Results 1 to 6 of 6
  1. #1
    Join Date
    Dec 2004
    Location
    Behind You.
    Posts
    692

    Weird processes showing up in TOP.

    Hi guys, all of a suddeen I see weird process names running as root, like

    firewall
    makewhatis
    onlyservice

    Can someone please tell me what these are and is it something to worry about?

    I'm running FC2 with cpanel, fully updated today.

  2. #2
    Join Date
    Dec 2004
    Location
    Behind You.
    Posts
    692
    ok, updatedb is also showing up.

    Are these all normal process to show up at 2 am in the morning on a fedora core 2 + cpanel/whm box?

  3. #3
    Join Date
    Dec 2002
    Location
    Quad Cities, Iowa
    Posts
    1,597
    onlyservice - this is one of the perl scripts used by logwatch to help parse logs

    makewhatis -- generate man keyword database

    firewall - a common file distributed with APF

    updatedb - update a file name database that can be searched using 'locate'
    Need a new Web Host?
    Become a Host Refugee and receive TRUE 24/7 Support

    cPanel + Fantastico, PHP4 or PHP5
    HostRefugee.com - See our current promotions

  4. #4
    Join Date
    Dec 2004
    Location
    Behind You.
    Posts
    692
    ok thank you VERY much, I was worried someone was trying to hack the box.

    Few more that showed up were:

    uniq
    gawk

    Those friendly processes too I guess?

    Thanks for the quick response, especially at late hours!~

  5. #5
    Join Date
    Jan 2003
    Posts
    1,715
    They're data formatting programs (see also sort, grep, head, tail, ...). The manual pages ('man uniq') will tell you a bit about them.
    Game Servers are the next hot market!
    Slim margins, heavy support, fickle customers, and moronic suppliers!
    Start your own today!

  6. #6
    Join Date
    Jun 2002
    Posts
    1,376
    Originally posted by mouseattack
    Few more that showed up were:

    uniq
    gawk
    uniq will take a list and eliminate duplicates, gawk is a "pattern scanning and processing language." They're not bad or good on their own, they're most likely part of something else running.

    But as long as you've got all sorts of cronjobs running system stuff, I'd imagine they're part of that. I can't think of too many ways to abuse them.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •