论坛徽章:: 0

电梯直达

1楼 [收藏(0)] [报告]

发表于 2004-01-13 10:58 |只看该作者 |倒序浏览

最近老觉得我的测试机器网络速度奇慢，今天一查，原来是感染蠕虫了，现在回向其他服务器的6667端口发数据包，怎么清理呀，我想找到那个进程杀了它，但怎么看是哪个程序在连其他服务器的6667端口呢？

进程就这几个
  UID PID  PPID  C STIME TTY    TIME CMD
root    0    0  0 Dec 30 ?       0:02 sched
root    1    0  0 Dec 30 ?       1:09 /etc/init -
root    2    0  0 Dec 30 ?       0:00 pageout
root    3    0  1 Dec 30 ?    872:32 fsflush
root 521    1  0 Dec 30 ?       0:00 /usr/lib/saf/sac -t 300
root 525 521  0 Dec 30 ?       0:01 /usr/lib/saf/ttymon
root 219    1  0 Dec 30 ?       0:01 /usr/lib/power/powerd
root 58    1  0 Dec 30 ?       0:00 /usr/lib/sysevent/syseventd
root 76    1  0 Dec 30 ?       1:17 /usr/lib/picl/picld
root 64    1  0 Dec 30 ?       0:00 devfsadmd
root 206    1  0 Dec 30 ?       0:00 /usr/lib/lpsched
root 200    1  0 Dec 30 ?       2:11 /usr/sbin/nscd
root 162    1  0 Dec 30 ?       0:01 /usr/sbin/inetd -s
root 344    1  0 Dec 30 ?       0:00 /usr/dt/bin/dtlogin -daemon
root 183    1  0 Dec 30 ?       0:01 /usr/sbin/cron
root 18421 18404  0 10:48:23 pts/2 0:00 ps -ef
root 234    1  0 Dec 30 ?       0:00 /usr/sadm/lib/smc/bin/smcboot
root 243    1  0 Dec 30 ?       0:00 /usr/sbin/vold
root 229    1  0 Dec 30 ?       0:10 /usr/lib/utmpd
root 235 234  0 Dec 30 ?       0:00 /usr/sadm/lib/smc/bin/smcboot
root 248    1  0 Dec 30 ?       0:00 /usr/lib/im/htt -port 9010 -syslog -message_locale C
root 250 248  0 Dec 30 ?       0:00 htt_server -port 9010 -syslog -message_locale C
root 255    1  0 Dec 30 ?       0:00 /usr/lib/efcode/sparcv9/efdaemon
root 522    1  0 Dec 30 console  0:00 /usr/lib/saf/ttymon -g -h -p sims3 console login:  -T sun -d /dev/console -l co
root 512    1  0 Dec 30 ?       0:00 /usr/lib/snmp/snmpdx -y -c /etc/snmp/conf
root 18344 18342  0 10:06:00 pts/2 0:01 -csh
root 544 512  0 Dec 30 ?    46:33 mibiisa -r -p 32771
root 18342 162  0 10:05:59 ?       0:00 in.telnetd
root 18404 18344  0 10:27:34 pts/2 0:00 bash