linux常用命令
1.losf
lsof（list open files）是一个列出当前系统打开文件的工具。在linux环境下，任何事物都以文件的形式存在，通过文件不仅仅可以访问常规数据，还可以访问网络连接和硬件。
查看22端口现在运行的情况
[root@Apache ~]# lsof -i :22 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME sshd 1527 root 3u IPv4 11196 0t0 TCP *:ssh (LISTEN) sshd 1527 root 4u IPv6 11200 0t0 TCP *:ssh (LISTEN) sshd 10123 root 3r IPv4 49132 0t0 TCP 172.24.3.99:ssh->172.24.3.29:65061 (ESTABLISHED) [root@Apache ~]#
恢复删除的文件
2. finger
finger命令的功能是查询用户的信息，通常会显示心痛的某个用户的用户名、主目录、停滞时间、登录时间、登录shell等，效果与w命令类似.
[root@Apache ~]# finger Login Name Tty Idle Login Time Office Office Phone root root pts/0 Mar 26 10:59 (172.24.3.29) [root@Apache ~]# [root@Apache ~]# [root@Apache ~]# w 11:26:46 up 8 days, 20:52, 1 user, load average: 0.00, 0.00, 0.00 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT root pts/0 172.24.3.29 10:59 0.00s 0.10s 0.01s w [root@Apache ~]#
查linux服务器的进程
ps 的例子
-bash-2.05b$ ps axu USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 1508 504 ? S Jan16 0:06 init root 2 0.0 0.0 0 0 ? SW Jan16 0:07 [keventd] root 3 0.0 0.0 0 0 ? SW Jan16 0:00 [kapmd] root 4 0.0 0.0 0 0 ? SWN Jan16 0:00 [ksoftirqd/0] root 7 0.0 0.0 0 0 ? SW Jan16 0:03 [bdflush] root 5 0.0 0.0 0 0 ? SW Jan16 2:38 [kswapd] root 6 0.0 0.0 0 0 ? SW Jan16 0:07 [kscand] root 8 0.0 0.0 0 0 ? SW Jan16 0:00 [kupdated] root 9 0.0 0.0 0 0 ? SW Jan16 0:00 [mdrecoveryd] root 18 0.0 0.0 0 0 ? SW Jan16 0:00 [scsi_eh_0] root 19 0.0 0.0 0 0 ? SW Jan16 0:00 [scsi_eh_1] root 22 0.0 0.0 0 0 ? SW Jan16 0:00 [kjournald] root 85 0.0 0.0 0 0 ? SW Jan16 0:00 [khubd] root 370 0.0 0.0 0 0 ? SW Jan16 0:00 [kjournald] root 371 0.0 0.0 0 0 ? SW Jan16 0:00 [kjournald] root 372 0.0 0.0 0 0 ? SW Jan16 0:03 [kjournald] root 373 0.0 0.0 0 0 ? SW Jan16 0:00 [kjournald] root 374 0.0 0.0 0 0 ? SW Jan16 0:55 [kjournald] root 375 0.0 0.0 0 0 ? SW Jan16 0:00 [kjournald] root 376 0.0 0.0 0 0 ? SW Jan16 1:01 [kjournald] root 377 0.0 0.0 0 0 ? SW Jan16 0:00 [kjournald] root 790 0.0 0.0 1572 600 ? S Jan16 0:37 syslogd -m 0 root 794 0.0 0.0 1512 428 ? S Jan16 0:00 klogd -x rpc 820 0.0 0.0 1656 608 ? S Jan16 0:00 portmap rpcuser 839 0.0 0.0 1700 720 ? S Jan16 0:00 rpc.statd root 876 0.0 0.0 1488 492 ? S Jan16 0:00 /usr/sbin/apmd -p 10 -w 5 -W -P /etc/sysconfig/apm-scripts/apmscript root 892 0.0 0.0 24220 784 ? S Jan16 0:00 ypbind root 998 0.0 0.0 1620 600 ? S Jan16 0:00 /usr/sbin/automount /home file /etc/auto.home vers=3,tcp,rsize=8192,wsize=8192 root 1000 0.0 0.0 1716 628 ? S Jan16 0:00 /usr/sbin/automount /automount yp auto.services_delind vers=3,tcp,rsize=8192,wsize=8192 root 1002 0.0 0.0 1628 600 ? S Jan16 0:00 /usr/sbin/automount /net/shlinvob7 file /etc/auto.shlinvob7 vers=3,tcp,rsize=8192,wsize=8192 root 1031 0.0 0.0 1700 628 ? S Jan16 0:00 /usr/sbin/automount /net/shlinvob5 yp auto.net_shlinvob5 vers=3,tcp,rsize=8192,wsize=8192 root 1063 0.0 0.0 1712 628 ? S Jan16 0:00 /usr/sbin/automount /net/shlinvob6 yp auto.net_shlinvob6 vers=3,tcp,rsize=8192,wsize=8192 root 1087 0.0 0.0 1700 628 ? S Jan16 0:01 /usr/sbin/automount /net/shlinvob1 yp auto.net_shlinvob1 vers=3,tcp,rsize=8192,wsize=8192 root 1106 0.0 0.0 1700 620 ? S Jan16 0:00 /usr/sbin/automount /net/shlinvob2 yp auto.net_shlinvob2 vers=3,tcp,rsize=8192,wsize=8192 root 1127 0.0 0.0 1692 616 ? S Jan16 0:00 /usr/sbin/automount /net/astvob3 yp auto.net_astvob3 vers=3,tcp,rsize=8192,wsize=8192 root 1159 0.0 0.0 1700 628 ? S Jan16 0:13 /usr/sbin/automount /net/shlinvob3 yp auto.net_shlinvob3 vers=3,tcp,rsize=8192,wsize=8192 root 1193 0.0 0.0 1688 612 ? S Jan16 0:00 /usr/sbin/automount /net/astview3 yp auto.net_astview3 vers=3,tcp,rsize=8192,wsize=8192 root 1232 0.0 0.0 1696 616 ? S Jan16 0:00 /usr/sbin/automount /net/astvob1 yp auto.net_astvob1 vers=3,tcp,rsize=8192,wsize=8192 root 1234 0.0 0.0 1688 612 ? S Jan16 0:00 /usr/sbin/automount /net/shlinvob4 yp auto.net_shlinvob4 vers=3,tcp,rsize=8192,wsize=8192 root 1266 0.0 0.0 1700 628 ? S Jan16 0:01 /usr/sbin/automount /- yp auto.direct vers=3,tcp,rsize=8192,wsize=8192 root 1517 0.0 0.0 3560 1452 ? S Jan16 2:11 /usr/sbin/sshd root 1531 0.0 0.0 2136 864 ? S Jan16 1:00 xinetd -stayalive -pidfile /var/run/xinetd.pid root 1541 0.0 0.0 1748 400 ? S Jan16 0:00 /usr/sbin/vsftpd /etc/vsftpd/vsftpd.conf root 1564 0.0 0.0 5916 1680 ? S Jan16 0:02 /usr/atria/etc/albd_server root 1567 0.0 0.0 1892 808 ? S Jan16 0:00 /usr/atria/etc/lockmgr -a /var/adm/atria/almd -q 1024 -u 256 -f 256 root 1581 0.0 0.0 0 0 ? SW Jan16 0:15 [rpciod] root 1582 0.0 0.0 0 0 ? SW Jan16 0:00 [lockd] root 2186 0.0 0.3 19064 7624 ? S Jan16 0:00 /local/tools/repository/httpd-2.2.9/bin/httpd -k start root 2198 0.0 0.0 4256 1140 ? S Jan16 0:00 /bin/sh /local/tools/repository/mysql-5.0.51a/bin/mysqld_safe --datadir=/local/tools/repository/mysql-5.0.51a/var --pid-file=/lo httpd 2201 0.0 0.3 19224 7744 ? S Jan16 0:00 /local/tools/repository/httpd-2.2.9/bin/httpd -k start httpd 2202 0.0 0.3 19224 7744 ? S Jan16 0:00 /local/tools/repository/httpd-2.2.9/bin/httpd -k start httpd 2203 0.0 0.3 19224 7744 ? S Jan16 0:00 /local/tools/repository/httpd-2.2.9/bin/httpd -k start httpd 2204 0.0 0.3 19224 7744 ? S Jan16 0:00 /local/tools/repository/httpd-2.2.9/bin/httpd -k start httpd 2205 0.0 0.3 19224 7744 ? S Jan16 0:00 /local/tools/repository/httpd-2.2.9/bin/httpd -k start mysql 2256 0.0 0.5 67536 12372 ? S Jan16 0:00 /local/tools/repository/mysql-5.0.51a/libexec/mysqld --basedir=/local/tools/repository/mysql-5.0.51a --datadir=/local/tools/repo mysql 2257 0.0 0.5 67536 12372 ? S Jan16 0:00 /local/tools/repository/mysql-5.0.51a/libexec/mysqld --basedir=/local/tools/repository/mysql-5.0.51a --datadir=/local/tools/repo mysql 2258 0.0 0.5 67536 12372 ? S Jan16 0:00 /local/tools/repository/mysql-5.0.51a/libexec/mysqld --basedir=/local/tools/repository/mysql-5.0.51a --datadir=/local/tools/repo mysql 2259 0.0 0.5 67536 12372 ? S Jan16 0:00 /local/tools/repository/mysql-5.0.51a/libexec/mysqld --basedir=/local/tools/repository/mysql-5.0.51a --datadir=/local/tools/repo mysql 2260 0.0 0.5 67536 12372 ? S Jan16 0:00 /local/tools/repository/mysql-5.0.51a/libexec/mysqld --basedir=/local/tools/repository/mysql-5.0.51a --datadir=/local/tools/repo mysql 2261 0.0 0.5 67536 12372 ? S Jan16 0:00 /local/tools/repository/mysql-5.0.51a/libexec/mysqld --basedir=/local/tools/repository/mysql-5.0.51a --datadir=/local/tools/repo root 2274 0.0 0.0 1688 708 ? S Jan16 0:00 crond mysql 2276 0.0 0.5 67536 12372 ? S Jan16 0:00 /local/tools/repository/mysql-5.0.51a/libexec/mysqld --basedir=/local/tools/repository/mysql-5.0.51a --datadir=/local/tools/repo mysql 2277 0.0 0.5 67536 12372 ? S Jan16 0:00 /local/tools/repository/mysql-5.0.51a/libexec/mysqld --basedir=/local/tools/repository/mysql-5.0.51a --datadir=/local/tools/repo mysql 2278 0.0 0.5 67536 12372 ? S Jan16 0:00 /local/tools/repository/mysql-5.0.51a/libexec/mysqld --basedir=/local/tools/repository/mysql-5.0.51a --datadir=/local/tools/repo mysql 2279 0.0 0.5 67536 12372 ? S Jan16 0:00 /local/tools/repository/mysql-5.0.51a/libexec/mysqld --basedir=/local/tools/repository/mysql-5.0.51a --datadir=/local/tools/repo xfs 2315 0.0 0.1 5012 3232 ? S Jan16 0:00 xfs -droppriv -daemon daemon 2330 0.0 0.0 1564 552 ? S Jan16 0:00 /usr/sbin/atd root 2346 0.0 1.6 38228 34268 ? S Jan16 0:16 /data/tools/bin/slsecd httpd 2364 0.0 0.0 3108 764 ? SN Jan16 0:00 /etc/zabbix/zabbix_agentd start httpd 2370 0.0 0.0 3108 1368 ? SN Jan16 0:03 /etc/zabbix/zabbix_agentd start httpd 2371 0.0 0.0 3108 764 ? SN Jan16 0:00 /etc/zabbix/zabbix_agentd start httpd 2372 0.0 0.0 3108 764 ? SN Jan16 0:00 /etc/zabbix/zabbix_agentd start httpd 2373 0.0 0.0 3108 764 ? SN Jan16 0:00 /etc/zabbix/zabbix_agentd start httpd 2374 0.0 0.0 3116 820 ? SN Jan16 0:00 /etc/zabbix/zabbix_agentd start root 2375 0.0 0.1 10812 2256 ? S Jan16 0:00 smbd -D root 2379 0.0 0.0 7756 1648 ? S Jan16 0:28 nmbd -D root 2390 0.0 0.0 10812 1996 ? S Jan16 0:00 smbd -D root 2391 0.0 0.1 6448 4116 ? S Jan16 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf root 2395 0.0 0.0 1496 412 tty1 S Jan16 0:00 /sbin/mingetty tty1 root 2396 0.0 0.0 1500 416 tty2 S Jan16 0:00 /sbin/mingetty tty2 root 2397 0.0 0.0 1504 412 tty3 S Jan16 0:00 /sbin/mingetty tty3 root 2398 0.0 0.0 1496 412 tty4 S Jan16 0:00 /sbin/mingetty tty4 root 2399 0.0 0.0 1512 416 tty5 S Jan16 0:00 /sbin/mingetty tty5 root 2400 0.0 0.0 1508 412 tty6 S Jan16 0:00 /sbin/mingetty tty6 root 2401 0.0 0.0 1500 440 ttyS0 S Jan16 0:00 /sbin/agetty 115200 ttyS0 root 2402 0.0 0.0 14536 1968 ? S Jan16 0:00 /usr/bin/gdm-binary root 2437 0.0 0.0 14516 1860 ? S Jan16 0:00 /usr/bin/gdm-binary root 2438 0.0 0.3 18400 7544 ? S Jan16 0:33 /usr/X11R6/bin/X :0 -auth /var/gdm/:0.Xauth vt7 gdm 2446 0.0 0.4 36028 8500 ? S Jan16 0:03 /usr/bin/gdmgreeter semerci1 24882 0.0 0.0 3212 1028 ? S Jan17 0:01 ssh-agent httpd 4243 0.0 0.3 19224 7744 ? S Jan22 0:00 /local/tools/repository/httpd-2.2.9/bin/httpd -k start ericc 10652 0.0 0.0 3220 1028 ? S Feb11 0:00 ssh-agent root 6994 0.0 0.0 1688 732 ? S Mar19 0:00 CROND root 6995 0.0 0.0 2140 932 ? S Mar19 0:00 /bin/sh /local/stt_repository/scripts/rsync_stt root 7023 0.0 0.1 4840 2240 ? S Mar19 0:00 perl -wS /local/stt_repository/scripts/sendmail.pl -s rsync STT on Wed Mar 19 01:00:14 CST 2014 (status 0) -f stt@ebig.tclmobile root 4668 0.0 0.1 6796 2152 ? S Mar19 0:00 sshd: gszhou [priv] gszhou 4674 0.0 0.1 7220 2664 ? S Mar19 0:00 sshd: gszhou@notty gszhou 4705 0.0 0.3 25164 7272 ? S Mar19 0:05 konsole gszhou 4707 0.0 0.1 19452 3256 ? S Mar19 0:00 kdeinit: Running... gszhou 4710 0.0 0.1 21580 3472 ? S Mar19 0:00 kdeinit: dcopserver --nosid --suicide gszhou 4713 0.0 0.1 22236 3720 ? S Mar19 0:00 kdeinit: klauncher gszhou 4715 0.1 0.3 25236 7732 ? S Mar19 10:39 kdeinit: kded gszhou 4719 0.0 0.0 4388 1464 pts/3 S Mar19 0:00 /bin/bash gszhou 4795 0.0 0.2 27456 6148 ? S Mar19 0:00 kdeinit: knotify root 19118 0.0 0.0 2196 1144 pts/3 S Mar21 0:00 su - hz_zzma hz_zzma 19123 0.0 0.0 4384 1388 pts/3 S Mar21 0:00 /bin/bash root 3683 0.0 0.1 8908 3112 ? S Mar23 0:00 cupsd lp 3717 0.0 0.0 4512 2000 ? S Mar23 0:00 /usr/bin/perl /usr/lib/cups/filter/cupsomatic 53 sl_jstian (stdin) 1 page-bottom=36 cpi=12 lpi=7 scaling=100 page-right=36 page- root 3718 0.0 0.0 3612 884 ? S Mar23 0:00 socket://172.24.3.97:9100 53 sl_jstian (stdin) 1 page-bottom=36 cpi=12 lpi=7 scaling=100 page-right=36 page-left=36 wrap page-to lp 3737 0.0 0.0 4512 1980 ? S Mar23 0:00 /usr/bin/perl /usr/lib/cups/filter/cupsomatic 53 sl_jstian (stdin) 1 page-bottom=36 cpi=12 lpi=7 scaling=100 page-right=36 page- lp 3738 0.0 0.0 4512 1988 ? S Mar23 0:00 /usr/bin/perl /usr/lib/cups/filter/cupsomatic 53 sl_jstian (stdin) 1 page-bottom=36 cpi=12 lpi=7 scaling=100 page-right=36 page- lp 3739 0.0 0.0 2180 1000 ? S Mar23 0:00 sh -c level=0; echo -en "%!n<>setpagedevicen<>setpagedevicen"; if (( $level > 0 )) lp 3740 0.0 0.0 1504 340 ? S Mar23 0:00 cat root 15676 0.0 0.1 6796 2212 ? S Mar24 0:00 sshd: jun.ding [priv] jun.ding 15707 0.0 0.1 6944 2500 ? S Mar24 0:05 sshd: jun.ding@pts/1 jun.ding 15708 0.0 0.0 4368 1468 pts/1 S Mar24 0:00 -bash jun.ding 15733 0.0 0.0 3600 1724 pts/1 S Mar24 0:00 ssh root@172.24.61.93 root 16033 0.0 0.0 2492 900 ? S Mar24 0:00 telnetd root 16034 0.0 0.0 2568 924 pts/2 S Mar24 0:00 login -h 172.24.3.216 -p gwu 16035 0.0 0.0 4384 1420 pts/2 S Mar24 0:00 /bin/bash gwu 16107 0.0 0.5 24960 11240 pts/2 S Mar24 2:40 konsole gwu 16109 0.0 0.1 19396 3136 ? S Mar24 0:00 kdeinit: Running... gwu 16112 0.0 0.1 19532 3432 ? S Mar24 0:00 kdeinit: dcopserver --nosid --suicide gwu 16115 0.0 0.1 20180 3668 ? S Mar24 0:00 kdeinit: klauncher gwu 16117 0.1 0.3 22360 6844 ? S Mar24 3:53 kdeinit: kded gwu 16121 0.0 0.0 4392 1428 pts/4 S Mar24 0:00 /bin/bash gwu 16356 0.0 0.2 24840 5532 ? S Mar24 0:00 kdeinit: knotify gwu 16361 0.0 0.0 4396 1440 pts/6 S Mar24 0:00 /bin/bash gwu 17096 0.0 0.0 4380 1428 pts/7 S Mar24 0:00 /bin/bash root 17346 0.0 0.0 6796 1996 ? S Mar24 0:00 sshd: zhenghua.gao [priv] 40068 17348 0.0 0.1 7264 2508 ? S Mar24 0:02 sshd: zhenghua.gao@notty 40068 17355 0.0 0.4 24548 9240 ? S Mar24 0:21 konsole 40068 17375 0.0 0.0 2304 1280 pts/8 S Mar24 0:00 /bin/bash 40068 17378 0.0 0.0 2320 1248 pts/9 S Mar24 0:00 /bin/bash root 17390 0.0 0.0 6796 2008 ? S Mar24 0:00 sshd: zhenghua.gao [priv] 40068 17392 0.0 0.1 6952 2320 ? S Mar24 0:00 sshd: zhenghua.gao@notty 40068 17393 0.0 0.0 3296 1160 ? S Mar24 0:01 /usr/libexec/openssh/sftp-server root 18056 0.0 0.1 6796 2212 ? S Mar24 0:00 sshd: jun.ding [priv] jun.ding 18058 0.0 0.1 6944 2500 ? S Mar24 0:05 sshd: jun.ding@pts/14 jun.ding 18059 0.0 0.0 4380 1476 pts/14 S Mar24 0:00 -bash jun.ding 18081 0.0 0.0 3600 1768 pts/14 S Mar24 0:00 ssh root@172.24.61.100 gwu 19138 0.0 0.0 4380 1428 pts/19 S Mar24 0:00 /bin/bash 40068 20667 0.0 0.0 2300 1248 pts/5 S Mar24 0:00 /bin/bash root 22366 0.0 0.1 6796 2212 ? S Mar24 0:00 sshd: jun.ding [priv] jun.ding 22370 0.0 0.1 6944 2496 ? S Mar24 0:04 sshd: jun.ding@pts/26 jun.ding 22371 0.0 0.0 4380 1472 pts/26 S Mar24 0:00 -bash jun.ding 22393 0.0 0.0 3616 1736 pts/26 S Mar24 0:00 ssh root@172.24.61.83 gwu 27629 0.0 0.0 4388 1452 pts/21 S Mar24 0:00 /bin/bash 40068 28245 0.0 0.0 2320 1252 pts/23 S Mar24 0:00 /bin/bash 40068 28508 0.0 0.0 2312 1224 pts/27 S Mar24 0:00 /bin/bash root 28653 0.0 0.1 6796 2208 ? S Mar24 0:00 sshd: jun.ding [priv] jun.ding 28659 0.0 0.1 6944 2480 ? S Mar24 0:04 sshd: jun.ding@pts/28 jun.ding 28660 0.0 0.0 4392 1476 pts/28 S Mar24 0:00 -bash 40068 31759 0.0 0.0 2324 1252 pts/32 S Mar24 0:00 /bin/bash 40068 2844 0.0 0.0 2304 1252 pts/12 S Mar24 0:00 /bin/bash jun.ding 3414 0.0 0.0 3600 1772 pts/28 S Mar24 0:00 ssh root@172.24.3.144 root 7151 0.0 0.1 6796 2216 ? S Mar25 0:00 sshd: jun.ding [priv] jun.ding 7153 0.0 0.1 6944 2484 ? S Mar25 0:02 sshd: jun.ding@pts/15 jun.ding 7154 0.0 0.0 4376 1472 pts/15 S Mar25 0:00 -bash jun.ding 7180 0.0 0.0 3604 1716 pts/15 S Mar25 0:00 ssh root@172.24.61.93 40068 17279 0.0 0.0 2308 1244 pts/38 S Mar25 0:00 /bin/bash root 21501 0.0 0.0 6796 2004 ? S Mar25 0:00 sshd: zhenghua.gao [priv] 40068 21503 0.0 0.1 6952 2312 ? S Mar25 0:02 sshd: zhenghua.gao@notty 40068 21504 0.0 0.0 3284 1116 ? S Mar25 0:00 /usr/libexec/openssh/sftp-server root 21556 0.0 0.1 6796 2196 ? S Mar25 0:00 sshd: jun.ding [priv] jun.ding 21558 0.0 0.1 6808 2448 ? S Mar25 0:02 sshd: jun.ding@pts/41 jun.ding 21559 0.0 0.0 4388 1324 pts/41 S Mar25 0:00 -bash jun.ding 21610 0.0 0.0 3460 1624 pts/41 S Mar25 0:00 ssh root@172.24.61.83 gwu 22184 0.0 0.0 4384 1428 pts/43 S Mar25 0:00 /bin/bash gwu 22305 0.0 0.0 4384 1424 pts/44 S Mar25 0:00 /bin/bash 40068 27348 0.0 0.0 2304 1248 pts/40 S Mar25 0:00 /bin/bash root 30315 0.0 0.1 6796 2204 ? S 09:35 0:00 sshd: ypzhao [priv] ypzhao 30317 0.0 0.1 6944 2472 ? S 09:35 0:00 sshd: ypzhao@pts/11 ypzhao 30318 0.0 0.0 4844 1580 pts/11 S 09:35 0:00 -csh ypzhao 30350 0.0 0.0 3600 1712 pts/11 S 09:35 0:00 ssh root@172.24.61.134 root 30397 0.0 0.0 6796 2008 ? S 09:37 0:00 sshd: gwu [priv] gwu 30399 0.0 0.1 6948 2312 ? S 09:37 0:00 sshd: gwu@notty gwu 30400 0.0 0.0 4648 1292 ? S 09:37 0:00 csh -c /usr/libexec/openssh/sftp-server gwu 30424 0.0 0.0 3296 1180 ? S 09:37 0:00 /usr/libexec/openssh/sftp-server root 30588 0.0 0.1 6796 2204 ? S 09:40 0:00 sshd: xybian [priv] xybian 30590 0.0 0.1 6940 2788 ? S 09:40 0:00 sshd: xybian@pts/13 xybian 30593 0.0 0.0 4912 1644 pts/13 S 09:40 0:00 -csh root 30651 0.0 0.1 6796 2196 ? S 09:41 0:00 sshd: alix.liu [priv] alix.liu 30653 0.0 0.1 6808 2448 ? S 09:41 0:00 sshd: alix.liu@pts/16 alix.liu 30654 0.0 0.0 4520 1480 pts/16 S 09:41 0:00 -bash root 30681 0.0 0.1 6796 2196 ? S 09:41 0:00 sshd: alix.liu [priv] alix.liu 30683 0.0 0.1 6944 2460 ? S 09:41 0:00 sshd: alix.liu@pts/17 alix.liu 30684 0.0 0.0 4520 1484 pts/17 S 09:41 0:00 -bash root 30901 0.0 0.1 6796 2196 ? S 09:46 0:00 sshd: hz_zzma [priv] hz_zzma 30903 0.0 0.1 6808 2448 ? S 09:46 0:00 sshd: hz_zzma@pts/18 hz_zzma 30904 0.0 0.0 4376 1424 pts/18 S 09:46 0:00 /bin/bash hz_zzma 30973 0.0 0.0 3460 1740 pts/18 S 09:46 0:00 ssh root@172.24.61.101 root 30979 0.0 0.1 6796 2196 ? S 09:47 0:00 sshd: hz_zzma [priv] hz_zzma 30981 0.0 0.1 6808 2448 ? S 09:47 0:00 sshd: hz_zzma@pts/20 hz_zzma 30982 0.0 0.0 4376 1464 pts/20 S 09:47 0:00 /bin/bash root 31174 0.0 0.0 6796 2044 ? S 09:49 0:00 sshd: baoluo.cheng [priv] 40079 31176 0.0 0.1 6944 2312 ? S 09:49 0:00 sshd: baoluo.cheng@pts/22 40079 31177 0.0 0.0 4388 1452 pts/22 S 09:49 0:00 -bash root 31264 0.0 0.1 6796 2196 ? S 09:51 0:00 sshd: alix.liu [priv] alix.liu 31266 0.0 0.1 6944 2460 ? S 09:51 0:00 sshd: alix.liu@pts/24 alix.liu 31267 0.0 0.0 4504 1492 pts/24 S 09:51 0:00 -bash xybian 31991 0.0 0.0 3596 1776 pts/13 S 10:05 0:00 ssh root@172.24.61.94 root 32459 0.0 0.1 6796 2196 ? S 10:15 0:00 sshd: alix.liu [priv] alix.liu 32461 0.0 0.1 6944 2460 ? S 10:15 0:00 sshd: alix.liu@pts/34 alix.liu 32462 0.0 0.0 4516 1480 pts/34 S 10:15 0:00 -bash root 32489 0.0 0.1 6796 2204 ? S 10:16 0:00 sshd: ypzhao [priv] ypzhao 32491 0.0 0.1 6808 2456 ? S 10:16 0:00 sshd: ypzhao@pts/35 ypzhao 32492 0.0 0.0 4844 1588 pts/35 S 10:16 0:00 -csh root 32634 0.0 0.0 6796 2044 ? S 10:19 0:00 sshd: baoluo.cheng [priv] 40079 32636 0.0 0.1 6808 2296 ? S 10:19 0:00 sshd: baoluo.cheng@pts/36 40079 32637 0.0 0.0 4372 1464 pts/36 S 10:19 0:00 -bash 40079 32659 0.0 0.0 4208 1008 pts/36 S 10:19 0:00 /bin/sh /home/baoluo.cheng/bin/ssh.172.24.61.85 40079 32660 0.0 0.0 3456 1740 pts/36 S 10:19 0:00 ssh root@172.24.61.85 gwu 1001 0.0 0.0 3624 1764 pts/7 S 10:41 0:00 ssh -p 18081 root@172.24.147.24 root 1380 0.0 0.1 6796 2204 ? S 10:52 0:00 sshd: xybian [priv] xybian 1382 0.0 0.1 6940 2688 ? S 10:52 0:00 sshd: xybian@pts/31 xybian 1386 0.0 0.0 4920 1652 pts/31 S 10:52 0:00 -csh xybian 1415 0.0 0.0 3460 1692 pts/31 S 10:52 0:00 ssh root@172.24.61.94 hz_zzma 1605 0.0 0.0 3464 1736 pts/20 S 10:57 0:00 ssh root@172.24.61.58 root 1919 0.0 0.0 4204 968 pts/22 S 11:05 0:00 su - root 1920 0.0 0.0 4392 1396 pts/22 S 11:05 0:00 -bash alix.liu 2481 0.0 0.0 3604 1748 pts/34 S 11:14 0:00 ssh -p 18081 root@172.24.147.22 alix.liu 2528 0.0 0.0 3464 1736 pts/17 S 11:16 0:00 ssh -p 18081 root@172.24.147.22 root 2710 0.0 0.1 6796 2196 ? S 11:21 0:00 sshd: kaimin.gu [priv] 40109 2712 0.0 0.1 6808 2460 ? S 11:21 0:00 sshd: kaimin.gu@pts/25 40109 2717 0.0 0.0 4384 1428 pts/25 S 11:21 0:00 -bash 40109 3315 0.0 0.0 2996 964 pts/25 R 11:37 0:00 ps axu -bash-2.05b$