Ubuntu Security :: Bunch Of Vmware-user-wra Processes Stall Cpu 100%
Mar 24, 2010
this is scary, bunch of vmware-user-wra processes stall cpu 100%!! What's going on? Server has just been restarted! Bere I restarted, the root started all this vmware-user-wra!! I was configuring vncserver! After restart, it's started by user roo300 which I have used to login via SecureShell!
Code:
top - 20:20:29 up 4 min, 85 users, load average: 76.57, 35.14, 13.60
Tasks: 629 total, 90 running, 539 sleeping, 0 stopped, 0 zombie
Cpu(s): 1.5%us, 98.5%sy, 0.0%ni, 0.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st
Mem: 3873304k total, 369500k used, 3503804k free, 50492k buffers
[code]....
View 2 Replies
ADVERTISEMENT
Oct 17, 2010
I am running Red Hat Enterprise Linux Server 5.1. I notice that when my server gets slow and the load goes up, there is a bunch of processes call mi_dmonq running. Does anyone know what this process does? I tried to find it online but didn't find anything. Also, I tried to find the binary on the server but find doesn't return anything. Does anyone know what it is?
View 3 Replies
View Related
Apr 13, 2011
When i do the following with logged in with root:
Code:
i get
Code:
When i login with user1 and do ulimit -a
i get
Code:
Why is the max user processes different for the same user? And how can i change this. I need for this user more then 20 processes...
View 2 Replies
View Related
Jan 9, 2010
is there any possible way to hide currently running processes from an user? This means I do not want him to know about what programs/processes does any other user but him run. In short words if that user runs 'ps -aux' he should get only his processes.
View 3 Replies
View Related
May 7, 2011
To: The Cog >>>
Code:
The Cog, heres the reszults for ps -ef | grep tty:
yo mama@blah:~$ ps -ef | grep tty
[code]....
View 9 Replies
View Related
May 21, 2009
I am studying for the LPIC-1 exam, and reading a book that they recommend: "Introduction to Linux: A Hands-on Guide", by Machtelt Garrels. There's one question on the 4th chapter (Processes), that I found confusing: Question: Based on process entries in /proc, owned by your UID, how would you work to find out which processes these actually represent?
What does he mean? If I run the command (considering that my username is sl33p):
Code:
$ps -u sl33p
...gives me the right answer?
The ps man page says:
-u userlist
Select by effective user ID (EUID) or name.
This selects the processes whose effective user name or ID is in userlist. The effective user ID describes the user whose file access permissions are used by the process (see geteuid(2)). Identical to U and --user.
View 8 Replies
View Related
Feb 10, 2010
I have some domains on a VPS server. Typical account memory usage for all domains runs at 50% of available, but I have a problem. One domain is causing me trouble because intermittently traffic will spike on that domain, causing so many requests within 1 min that I exceed my memory allocation for my entire VPS package. Apache is then killed but the virtualization software and Apache must then be restarted.
A sample snippet from tops right before the sever went down would like like this:
All of that memory usage adds up. I would like to "throttle" the number of processes that user/domain can run. I think this would be a quick and easy way to keep the domain from taking down my entire VPS. My understanding is that I could do this with the /etc/security/limits.conf file.
Is that correct?
I have never done this before. Do I want to set a hard or soft limit? I think if I wanted to limit the number of processes for "coldclim" to 15 I would add a line to limits.conf like this:
Code:
Assuming that is correct, can anyone tell me how the website would respond once it reached its limit? Would visitor queries become sluggish, or would the website not come up for them at all?
View 4 Replies
View Related
Feb 15, 2011
I have a problem with the permission of the directories under /proc, they are readable and accessible only by Owner (they have permission 500 instead of the usual 555) As a consequence, the processes are visible only to the Owners or to Root. For exampleif I want to check if there is mysql
I see it only with the user mysql or with root because the directory has permission 500
This problem obstacles the functioning of some applications that should check the existence of some processes managed by other users. At the beginning all was working well. But after a while the problem appeared and I dont know which is the reason of it. how to restore the standard management of permissions of / proc?]
I have a Ubuntu server Maverick 10:10.
View 2 Replies
View Related
Jun 15, 2010
user@host$ killall -9 -u user Will it definitely kill all processes owned by user (including forkbombs)?
No new processes is spawned to user from other users. No user's processes are in D-sleep and unkillable.No processes are trying to detect and ptrace or terminate this started killall (but they can ptrace or do other things with each other) There is ulimit that prevents too much processes (but killall is already started and allocated it's memory)
E.g. if killall will finish untampered and successfully is it 100% that no processes are left with this uid? If no, how to do it properly (with standard commands and no root access). Will SysRq+I definitely kill all things (even replicating)?
View 2 Replies
View Related
Nov 18, 2010
All the kill idle user processes scripts I've seen don't take into account that the user might have multiple sessions open. Such is the case with one of our clients. Currently, every hour or two I need to do the following:
This will get the TTY and idle time for all users.
For each idle time over a half hour, I do the following (TTY is the TTY from the previous command with a space.
I then kill those processes.
There must be a way to do this automatically in a bash or perl script. I've tried both, but can't seem to get things to work properly.
View 2 Replies
View Related
Jan 13, 2010
I post this to have a memo about how I looked into this problem. You can use this command to check what is hidden.
Code:
/usr/lib/chkrootkit/chkproc -v -p 3 | grep /proc/ | sed 's/.*(/proc/[0-9]*).*/1/'| xargs -n1 -I %%% cat %%%/cmdline
If it doesn't output anything, then nothing is hidden currently. This usually means that a process was started between the ps command and the /proc check of chkrootkit. You can check what those command(s) are by running the above in a loop, with high priority.
[Code]...
Does anyone know how to get rid of these false positives while retaining other functionality of chkrootkit?
View 1 Replies
View Related
Mar 28, 2010
I'm still pretty new to linux, and burning through a unix/linux course offered at the local JC. I'm working on an assignment for shell scripting and I need to make a script that displays a bunch of junk (pwd, date, yadda yadda) and then prompts the user to enter a directory so they can view the contents. If it's valid, then it displays the contents. If it isn't then it throws an error message and the script stops. This is done using if, then and else. The problem is, my script always shoots straight to the else, even if the subdir entered IS a valid subdirectory.Here's what I have:
Code:
clear
pwd
[code]....
View 3 Replies
View Related
Feb 11, 2010
I have what I think is a somewhat different failure of standby than I've seen listed on other threads, and I'm stumped.The system hangs on this for a while, then comes back to the login screen without going into standby. This ONLY HAPPENS on a SECOND standby attempt--the first standby after booting ALWAYS succeeds.The standby log doesn't indicate any failures.I had made other changes previously that temporarily got standby working consistently:/etc/default/grub: GRUB_CMDLINE_LINUX_DEFAULT="quiet splash usbcore.autosuspend=-1"
View 1 Replies
View Related
Mar 3, 2011
my computer is often very slow, to the point of stalling. I tty'd in and when I ran ps -ef I noticed about 10 /usr/sbin/apache2 -k start I dont even want 1 apache running. Any suggestions why these are running, or how to stop it? Well, I can stop it with a sudo killall, but how can I make sure it doesnt happen again?
View 5 Replies
View Related
Nov 2, 2010
I would like to give a non-root user (nicollet) the ability to detect and send a signal to processes started by Apache2 (those processes are FastCGI scripts and the signal tells them to empty their cache). The processes are owned by the web user (www-data), and I'm running on Debian unstable.
I can't find any way to have the nicollet user see those processes.
The processes are running and can see by both root and www-data:
root@linux-01:~# ps -Af | grep baryton
www-data 17649 17648 0 10:27 ? 00:00:00 baryton
www-data 28145 1 0 Nov01 ? 00:00:12 baryton --bot
root 18701 18700 0 10:46 pts/0 00:00:00 grep baryton
root@linux-01:~#
[Code]....
The most surprising is that the grep process is indeed run by www-data (because it's started from a setuid executable) and is visible, but the baryton process isn't.
What's going on here? Why can ps run by www-data show those processes, but ps run by a setuid executable running as www-data cannot, when it's started by nicollet?
View 1 Replies
View Related
Feb 2, 2009
Few days ago, the server did not respond to a ssh request from a user at night. A user tried to check what went wrong with computer and tried to login from terminal next morning. As the computer was unresponsive, he somehow decided to boot it by turning the power off. To make the story short, the server rebooted; however, he can't login to his account. Actually, the server could not start some processes; but was able to ask user to enter his account username. Even though, he enters the correct username and password, server does not accept the request. I also could not login as root.
I just checked the server logs by booting it in single user mode. Here are some interesting lines:
Before the reboot:
irqbalance : can't balance irqs on a uniprocessor system: failed
After the reboot:
irqbalance : can't balance irqs on a uniprocessor system: failed
fsck:
fsck /: (this is repeated 900+ times)
[code]....
View 1 Replies
View Related
Feb 2, 2009
Few days ago, the server did not respond to a ssh request from a user at night. A user tried to check what went wrong with computer and tried to login from terminal next morning. As the computer was unresponsive, he somehow decided to boot it by turning the power off. To make the story short, the server rebooted; however, he can't login to his account. Actually, the server could not start some processes; but was able to ask user to enter his account username. Even though, he enters the correct username and password, server does not accept the request. I also could not login as root.
I just checked the server logs by booting it in single user mode. Here are some interesting lines:
Before the reboot:
irqbalance : can't balance irqs on a uniprocessor system: failed
After the reboot:
irqbalance : can't balance irqs on a uniprocessor system: failed
fsck:
This might be something related with shadow file.
Here is part of /etc/shadow
View 3 Replies
View Related
Oct 5, 2010
Normally all I/O goes through the kernel so that it can schedule the operations and prevent processes from stepping on each other. A few special user processes are allowed to slide around the kernel, usually by being given direct access to I/O ports. X servers are the most common example of this isn't it ? give examples for any other processes that are allowed to slide around the kernel ?
View 3 Replies
View Related
Jun 22, 2009
Is there an easy way to log the names of the actual processes that initiate, let's say, outbound connections from the Linux machine, for instance track what process initiates an outbound connection to MySQL port to remote machine and stuff like that?
View 3 Replies
View Related
Mar 6, 2011
I'm trying to get the end result to have the same format as this as well:
1 bin
2 daemon
67 erozner
[code]....
Where the numbers are the number of processes being run by the user (the name right next to it).if I input the command egrep myFile into the terminal, it should look for every line with the letter x in myFile, right?
View 5 Replies
View Related
Sep 2, 2010
I was wondering if anyone might know of good reference material, books websites etc., that discuss network security issues in layman terms. I would like to set up a dedicated Linux box as a firewall and would like to have a deeper understanding of the different types of configurations that are possible. I run a dual boot system and most of the firewalls I have used on the Windows side are very confusing to me. A lot of the time they give you a pop up that informs you that some cryptically named program is trying to access the network or the internet and wants to know if I want it to or not, 99% of the time I have not idea if it is a legitimate program or not. I realize that this is probably a separate issue (knowing how to identify programs and processes that should have access from those that should not) from setting up a firewall and basic network security but I know that they are related.
View 3 Replies
View Related
Aug 13, 2010
That would seem like an elementary feature to be able to enable only a few system applications access to the Internet. That would prevent trojans to download your HD for examples. I looked around and played with iptables but I couldn't not find anything that do the job. I loaded the xt_owner kernel for iptables but the --cmd-owner command is lacking. That was my holy grail but could not get --cmd-owner to work. iptables -I OUTPUT -m owner --cmd-owner "firefox" -j LOG --log-prefix "Testing " How can I protect my machine against the enemy within.
OpenSuse 11.2
Kernel: 2.6.31.12-0.2-desktop
View 1 Replies
View Related
Dec 30, 2010
I've a Linux box with few users (with shell). I would like to prevent normal users see all the processes running on the box. How can I implement this?
View 1 Replies
View Related
Sep 3, 2010
I like to watch DVD's from netflix etc on my laptop. I've tried VLC, Mplayer, Movie Player and Xine and all of them do the same thing more or less. The movie plays but it pauses or lags every 3-6 minutes or so, then resumes. VLC seems to work the best, but it does it too and it's to the point where it is irritating to watch a movie on it. You watch 10 minutes, then a freeze, VLC says "buffer.." and runs from 0-100% in a little progress bar, the DVD drive spins up again furiously then the movie plays again. Over and over through the whole movie.
It does it in EVERY DVD I have tried. I've tried everything from completely uninstalling the movie players, reinstalling them, tweaking every setting I can find per instructions I've found on other forums. I even went as far as going into my laptops BIOS to set the CD drive speed to HIGH.
Is this just how it is watching a DVD on Ubuntu or what? I really do NOT want to resort to reinstalling Windows 7 (ugh) but this is unacceptable. I'm open to any and all suggestions on how to get acceptable, reliable performance out of one of these DVD apps. Not sure what info will be relevant but, the machine is a brand new Lenovo T510 thinkpad, Core i5 2.4 ghz, 4 gb RAM, Nvidia graphics. Running Ubuntu 10.04 32 bit.
View 9 Replies
View Related
Nov 2, 2010
Are there any tools to view/edit user space memory of running processes on Linux?
It would be a great learning tool.
View 1 Replies
View Related
Jan 14, 2011
i am using putty to connect to the linux server and i am using nano as my text editor to write a bash script.
this is my script:
echo "Please enter your Username"
read userName
userName= grep $USER /etc/passwd | cut -d: -f5
echo "Welcome " $userName | cat >> output.txt
the problem i have is that when i enter my username, the output (my real name) does not display in the output.txt. instead it displays in putty. so when i run my script in putty it shows the message to enter username and after i enter my username my real name appears below it. i want it to show in the output.txt
View 1 Replies
View Related
Jul 25, 2011
vmware-user has crashed. I have this bug when I try to cut and paste with Libre writer in 11.3 and just do not know what action to take. it also comes up when I boot up.
View 9 Replies
View Related
Feb 6, 2010
i have searched the forum but can't find the solution for stalling network in the middle of something. i have to restart the computer. i cannot rely ubuntu for 24 hours non-stop small server. the stalling problem occurs when I start pulling/downloading via samba or sftp (smb:// or sftp://) from another computers/device (like wdtv). when i check the lenovo, all internet connecetion is dead. ifconfig shows the ip but it just dead.
View 2 Replies
View Related
Nov 22, 2010
Trying to debug a network issue - we have problems with scp transfers to a remote host intermittently stalling. I believe it may have something to do with incorrect handling of sack / dsack TCP options. Looking at netstat -s, during a (successful) scp transfer the TCPSACKDiscard and TCPDSACKIgnoredNoUndo counters increase rapidly. This is on the client initiating the transfer to the remote server. This doesn't seem normal, but I'm having difficulty finding an explanation of what exactly these counters signify. The tcp_sack / tcp_dsack / tcp_fack options are enabled in the kernel on both hosts.
How do I debug this further? Are the counters a symptom of a known problem? It's kind of hard to google this, all I get is unrelated netstat output which happens to include 1 or 2 discarded SACKs, not tens of thousands like I am seeing. I can make tcpdumps on the client (unfortunately not the server), but what should I look for?
View 3 Replies
View Related
Jun 28, 2011
Bug-buddy tells me vmware-user crash on every-time I boot up. I don't know what to do about this just pop-up without i changed anything on my machine. I saved a "crash report" on the desktop but couldn't understand what was the "problem" when I read it.
Opensuse 11.3 gnome.
View 9 Replies
View Related
