Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #67774

Re: Process names

Show all headers | View raw

In article
<chine.bleu-1BA28B.16242022122014@news.eternal-september.org>, Siri
Crews <chine.bleu@yahoo.com> wrote:
> In article <231220141310091579%mickey@mousehouse.com>,
>  Mickey MacMouse <mickey@mousehouse.com> wrote:
> > In article
> > <chine.bleu-AA3959.23323819122014@news.eternal-september.org>, Siri
> > Crews <chine.bleu@yahoo.com> wrote:
> > 
> > > With Termminal you can use ps -ajx to get
> > > the 
> > > same process list.
> > >     while true
> > >     do
> > >         echo =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> > >         ps -ajx
> > >         sleep 1
> > >     done
> > > will fill you Terminal with process status every second. Once you see
> > > something 
> > > suspicious, you can hit Control-C until it stops. The information is now
> > > fixed 
> > > on the Terminal until you clear it, so you can easily copy and paste
> > > suspicious 
> > > lines to a text edittor. This is easier than trying to get screen grab at
> > > just 
> > > the right moment.
> > > 
> > > You can use the Terminal for other unix commands like lsof and netstat to
> > > track 
> > > down suspicious activity.
> > 
> > These processes are very quick. With Process Viewer set to 5 second
> > updates they appear and then disappear at the next update. There is no
> > real way to track them or see the information. They also seem to be
> > random and it is not possible to tell when they appear. 
> > 
> > They may not even exist and be just artefacts from a slow computer. The
> > real process underneath in Process View sometimes has the same CPU and
> > RAM data.
> 
> You can use the Terminal to run shell commands like ps. Their output stays on 
> the terminal screen scroll back until you clear it. You can connect ps
> process 
> ids to lsof and then to netstat to get an idea what a process is using. Again 
> you can keep that on the scroll back. Once it occurs, Control-C and then look 
> back for the information.

Thanks for the tip. Terminal doesn't like that 'while do' script. The
ps command works but is difficult to catch one of the werid processes.

In Process Viewer I did manage to click on one of the '???' user
processes which had a blank name and the bottom panel displays this
information

Process ID: 536
Parent Process ID: -1478489552 ((null))
Process Group ID: -1559822204
Saved User ID: -1879010612 (???)

A process with the Yen symbol as the name also had similar information
of negative numbers.

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Process names Mickey MacMouse <mickey@mousehouse.com> - 2014-12-20 14:30 +1300
  Re: Process names Jolly Roger <jollyroger@pobox.com> - 2014-12-20 01:43 +0000
  Re: Process names JF Mezei <jfmezei.spamnot@vaxination.ca> - 2014-12-19 21:15 -0500
  Re: Process names Mickey MacMouse <mickey@mousehouse.com> - 2014-12-20 18:17 +1300
    Re: Process names Jolly Roger <jollyroger@pobox.com> - 2014-12-20 05:59 +0000
    Re: Process names Martin Frost me at invalid stanford daht edu <nospam@stanford.edu.invalid> - 2014-12-19 22:38 -0800
      Re: Process names Mickey MacMouse <mickey@mousehouse.com> - 2014-12-20 20:04 +1300
        Re: Process names Siri Crews <chine.bleu@yahoo.com> - 2014-12-19 23:32 -0800
          Re: Process names Mickey MacMouse <mickey@mousehouse.com> - 2014-12-23 13:10 +1300
            Re: Process names Siri Crews <chine.bleu@yahoo.com> - 2014-12-22 16:24 -0800
              Re: Process names Mickey MacMouse <mickey@mousehouse.com> - 2014-12-23 19:15 +1300
                Re: Process names Barry Margolin <barmar@alum.mit.edu> - 2014-12-23 11:16 -0500
                Re: Process names Mickey MacMouse <mickey@mousehouse.com> - 2014-12-24 16:34 +1300
                Re: Process names Jolly Roger <jollyroger@pobox.com> - 2014-12-24 14:49 +0000
                Re: Process names Mickey MacMouse <mickey@mousehouse.com> - 2014-12-25 19:31 +1300
  Re: Process names JF Mezei <jfmezei.spamnot@vaxination.ca> - 2014-12-20 03:17 -0500
    Re: Process names Mickey MacMouse <mickey@mousehouse.com> - 2014-12-21 09:48 +1300

csiph-web