0.0 1100 52812
/bin/sh /apps/hobbit/client/ext/bf/sendmail-bf.sh
32678 32660 hobbit   20:56:55 S  23  0.0 00:00:00  0.0  984  5396
/bin/sh /apps/hobbit/client/bin/hobbitclient-linux.sh
32684 32664 hobbit   20:56:55 S  23  0.0 00:00:00  0.0 3052 64908
/usr/bin/perl -w /usr/sbin/ntptrace
32725 32665 hobbit   20:56:55 S  22  0.0 00:00:00  0.0  788 52952
/bin/sh /apps/hobbit/client/ext/bb-omsa-raid.sh
32753 32669 hobbit   20:56:55 S  14  0.0 00:00:00  0.0  560 52812
/bin/sh /apps/hobbit/client/ext/bb-sar-hm.sh
32756 32753 hobbit   20:56:55 S  14  0.0 00:00:00  0.0  444 50008
/usr/bin/sar -A -o /apps/hobbit/client/tmp/sar.hobbitserver 300 1
32758 32756 hobbit   20:56:55 S  20  0.0 00:00:00  0.0  592 49988 sadc
300 2 /apps/hobbit/client/tmp/sar.hobbitserver



To unsubscribe from the hobbit list, send an e-mail to
hobbit-unsubscribe at hswn.dk


      



More information about the Xymon mailing list