- 论坛徽章:
- 0
|
我一台solaris，通过抓包发现一直有一个进程在向远程的111（SUNRPC）端口发出UDP包， length 56，本地端口一直在递增。
不知道是哪个进程在作怪，试过lsof，找不出来。
大家伙能否给点提示？非常感谢
附我现在的进程列表：
# uname -a
SunOS v880a 5.9 Generic_118558-02 sun4u sparc SUNW,Sun-Fire-880
# ps -ef
UID PID PPID C STIME TTY TIME CMD
root 0 0 0 Aug 11 ? 0:07 sched
root 1 0 0 Aug 11 ? 2:10 /etc/init -
root 2 0 0 Aug 11 ? 0:00 pageout
root 3 0 0 Aug 11 ? 3:28 fsflush
root 4 0 0 Aug 11 ? 0:45 cluster
root 855 1 0 Aug 11 ? 0:00 /usr/lib/saf/sac -t 300
root 85 1 0 Aug 11 ? 0:00 /usr/cluster/lib/sc/failfastd
root 63 1 0 Aug 11 ? 0:11 /usr/lib/sysevent/syseventd
root 168 1 0 Aug 11 ? 0:00 /usr/sbin/rpcbind
root 88 1 0 Aug 11 ? 0:00 /usr/cluster/lib/sc/clexecd
root 89 88 0 Aug 11 ? 0:00 /usr/cluster/lib/sc/clexecd
root 145 1 0 Aug 11 ? 0:00 /usr/lib/inet/in.ndpd
root 95 1 0 Aug 11 ? 4:19 /usr/lib/picl/picld
root 199 1 0 Aug 11 ? 0:00 /usr/lib/autofs/automountd
root 121 1 0 Aug 11 ? 0:28 /usr/lib/sparcv9/cpudiagd -i
root 430 1 0 Aug 11 ? 2:09 /usr/cluster/lib/sc/rgmd
root 268 1 0 Aug 11 ? 0:00 /usr/platform/SUNW,Sun-Fire-880/lib/sf880drd
root 120 1 0 Aug 11 ? 0:06 devfsadmd
root 323 322 0 Aug 11 ? 0:00 htt_server -port 9010 -syslog -message_locale C
root 192 1 0 Aug 11 ? 0:00 /usr/sbin/inetd -s
root 246 1 0 Aug 11 ? 0:00 /usr/sbin/cron
root 294 1 0 Aug 11 ? 0:00 /usr/sadm/lib/smc/bin/smcboot
root 295 294 0 Aug 11 ? 0:00 /usr/sadm/lib/smc/bin/smcboot
root 273 1 0 Aug 11 ? 0:13 /usr/sbin/nscd
root 296 294 0 Aug 11 ? 0:00 /usr/sadm/lib/smc/bin/smcboot
root 284 1 0 Aug 11 ? 0:02 /usr/lib/utmpd
root 322 1 0 Aug 11 ? 0:00 /usr/lib/im/htt -port 9010 -syslog -message_locale C
root 376 1 0 Aug 11 ? 2:16 /usr/cluster/lib/sc/sparcv9/rpc.pmfd
root 345 1 0 Aug 11 ? 0:00 /usr/sbin/mdmonitord
root 333 192 0 Aug 11 ? 0:00 rpc.metad
root 350 1 0 Aug 11 ? 0:00 /usr/lib/efcode/sparcv9/efdaemon
root 404 1 0 Aug 11 ? 0:05 /usr/cluster/lib/sc/cl_eventd
root 588 1 0 Aug 11 ? 0:00 /usr/lib/dmi/snmpXdmid -s v880a
root 403 1 0 Aug 11 ? 0:14 /usr/cluster/lib/sc/cl_eventlogd
root 418 1 0 Aug 11 ? 0:03 /sbin/in.mpathd
root 405 1 0 Aug 11 ? 0:00 /usr/cluster/lib/sc/rpc.fed
root 375 1 0 Aug 11 ? 0:00 /usr/dt/bin/dtlogin -daemon
root 421 1 0 Aug 11 ? 0:00 /usr/cluster/bin/pnmd
root 580 1 0 Aug 11 ? 0:00 /usr/lib/snmp/snmpdx -y -c /etc/snmp/conf
root 904 855 0 Aug 11 ? 0:00 /usr/lib/saf/ttymon
root 517 375 0 Aug 11 ? 0:00 /usr/openwin/bin/Xsun :0 -nobanner -auth /var/dt/A:0-Ila4Ua
root 579 1 0 Aug 11 ? 0:00 /usr/cluster/lib/sc/scdpmd
root 587 1 0 Aug 11 ? 0:00 /usr/lib/dmi/dmispd
root 593 375 0 Aug 11 ? 0:00 /usr/dt/bin/dtlogin -daemon
root 594 375 0 Aug 11 ?? 0:04 /usr/openwin/bin/fbconsole -d :0
oracle 1070 1 0 Aug 11 ? 0:33 /oracle/product/9.2/bin/tnslsnr LISTENER -inherit
root 808 807 0 0:00 <defunct>
oracle 1481 1480 0 Aug 11 ? 0:13 /opt/SUNWscor/oracle_server/bin/oracle_server_monitor64_v9 -R DB-server-rs -G D
root 842 593 0 Aug 11 ? 0:00 dtgreet -display :0
noaccess 807 804 0 Aug 11 ? 0:00 -su -c cd /opt/SUNWcacao ; /usr/java/bin/java -Xms4M -Xmx64M -classpath /opt
root 1132 376 0 Aug 11 ? 1:45 /usr/bin/ksh /opt/SUNWscor/oracle_listener/bin/oracle_listener_monitor -R DB-ls
root 780 580 0 Aug 11 ? 2:16 mibiisa -r -p 32806
root 804 376 0 Aug 11 ? 0:00 /usr/bin/sh -c /usr/bin/cat /etc/opt/SUNWcacao/security/password |
root 833 1 0 Aug 11 ? 0:00 /usr/sbin/vold
ivan 19914 19912 0 09:51:33 pts/2 0:00 -sh
root 856 1 0 Aug 11 pts/1 0:00 /usr/lib/saf/ttymon -g -h -p v880a console login: -T sun -d /dev/console -l co
noaccess 906 807 0 Aug 11 ? 0:03 /usr/java/bin/java -Xms4M -Xmx64M -classpath /opt/SUNWcacao/lib/cacao_cacao.jar
root 903 1 0 Aug 11 ? 0:04 /usr/lib/ssh/sshd
root 824 1 0 Aug 11 ? 0:00 /usr/cluster/lib/sc/cl_ccrad
oracle 2626 1 0 Aug 11 ? 0:00 oracleorcl (LOCAL=NO)
root 920 192 0 Aug 11 ? 0:00 rpc.metamedd
root 17576 17573 0 08:56:32 ? 0:00 nvstatsmngr 9
oracle 1163 1 0 Aug 11 ? 0:19 ora_dbw0_orcl
root 918 904 0 Aug 11 ? 0:00 /usr/lib/saf/ttymon
oracle 1165 1 0 Aug 11 ? 5:07 ora_lgwr_orcl
oracle 1161 1 0 Aug 11 ? 0:01 ora_pmon_orcl
oracle 1169 1 0 Aug 11 ? 0:09 ora_smon_orcl
oracle 1171 1 0 Aug 11 ? 0:00 ora_reco_orcl
oracle 1167 1 0 Aug 11 ? 0:02 ora_ckpt_orcl
oracle 1173 1 0 Aug 11 ? 0:00 ora_cjq0_orcl
oracle 1175 1 0 Aug 11 ? 0:01 ora_qmn0_orcl
oracle 1177 1 0 Aug 11 ? 0:06 ora_arc0_orcl
oracle 1179 1 0 Aug 11 ? 0:03 ora_arc1_orcl
root 1480 376 0 Aug 11 ? 0:02 /opt/SUNWscor/oracle_server/bin/oracle_server_monitor64_v9 -R DB-server-rs -G D
root 4946 1 0 Aug 13 ? 0:00 /usr/sbin/syslogd
root 19943 19921 0 09:52:23 pts/2 0:00 bash
oracle 20719 1481 0 10:07:21 ? 0:00 oracleorcl (DESCRIPTION=(LOCAL=YES)(ADDRESS=(PROTOCOL=beq)))
root 19912 903 0 09:51:29 ? 0:01 /usr/lib/ssh/sshd
root 19921 19914 0 09:51:40 pts/2 0:00 sh
root 20730 1132 0 10:07:30 ? 0:00 sleep 30
oracle 2622 1 0 Aug 11 ? 0:00 oracleorcl (LOCAL=NO)
root 17575 17573 0 08:56:32 ? 0:03 nvnmgr 3
root 17574 17573 0 08:56:31 ? 0:00 nvcmgr 2
root 17573 1 0 08:56:31 ? 0:00 /usr/netvault/bin/nvpmgr startup
root 20732 19943 0 10:07:37 pts/2 0:00 ps -ef
oracle 2628 1 0 Aug 11 ? 0:00 oracleorcl (LOCAL=NO)
oracle 2630 1 0 Aug 11 ? 0:00 oracleorcl (LOCAL=NO)
oracle 2624 1 0 Aug 11 ? 0:00 oracleorcl (LOCAL=NO)
nagios 3748 1 0 Aug 11 ? 0:12 ./nrpe -d -c ../etc/nrpe.cfg
oracle 2632 1 0 Aug 11 ? 0:00 oracleorcl (LOCAL=NO)
oracle 2634 1 0 Aug 11 ? 0:00 oracleorcl (LOCAL=NO)
oracle 2636 1 0 Aug 11 ? 0:00 oracleorcl (LOCAL=NO) |
|
免费注册
发表于 2008-08-18 10:11