| View previous topic :: View next topic |
| Author |
Message |
Tiro
l33t
Joined: 14 Feb 2003
Posts: 752
Location: italy
|
 Posted: Thu Jul 22, 2004 9:59 pm Post subject: [admin] strano users ... [RESOLTO!] |
 |
|
# users
???? ???? gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo root root root root root root
...non sono esperto di questo comando ma credo che si sbagli dato che ho 3 console root su framebuffer ed una 1 utente (gentoo in xterm)...BUG?!? Come usarlo in modo corretto?
Grazie! 
Last edited by Tiro on Fri Jul 23, 2004 9:24 pm; edited 1 time in total |
|
| Back to top |
|
 |
koma
Advocate
Joined: 06 Jun 2003
Posts: 2702
Location: Italy
|
| Posted: Thu Jul 22, 2004 10:32 pm Post subject: |
|
|
mhhh posta un e un
| Code: | | ps aux |grep -v gnome |grep -v kde |
Si sa mai che ti hanno bucato o qlc demone è impazzito
_________________
http://www.youtube.com/watch?v=_yoJI-Tl94g GLORY GLORY HYPNOTOAD |
|
| Back to top |
|
|
Tiro
l33t
Joined: 14 Feb 2003
Posts: 752
Location: italy
|
| Posted: Thu Jul 22, 2004 10:33 pm Post subject: |
|
|
LoRD_TiRO gentoo # w
00:33:09 up 1:52, 87 users, load average: 0,08, 0,44, 1,15
USER TTY LOGIN@ IDLE JCPU PCPU WHAT
root vc/1 22:42 1:28m 21.81s 21.46s /usr/bin/python -O /usr/bin/emerge -Uv world
root vc/2 22:42 46:55 26.32s 26.14s tethereal
root vc/3 23:09 39:49 0.34s 0.34s -bash
gentoo pts/0 22:47 0.00s 0.19s 0.08s xterm -rv -geometry =80x55+50+10 -font -misc-fixed-medium-r-normal--14-130-75-75-c-70-iso8859-15
LoRD_TiRO gentoo # ps ax
PID TTY STAT TIME COMMAND
1 ? S 0:01 init [3]
2 ? SN 0:00 [ksoftirqd/0]
3 ? S< 0:01 [events/0]
4 ? S< 0:00 [khelper]
5 ? S< 0:00 [kacpid]
37 ? S< 0:00 [kblockd/0]
38 ? S 0:00 [khubd]
49 ? S 0:01 [pdflush]
50 ? S 0:05 [pdflush]
52 ? S< 0:00 [aio/0]
51 ? S 0:01 [kswapd0]
53 ? S< 0:01 [xfslogd/0]
54 ? S< 0:00 [xfsdatad/0]
55 ? S 0:00 [xfsbufd]
59 ? S 0:00 [kseriod]
360 ? S<s 0:00 udevd
933 ? S 0:00 [xfssyncd]
938 ? S 0:00 [xfssyncd]
939 ? S 0:00 [xfssyncd]
940 ? S 0:00 [xfssyncd]
941 ? S 0:00 [xfssyncd]
2483 ? Ss 0:00 /usr/sbin/syslog-ng
2703 ? Ss 0:00 /sbin/dhcpcd eth0
2804 ? Ss 0:00 /sbin/portmap
2886 ? Ss 0:00 login -- root
2887 ? Ss 0:00 login -- root
2888 ? Ss 0:00 login -- root
2889 tty4 Ss+ 0:00 /sbin/agetty 38400 tty4 linux
2890 tty5 Ss+ 0:00 /sbin/agetty 38400 tty5 linux
2891 tty6 Ss+ 0:00 /sbin/agetty 38400 tty6 linux
3044 tty1 Ss 0:00 -bash
3084 tty2 Ss 0:00 -bash
5031 ? Ss 0:00 /usr/X11R6/bin/xdm
5047 ? R 3:02 /usr/X11R6/bin/X -auth /etc/X11/xdm/authdir/authfiles/A:0-cgm4X6
5063 ? S 0:00 -:0
5113 ? S 0:00 /bin/bash --login /etc/X11/xdm/Xsession
5180 ? S 0:02 /usr/bin/kahakai
5182 ? Ss 0:00 /bin/bash /home/gentoo/.kahakai/autostart
5184 ? S 0:00 xterm -rv -geometry =80x55+50+10 -font -misc-fixed-medium-r-normal--14-130-75-75-c-70-iso8859-15
5187 pts/0 Ss 0:00 bash
5837 tty1 S+ 0:21 /usr/bin/python -O /usr/bin/emerge -Uv world
29052 tty3 Ss+ 0:00 -bash
29896 tty2 S+ 0:26 tethereal
32469 pts/0 S 0:00 su
32476 pts/0 S 0:00 bash
4404 ? Ss 0:00 /bin/bash /usr/bin/mozilla
4411 ? S 1:09 /usr/lib/mozilla/mozilla-bin
4412 ? S 0:00 /usr/lib/mozilla/mozilla-bin
4417 ? S 0:00 /usr/lib/mozilla/mozilla-bin
4440 ? S 0:00 /usr/lib/mozilla/mozilla-bin
19585 ? S 0:00 /usr/lib/mozilla/mozilla-bin
19586 ? S 0:00 /usr/lib/mozilla/mozilla-bin
19587 ? S 0:00 /usr/lib/mozilla/mozilla-bin
19588 ? S 0:00 /usr/lib/mozilla/mozilla-bin
19589 ? S 0:00 /usr/lib/mozilla/mozilla-bin
19592 tty1 S+ 0:00 /usr/bin/wget -t 5 --passive-ftp -P /usr/portage/distfiles http://us3.samba.org/samba/ftp//samba-3.0.5.tar.gz
19593 pts/0 R+ 0:00 ps ax |
|
| Back to top |
|
|
Tiro
l33t
Joined: 14 Feb 2003
Posts: 752
Location: italy
|
| Posted: Thu Jul 22, 2004 10:34 pm Post subject: |
|
|
netstat -aln
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN
tcp 0 0 192.168.8.3:33045 216.40.24.70:80 ESTABLISHED
tcp 1 1 192.168.8.3:33043 130.89.175.1:80 CLOSING
tcp 1 0 192.168.8.3:33049 128.193.0.38:80 CLOSE_WAIT
tcp 1 0 192.168.8.3:33048 128.193.0.38:80 CLOSE_WAIT
tcp 0 0 :::6000 :::* LISTEN
udp 0 0 0.0.0.0:68 0.0.0.0:*
udp 0 0 0.0.0.0:111 0.0.0.0:*
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags Type State I-Node Path
unix 2 [ ACC ] STREAM LISTENING 6351 /tmp/.X11-unix/X0
unix 2 [ ] DGRAM 1311 @udevd
unix 2 [ ACC ] STREAM LISTENING 4298 /dev/log
unix 3 [ ] STREAM CONNECTED 57351 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 57350
unix 3 [ ] STREAM CONNECTED 57309 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 57308
unix 3 [ ] STREAM CONNECTED 6471 /tmp/.X11-unix/X0
unix 6 [ ] STREAM CONNECTED 6470
unix 3 [ ] STREAM CONNECTED 6460 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 6459
unix 3 [ ] STREAM CONNECTED 6458 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 6457
unix 3 [ ] STREAM CONNECTED 6397 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 6354
unix 3 [ ] STREAM CONNECTED 4630 /dev/log
unix 3 [ ] STREAM CONNECTED 4629
unix 2 [ ] DGRAM 1308
Active IPX sockets
Proto Recv-Q Send-Q Local Address Foreign Address State |
|
| Back to top |
|
|
koma
Advocate
Joined: 06 Jun 2003
Posts: 2702
Location: Italy
|
| Posted: Thu Jul 22, 2004 10:38 pm Post subject: |
|
|
| Code: | | gentoo pts/0 22:47 0.00s 0.19s 0.08s xterm -rv -geometry =80x55+50+10 -font -misc-fixed-medium-r-normal--14-130-75-75-c-70-iso8859-15 |
(cerca di usare i tag code e simili perchè sennò uno fa difficoltà a leggere .
Qma è questo che fa macello.... =) è un xterm lanciato come user gentoo nn so perchè nè come ma è così almeno credo
_________________
http://www.youtube.com/watch?v=_yoJI-Tl94g GLORY GLORY HYPNOTOAD |
|
| Back to top |
|
|
Tiro
l33t
Joined: 14 Feb 2003
Posts: 752
Location: italy
|
| Posted: Thu Jul 22, 2004 10:45 pm Post subject: |
|
|
| no, non è xterm perchè lo stesso lo ottengo da console su framebuffer....secondo me è un qualche demone impazzito o un bug grande come una casa nel comando o bo..!? ...cmq non mi dispiacerebbe riemergerlo ma non so in che utils si trova... |
|
| Back to top |
|
|
koma
Advocate
Joined: 06 Jun 2003
Posts: 2702
Location: Italy
|
| Posted: Thu Jul 22, 2004 11:05 pm Post subject: |
|
|
non hai capito non cambia risultato da dove lo fai ma a seconda di quali applicazioni sono aperte... prova a killare x e tutto quanto appena hai finito di emergere samba fai di nuovo ps aux (psaux non ax perchè sennò nn vedi gli utenti) e vedi un po' tu
_________________
http://www.youtube.com/watch?v=_yoJI-Tl94g GLORY GLORY HYPNOTOAD |
|
| Back to top |
|
|
Diggs
Apprentice
Joined: 07 Oct 2003
Posts: 239
Location: LoSt In NeT SpAcE
|
| Posted: Fri Jul 23, 2004 3:50 am Post subject: |
|
|
| Tiro wrote: | netstat -aln
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN
tcp 0 0 192.168.8.3:33045 216.40.24.70:80 ESTABLISHED
tcp 1 1 192.168.8.3:33043 130.89.175.1:80 CLOSING
tcp 1 0 192.168.8.3:33049 128.193.0.38:80 CLOSE_WAIT
tcp 1 0 192.168.8.3:33048 128.193.0.38:80 CLOSE_WAIT
tcp 0 0 :::6000 :::* LISTEN
udp 0 0 0.0.0.0:68 0.0.0.0:*
udp 0 0 0.0.0.0:111 0.0.0.0:*
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags Type State I-Node Path
unix 2 [ ACC ] STREAM LISTENING 6351 /tmp/.X11-unix/X0
unix 2 [ ] DGRAM 1311 @udevd
unix 2 [ ACC ] STREAM LISTENING 4298 /dev/log
unix 3 [ ] STREAM CONNECTED 57351 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 57350
unix 3 [ ] STREAM CONNECTED 57309 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 57308
unix 3 [ ] STREAM CONNECTED 6471 /tmp/.X11-unix/X0
unix 6 [ ] STREAM CONNECTED 6470
unix 3 [ ] STREAM CONNECTED 6460 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 6459
unix 3 [ ] STREAM CONNECTED 6458 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 6457
unix 3 [ ] STREAM CONNECTED 6397 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 6354
unix 3 [ ] STREAM CONNECTED 4630 /dev/log
unix 3 [ ] STREAM CONNECTED 4629
unix 2 [ ] DGRAM 1308
Active IPX sockets
Proto Recv-Q Send-Q Local Address Foreign Address State |
In un certo senso c'hai tutto aperto.
Nono so se te l'abbia già fatto: installa iptables e chiudi quelle porte li 
_________________
IRCNET NICK: diggs on IRCNET
http://leonardo.netsons.org/
Gioca a Tremulous! Player [!!!] Diggs [ITA] |
|
| Back to top |
|
|
randomaze
Bodhisattva
Joined: 21 Oct 2003
Posts: 9985
|
| Posted: Fri Jul 23, 2004 9:50 am Post subject: Re: strano users ... |
|
|
| Tiro wrote: | ...non sono esperto di questo comando ma credo che si sbagli dato che ho 3 console root su framebuffer ed una 1 utente (gentoo in xterm)...BUG?!? Come usarlo in modo corretto?
|
Direi che lo hai usato in modo corretto 
L'unica possibilità che mi viene in mente é che il tuo file /var/run/utmp é corrotto.... hai provato anche a fare un reboot?
_________________
Ciao da me! |
|
| Back to top |
|
|
Tiro
l33t
Joined: 14 Feb 2003
Posts: 752
Location: italy
|
| Posted: Fri Jul 23, 2004 9:55 am Post subject: |
|
|
ok...dunque...come firewall ho shorewall (probabilmente non configurato a dovere...ma ho ragione di credere che funzioni abbastanza bene...)
dopo avere chiuso X:
| Quote: |
#w
11:45:29 up 17 min, 84 users, load average: 0,02, 0,11, 0,18
USER TTY LOGIN@ IDLE JCPU PCPU WHAT
root vc/1 11:45 0.00s 0.07s 0.00s w
#psaux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.1 0.0 1400 492 ? S 11:28 0:01 init [3]
root 2 0.0 0.0 0 0 ? SN 11:28 0:00 [ksoftirqd/0]
root 3 0.0 0.0 0 0 ? S< 11:28 0:00 [events/0]
root 4 0.0 0.0 0 0 ? S< 11:28 0:00 [khelper]
root 5 0.0 0.0 0 0 ? S< 11:28 0:00 [kacpid]
root 37 0.0 0.0 0 0 ? S< 11:28 0:00 [kblockd/0]
root 38 0.0 0.0 0 0 ? S 11:28 0:00 [khubd]
root 49 0.0 0.0 0 0 ? S 11:28 0:00 [pdflush]
root 50 0.1 0.0 0 0 ? S 11:28 0:01 [pdflush]
root 52 0.0 0.0 0 0 ? S< 11:28 0:00 [aio/0]
root 51 0.0 0.0 0 0 ? S 11:28 0:00 [kswapd0]
root 53 0.0 0.0 0 0 ? S< 11:28 0:00 [xfslogd/0]
root 54 0.0 0.0 0 0 ? S< 11:28 0:00 [xfsdatad/0]
root 55 0.0 0.0 0 0 ? S 11:28 0:00 [xfsbufd]
root 59 0.0 0.0 0 0 ? S 11:28 0:00 [kseriod]
root 348 0.0 0.0 1372 408 ? S<s 11:28 0:00 udevd
root 917 0.0 0.0 0 0 ? S 11:28 0:00 [xfssyncd]
root 924 0.0 0.0 0 0 ? S 11:28 0:00 [xfssyncd]
root 925 0.0 0.0 0 0 ? S 11:28 0:00 [xfssyncd]
root 926 0.0 0.0 0 0 ? S 11:28 0:00 [xfssyncd]
root 927 0.0 0.0 0 0 ? S 11:28 0:00 [xfssyncd]
root 3316 0.0 0.1 1652 716 ? Ss 11:28 0:00 /usr/sbin/syslog-ng
root 3602 0.0 0.0 1416 484 ? Ss 11:28 0:00 /sbin/dhcpcd eth0
bin 3703 0.0 0.1 1588 644 ? Ss 11:28 0:00 /sbin/portmap
root 3787 0.0 0.1 1444 588 tty3 Ss+ 11:28 0:00 /sbin/agetty 38400 tty3 linux
root 3788 0.0 0.1 1444 588 tty4 Ss+ 11:28 0:00 /sbin/agetty 38400 tty4 linux
root 3789 0.0 0.1 1444 588 tty5 Ss+ 11:28 0:00 /sbin/agetty 38400 tty5 linux
root 3790 0.0 0.1 1444 588 tty6 Ss+ 11:28 0:00 /sbin/agetty 38400 tty6 linux
root 4724 0.1 0.1 1444 592 tty2 Ss+ 11:44 0:00 /sbin/agetty 38400 tty2 linux
root 4771 0.0 0.1 2224 1016 ? Ss 11:45 0:00 login -- root
root 4824 0.6 0.3 4780 1868 tty1 Ss 11:45 0:00 -bash
root 4838 0.0 0.1 2388 812 tty1 R+ 11:45 0:00 ps axu
#netstataln
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN
udp 0 0 0.0.0.0:68 0.0.0.0:*
udp 0 0 0.0.0.0:111 0.0.0.0:*
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags Type State I-Node Path
unix 2 [ ACC ] STREAM LISTENING 4878 /dev/log
unix 2 [ ] DGRAM 1335 @udevd
unix 3 [ ] STREAM CONNECTED 5450 /dev/log
unix 3 [ ] STREAM CONNECTED 5449
unix 2 [ ] DGRAM 1285
Active IPX sockets
Proto Recv-Q Send-Q Local Address Foreign Address State
#users
???? ???? gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo gentoo root root root root root
|
|
|
| Back to top |
|
|
koma
Advocate
Joined: 06 Jun 2003
Posts: 2702
Location: Italy
|
|
| Back to top |
|
|
Tiro
l33t
Joined: 14 Feb 2003
Posts: 752
Location: italy
|
| Posted: Fri Jul 23, 2004 10:12 am Post subject: |
|
|
| ...pure io! |
|
| Back to top |
|
|
randomaze
Bodhisattva
Joined: 21 Oct 2003
Posts: 9985
|
| Posted: Fri Jul 23, 2004 10:24 am Post subject: |
|
|
Perché avete fatto tutti questi giri sulla rete?
Hai letto il mio post?
_________________
Ciao da me! |
|
| Back to top |
|
|
Tiro
l33t
Joined: 14 Feb 2003
Posts: 752
Location: italy
|
| Posted: Fri Jul 23, 2004 11:09 am Post subject: |
|
|
| Quote: |
L'unica possibilità che mi viene in mente é che il tuo file /var/run/utmp é corrotto.... hai provato anche a fare un reboot? |
si...più di uno... |
|
| Back to top |
|
|
randomaze
Bodhisattva
Joined: 21 Oct 2003
Posts: 9985
|
| Posted: Fri Jul 23, 2004 11:41 am Post subject: |
|
|
| Tiro wrote: | | si...più di uno... |
Prova a fare:
| Code: | | echo "" > /var/run/utmp |
e poi fai il logout degli utenti
_________________
Ciao da me! |
|
| Back to top |
|
|
Tiro
l33t
Joined: 14 Feb 2003
Posts: 752
Location: italy
|
| Posted: Fri Jul 23, 2004 1:13 pm Post subject: |
|
|
mitico...!!!! ora funziona!
| Quote: |
$users
gentoo root root
|
Grazie! grazie mille... ... però non mi è chiarissimo il motivo... |
|
| Back to top |
|
|
randomaze
Bodhisattva
Joined: 21 Oct 2003
Posts: 9985
|
| Posted: Fri Jul 23, 2004 2:01 pm Post subject: |
|
|
| Tiro wrote: | | Grazie! grazie mille... ... però non mi è chiarissimo il motivo... |
Il motivo per cui adesso funziona é che hai svuotato il file /var/run/utmp che, evidentemente era corrotto.
Il come mai quel file fosse corrotto non te lo so dire... forse qualche aggiornamento dei programmi che ci scrivono su ha portato a un incompatibilità oppure un giorno in cui é mancata la luce.
Non dimenticare il tag [risolto]
_________________
Ciao da me! |
|
| Back to top |
|
|
.:deadhead:.
Advocate
Joined: 25 Nov 2003
Posts: 2963
Location: Milano, Italy
|
|
| Back to top |
|
|
randomaze
Bodhisattva
Joined: 21 Oct 2003
Posts: 9985
|
| Posted: Fri Jul 23, 2004 2:58 pm Post subject: |
|
|
| .:deadhead:. wrote: | Spiega spiega... Son curioso anche io...che ci sta dentro  |
E' semplicemente un database che tiene traccia degli accessi al sistema... se l'accesso é fatto in modo "conforme" allo standard, infatti si vede sulla man page:
| man 5 utmp wrote: | | The utmp file allows one to discover information about who is currently using the system. There may be more users currently using the system, because not all programs use utmp logging. |
Purtroppo dato che lo fa in modo binario non é facile andare a vedere quello che sta dentro.
Il come sono arrivato a capire che era lui dipende dal fatto che ho scritto:
e poi ho guardato quali erano i files che andava a cercare...
Ho detto di azzerarlo con
| Code: | | echo "" > /var/run/utmp |
invece che ricreandolo o simili dipende dal fatto che non si sa se qualcuno (ad esempio getty) in quel momeno lo sta tenendo aperto.
_________________
Ciao da me! |
|
| Back to top |
|
|
|
Forum italiano (Italian)
