- 论坛徽章:
- 0
|
感谢楼上大侠,很清晰的解释。我再继续检查一下。
网络防火墙没有针对应用层的策略,ip和端口也没有限制
系统没有ipfilter,sunscreen
以下是当前进程,帮看看有没有什么古怪
# ps -ef
UID PID PPID C STIME TTY TIME CMD
root 0 0 0 Nov 23 ? 0:01 sched
root 1 0 0 Nov 23 ? 0:00 /etc/init -
root 2 0 0 Nov 23 ? 0:00 pageout
root 3 0 1 Nov 23 ? 99:44 fsflush
root 377 1 0 Nov 23 ? 0:00 /usr/lib/saf/sac -t 300
root 1173 1 0 Nov 23 ? 0:03 /usr/sbin/nscd
root 133 1 0 Nov 23 ? 0:00 /usr/sbin/rpcbind
root 54 1 0 Nov 23 ? 0:00 /usr/lib/sysevent/syseventd
root 66 1 0 Nov 23 ? 14:44 /usr/lib/picl/picld
root 156 1 0 Nov 23 ? 0:22 /usr/sbin/inetd -s
root 189 1 0 Nov 23 ? 0:00 /usr/sbin/syslogd
root 384 267 0 Nov 23 ? 0:14 /usr/openwin/bin/Xsun :0 -nobanner -auth /var/dt/A:0-1VayHa
root 180 1 0 Nov 23 ? 0:00 /usr/lib/autofs/automountd
root 196 1 0 Nov 23 ? 0:00 /usr/sbin/cron
daemon 175 1 0 Nov 23 ? 0:00 /usr/lib/nfs/statd
root 171 1 0 Nov 23 ? 0:00 /usr/lib/nfs/lockd
root 219 1 0 Nov 23 ? 0:00 /usr/lib/power/powerd
root 226 1 0 Nov 23 ? 0:00 /usr/lib/utmpd
root 5204 5178 0 Nov 24 ? 0:00 remotedprovider solaris_operatingsystem libWBEMkernel.so
root 5201 5178 0 Nov 24 ? 0:00 remotedprovider solaris_cpusysinfo libWBEMkernel.so
root 253 1 0 Nov 23 ? 0:00 /usr/lib/im/htt -port 9010 -syslog -message_locale C
root 272 1 0 Nov 23 ? 0:00 /opt/IBMHTTPD/bin/httpd
root 256 253 0 Nov 23 ? 0:00 htt_server -port 9010 -syslog -message_locale C
root 313 1 0 Nov 23 ? 0:00 /usr/sbin/vold
root 300 1 0 Nov 23 ? 0:00 /usr/lib/snmp/snmpdx -y -c /etc/snmp/conf
root 267 1 0 Nov 23 ? 0:00 /usr/dt/bin/dtlogin -daemon
root 307 1 0 Nov 23 ? 0:00 /usr/lib/dmi/dmispd
root 308 1 0 Nov 23 ? 0:00 /usr/lib/dmi/snmpXdmid -s wtapp
root 372 1 0 Nov 23 ? 0:00 /usr/sfw/sbin/smbd -D
root 378 1 0 Nov 23 console 0:00 /usr/lib/saf/ttymon -g -h -p wtapp console login: -T sun -d /dev/console -l co
nobody 319 272 0 Nov 23 ? 0:09 /opt/IBMHTTPD/bin/httpd
nobody 320 272 0 Nov 23 ? 0:08 /opt/IBMHTTPD/bin/httpd
nobody 321 272 0 Nov 23 ? 0:08 /opt/IBMHTTPD/bin/httpd
nobody 322 272 0 Nov 23 ? 0:08 /opt/IBMHTTPD/bin/httpd
nobody 323 272 0 Nov 23 ? 0:08 /opt/IBMHTTPD/bin/httpd
nobody 324 272 0 Nov 23 ? 0:08 /opt/IBMHTTPD/bin/httpd
nobody 325 272 0 Nov 23 ? 0:07 /opt/IBMHTTPD/bin/httpd
nobody 326 272 0 Nov 23 ? 0:08 /opt/IBMHTTPD/bin/httpd
nobody 327 272 0 Nov 23 ? 0:08 /opt/IBMHTTPD/bin/httpd
nobody 328 272 0 Nov 23 ? 0:08 /opt/IBMHTTPD/bin/httpd
root 627 624 0 Nov 23 ? 0:01 /opt/WebSphere/AppServer/java/bin/../bin/sparc/native_threads/java -classpath /
root 624 1 0 Nov 23 ? 0:00 /bin/sh ./startupServer.sh
root 637 631 0 Nov 23 ? 13:30 /opt/WebSphere/AppServer/java/jre/bin/../bin/sparc/native_threads/java -classpa
root 11399 156 0 08:35:37 ? 0:00 in.telnetd
root 631 627 50 Nov 23 ? 16907:55 /opt/WebSphere/AppServer/java/jre/bin/../bin/sparc/native_threads/java -Djavax.
root 510 482 0 Nov 23 ? 0:00 dtfile -session dt_mai1a
root 709 473 0 Nov 23 ? 0:00 /usr/dt/bin/dtexec -open 0 -ttprocid 1.15PJrj 01 472 1289637086 1 1 0 192.168.1
root 710 709 0 Nov 23 ? 0:00 /usr/dt/bin/dtscreen -mode blank
root 482 473 0 Nov 23 ? 0:00 dtfile -session dt_mai1a
root 483 473 0 Nov 23 ? 0:00 /usr/dt/bin/dthelpview -helpVolume Intromgr -xrm *iconX:0 -xrm *iconY:0
root 484 473 0 Nov 23 ? 0:08 /usr/dt/bin/sdtperfmeter -f -H -t cpu -t disk -s 1 -name fpperfmeter
root 481 440 0 Nov 23 ? 0:00 com.sun.iiim.cle.palette
root 472 1 0 Nov 23 pts/3 0:00 /usr/dt/bin/ttsession
root 419 409 0 Nov 23 ? 0:00 /usr/openwin/bin/fbconsole
root 460 457 0 Nov 23 pts/3 0:00 -sh -c unset DT; DISPLAY=:0; /usr/dt/bin/dtsession_res -merge
root 423 1 0 Nov 23 ? 0:00 /usr/openwin/bin/speckeysd
root 440 436 0 Nov 23 ? 0:00 htt_xbe -if cle
root 436 1 0 Nov 23 ? 0:00 /usr/openwin/bin/htt -if cle -xim htt_xbe
root 474 156 0 Nov 23 ? 0:00 rpc.ttdbserverd
root 492 156 0 Nov 23 ? 0:01 rpc.rstatd
root 457 409 0 Nov 23 pts/3 0:00 /usr/dt/bin/sdt_shell -c unset DT; DISPLAY=:0; /usr/dt/bin/dt
root 473 460 0 Nov 23 pts/3 0:02 /usr/dt/bin/dtsession
root 459 1 0 Nov 23 ? 0:00 /usr/dt/bin/dsdm
root 480 473 0 Nov 23 ? 0:01 dtwm
root 486 1 0 Nov 23 ? 0:00 /bin/ksh /usr/dt/bin/sdtvolcheck -d -z 5 cdrom,zip,jaz,dvdrom,rmdisk
root 508 486 0 Nov 23 ? 0:00 /bin/cat /tmp/.removable/notify486
root 720 372 0 Nov 23 ? 0:07 /usr/sfw/sbin/smbd -D
root 11410 11406 0 08:35:45 pts/5 0:00 bash
root 5131 156 0 Nov 24 ? 0:00 rpc.ttdbserverd
root 402 300 0 Nov 23 ? 0:01 mibiisa -r -p 32786
root 385 267 0 Nov 23 ? 0:00 /usr/dt/bin/dtlogin -daemon
root 369 1 0 Nov 23 ? 0:00 /usr/lib/ssh/sshd
root 374 1 0 Nov 23 ? 0:29 /usr/sfw/sbin/nmbd -D
root 383 1 0 Nov 23 ? 0:00 devfsadmd
root 382 377 0 Nov 23 ? 0:00 /usr/lib/saf/ttymon
root 386 267 0 Nov 23 ?? 0:00 /usr/openwin/bin/fbconsole -d :0
app 11401 11399 0 08:35:37 pts/5 0:00 -sh
root 409 385 0 Nov 23 ? 0:00 /bin/ksh /usr/dt/bin/Xsession
root 11422 11410 0 08:39:06 pts/5 0:00 ps -ef
root 5200 5178 0 Nov 24 ? 0:00 remotedprovider solaris_cpuvminfo libWBEMkernel.so
root 5178 1 0 Nov 24 ? 5:43 /usr/java/bin/java -Dviper.fifo.path=/var/run/smc898/boot.fifo -Xmx128m -Djava.
root 11406 11401 0 08:35:40 pts/5 0:00 -sh
root 5199 5178 0 Nov 24 ? 0:00 remotedprovider solaris_processor libWBEMkernel.so
[ 本帖最后由 grins 于 2006-12-5 08:51 编辑 ] |
|