Hacking Blade60 — Pt. XI
some output that might be helpful
$ w 4:06am up 14 day(s), 13:20, 9 users, load average: 0.03, 0.03, 0.02 User tty login@ idle JCPU PCPU what jkhan pts/1 Thu 5pm 3days 4:10 1:00 ssh mx1 rickm pts/2 Fri 8am 1:12 4:16 20 vi Makefile jdelreal pts/3 Sat 9am 3days 10 10 ssh cups2 lbarrett pts/4 Mon 9am 15:35 10 10 ssh vm22 rickm pts/5 1:44pm 10:29 4 2 /bin/tcsh -m hdeblois pts/6 Thu12pm 5days less jkhan pts/7 7Oct1410days ssh mx1 apply pts/8 4:04am 1 /bin/sh apply pts/9 4:06am w $ top top: not found $ /bin/top /bin/top: not found $ /usr/local/bin/top top: /dev/ksyms is not a 32-bit kernel namelist kvm_open: Error 0 load averages: 0.02, 0.02, 0.02 04:07:36 73 processes: 70 sleeping, 2 stopped, 1 on cpu Memory: 128M real, 27M free, 74M swap in use, 438M swap free PID USERNAME THR PRI NICE SIZE RES STATE TIME CPU COMMAND 26810 operator 1 35 0 1000K 816K sleep 0:03 3.98% find 26809 root 1 33 0 0K 0K sleep 0:00 0.70% sort 26830 apply 1 -25 0 1448K 1120K cpu 0:00 0.49% top-3.5beta7-su 26808 root 1 33 0 968K 744K sleep 0:00 0.25% tr 182 root 4 33 0 3224K 2256K sleep 40:48 0.12% ypserv 241 root 5 33 0 5904K 4480K sleep 3:45 0.07% automountd 169 root 1 33 0 3072K 1936K sleep 3:25 0.02% rpcbind 26818 root 1 29 0 6376K 2784K sleep 0:00 0.01% sshd 26822 apply 1 23 0 1064K 880K sleep 0:00 0.00% sh 350 root 1 33 0 1728K 1032K sleep 2:22 0.00% in.rwhod 272 root 15 33 0 3744K 2672K sleep 1:16 0.00% nscd 415 root 4 33 0 4984K 2472K sleep 1:06 0.00% mountd 4558 jkhan 1 33 0 6464K 896K sleep 0:42 0.00% sshd 367 root 1 75 -20 2224K 1296K sleep 0:35 0.00% xntpd 417 root 1 33 0 2528K 1808K sleep 0:28 0.00% nfsd 5733 jkhan 1 33 0 3704K 1288K sleep 0:20 0.00% ssh 5976 rickm 1 9 0 6344K 1544K sleep 0:19 0.00% sshd 16414 jdelreal 1 8 0 6464K 1520K sleep 0:11 0.00% sshd $ $ /usr/local/bin/top top: /dev/ksyms is not a 32-bit kernel namelist kvm_open: Error 0 load averages: 0.01, 0.02, 0.02 04:07:58 73 processes: 70 sleeping, 2 stopped, 1 on cpu Memory: 128M real, 26M free, 74M swap in use, 438M swap free PID USERNAME THR PRI NICE SIZE RES STATE TIME CPU COMMAND 26810 operator 1 35 0 1000K 816K sleep 0:04 3.66% find 26809 root 1 33 0 0K 0K sleep 0:00 0.66% sort 26833 apply 1 3 0 1448K 1120K cpu 0:00 0.53% top-3.5beta7-su 26808 root 1 33 0 968K 744K sleep 0:00 0.11% tr 182 root 4 33 0 3224K 2256K sleep 40:48 0.06% ypserv 350 root 1 33 0 1728K 1032K sleep 2:22 0.06% in.rwhod 241 root 5 33 0 5904K 4480K sleep 3:45 0.02% automountd 169 root 1 33 0 3072K 1936K sleep 3:25 0.00% rpcbind 272 root 15 33 0 3744K 2672K sleep 1:16 0.00% nscd 415 root 4 33 0 4984K 2472K sleep 1:06 0.00% mountd 4558 jkhan 1 33 0 6464K 896K sleep 0:42 0.00% sshd 367 root 1 75 -20 2224K 1296K sleep 0:35 0.00% xntpd 417 root 1 33 0 2528K 1808K sleep 0:28 0.00% nfsd 5733 jkhan 1 33 0 3704K 1288K sleep 0:20 0.00% ssh 5976 rickm 1 9 0 6344K 1544K sleep 0:19 0.00% sshd 16414 jdelreal 1 8 0 6464K 1520K sleep 0:11 0.00% sshd 278 root 1 33 0 49M 6648K sleep 0:11 0.00% lp 228 daemon 5 33 0 5024K 1800K sleep 0:07 0.00% statd $ ps PID TTY TIME CMD 26822 pts/9 0:00 sh $ ps ef usage: ps [ -aAdeflcjLPy ] [ -o format ] [ -t termlist ] [ -u userlist ] [ -U userlist ] [ -G grouplist ] [ -p proclist ] [ -g pgrplist ] [ -s sidlist ] 'format' is one or more of: user ruser group rgroup uid ruid gid rgid pid ppid pgid sid taskid pri opri pcpu pmem vsz rss osz nice class time etime stime f s c lwp nlwp psr tty addr wchan fname comm args projid project $ ps -ef UID PID PPID C STIME TTY TIME CMD root 0 0 0 Oct 06 ? 0:13 sched root 1 0 0 Oct 06 ? 0:04 /etc/init - root 2 0 0 Oct 06 ? 0:00 pageout root 3 0 0 Oct 06 ? 9:33 fsflush root 427 1 0 Oct 06 ? 0:00 /usr/lib/saf/sac -t 300 root 299 1 0 Oct 06 ? 0:00 /usr/lib/utmpd root 212 1 0 Oct 06 ? 0:01 /usr/sbin/inetd -s root 51 1 0 Oct 06 ? 0:00 /usr/lib/sysevent/syseventd root 53 1 0 Oct 06 ? 0:00 /usr/lib/sysevent/syseventconfd root 59 1 0 Oct 06 ? 0:02 /usr/lib/picl/picld root 258 1 0 Oct 06 ? 0:02 /usr/sbin/cron root 172 1 0 Oct 06 ? 0:00 /usr/sbin/keyserv root 184 182 0 Oct 06 ? 0:03 rpc.nisd_resolv -F -C 8 -p 1073741824 -t udp root 169 1 0 Oct 06 ? 3:26 /usr/sbin/rpcbind root 202 1 0 Oct 06 ? 0:02 /usr/sbin/in.named root 182 1 0 Oct 06 ? 40:49 /usr/lib/netsvc/yp/ypserv -d root 189 1 0 Oct 06 ? 0:00 /usr/lib/netsvc/yp/ypbind daemon 228 1 0 Oct 06 ? 0:08 /usr/lib/nfs/statd root 241 1 0 Oct 06 ? 3:45 /usr/lib/autofs/automountd root 428 1 0 Oct 06 console 0:00 /usr/lib/saf/ttymon -g -h -p blade60.cs.umb.edu console login: -T vt100 -d /de root 229 1 0 Oct 06 ? 0:01 /usr/lib/nfs/lockd rickm 5978 5976 0 Oct 17 pts/2 0:00 -tcsh root 257 1 0 Oct 06 ? 0:04 /usr/sbin/syslogd root 272 1 0 Oct 06 ? 1:16 /usr/sbin/nscd root 313 1 0 Oct 06 ? 0:02 /usr/sbin/vold root 278 1 0 Oct 06 ? 0:12 /usr/lib/print/printd root 281 1 0 Oct 06 ? 0:00 /usr/lib/power/powerd apply 26792 26790 0 04:04:25 pts/8 0:00 /bin/sh root 367 1 0 Oct 06 ? 0:36 /usr/lib/inet/xntpd root 350 1 0 Oct 06 ? 2:22 /usr/sbin/in.rwhod root 8589 5996 0 15:12:17 pts/2 0:00 vi user.gmailers-not-classmembers root 16412 364 0 Oct 18 ? 0:04 /usr/local/sbin/sshd root 364 1 0 Oct 06 ? 0:01 /usr/local/sbin/sshd root 415 1 0 Oct 06 ? 1:06 /usr/lib/nfs/mountd root 430 427 0 Oct 06 ? 0:00 /usr/lib/saf/ttymon root 417 1 0 Oct 06 ? 0:28 /usr/lib/nfs/nfsd -a 16 jdelreal 16414 16412 0 Oct 18 ? 0:11 /usr/local/sbin/sshd root 26818 364 0 04:06:19 ? 0:00 /usr/local/sbin/sshd root 1542 364 0 09:34:54 ? 0:00 /usr/local/sbin/sshd root 26809 26806 1 04:05:00 ? 0:01 sort -T /tmp -f operator 26810 26807 2 04:05:00 ? 0:05 find / /jumpstart /disk/sd0e /disk/sd0f /disk/sd0g -mount -print jkhan 5722 4558 0 Oct 07 pts/7 0:00 -tcsh root 4556 364 0 Oct 07 ? 0:00 /usr/local/sbin/sshd jkhan 4558 4556 0 Oct 07 ? 0:42 /usr/local/sbin/sshd root 701 1 0 Oct 06 ? 0:00 /usr/lib/netsvc/yp/rpc.yppasswdd -D /config/yp -m rickm 2960 2958 0 13:44:56 ? 0:03 /usr/local/sbin/sshd root 26808 26806 0 04:05:00 ? 0:00 tr / \001 root 8613 5996 0 15:16:41 pts/2 0:00 vi Makefile root 26788 364 0 04:04:23 ? 0:00 /usr/local/sbin/sshd root 2958 364 0 13:44:45 ? 0:01 /usr/local/sbin/sshd root 26800 26799 0 04:05:00 ? 0:00 /bin/sh /usr/local/lib/find/updatedb rickm 5976 5974 0 Oct 17 ? 0:19 /usr/local/sbin/sshd apply 26822 26820 0 04:06:22 pts/9 0:00 /bin/sh lbarrett 1546 1544 0 09:34:56 pts/4 0:00 -tcsh root 3657 2962 0 13:54:38 pts/5 0:00 /bin/tcsh -m jkhan 669 4558 0 Oct 16 pts/1 0:00 -tcsh hdeblois 28008 28006 0 Oct 16 ? 0:00 /usr/local/sbin/sshd root 5996 5978 0 Oct 17 pts/2 0:03 /bin/tcsh -m jkhan 898 669 0 Oct 16 pts/1 0:00 ssh vm22 root 26838 26822 0 04:08:26 pts/9 0:00 ps -ef root 4610 1 0 Oct 11 ? 0:00 /usr/sbin/in.named jkhan 5733 5722 0 Oct 07 pts/7 0:20 ssh mx1 lbarrett 2587 1546 0 12:16:20 pts/4 0:06 ssh vm22 hdeblois 28162 28010 0 Oct 16 pts/6 0:00 less hdeblois 28010 28008 0 Oct 16 pts/6 0:00 -tcsh jdelreal 16416 16414 0 Oct 18 pts/3 0:00 -tcsh operator 26807 26806 0 04:05:00 ? 0:00 csh -c find / /jumpstart /disk/sd0e /disk/sd0f /disk/sd0g -mount -print root 26806 26800 0 04:05:00 ? 0:00 tr \001 / root 5974 364 0 Oct 17 ? 0:05 /usr/local/sbin/sshd lbarrett 1544 1542 0 09:34:55 ? 0:06 /usr/local/sbin/sshd apply 26790 26788 0 04:04:25 ? 0:00 /usr/local/sbin/sshd root 28006 364 0 Oct 16 ? 0:00 /usr/local/sbin/sshd apply 26820 26818 0 04:06:22 ? 0:00 /usr/local/sbin/sshd root 26799 258 0 04:05:00 ? 0:00 sh -c /usr/local/lib/find/updatedb jdelreal 16476 16416 0 Oct 18 pts/3 0:01 ssh cups2 rickm 2962 2960 0 13:44:56 pts/5 0:00 -tcsh $ ps -ef | grep apply apply 26844 26822 0 04:08:56 pts/9 0:00 grep apply apply 26792 26790 0 04:04:25 pts/8 0:00 /bin/sh apply 26841 26839 0 04:08:46 ? 0:00 /usr/local/sbin/sshd apply 26843 26841 0 04:08:47 pts/10 0:00 -apply apply 26822 26820 0 04:06:22 pts/9 0:00 /bin/sh apply 26790 26788 0 04:04:25 ? 0:00 /usr/local/sbin/sshd apply 26820 26818 0 04:06:22 ? 0:00 /usr/local/sbin/sshd $ exit Connection to blade60 closed.
$ netstat -an UDP: IPv4 Local Address Remote Address State -------------------- -------------------- ------- *.111 Idle *.* Unbound *.32771 Idle *.1023 Idle *.32772 Idle *.32773 Idle *.32777 Idle *.32779 Idle *.32782 Idle 127.0.0.1.53 Idle 192.168.107.60.53 Idle *.32783 Idle *.69 Idle *.32785 Idle *.32787 Idle *.* Unbound *.32789 Idle *.32791 Idle *.32792 Idle *.4045 Idle *.514 Idle *.32817 Idle *.32829 Idle *.32831 Idle *.* Unbound *.513 Idle *.* Unbound *.123 Idle 127.0.0.1.123 Idle 192.168.107.60.123 Idle *.32838 Idle *.2049 Idle *.32840 Idle *.* Unbound *.881 Idle *.37478 Idle *.37479 Idle *.37480 Idle *.37481 Idle *.37482 Idle *.37483 Idle *.37484 Idle *.44748 Idle *.33004 Idle *.33008 Idle *.53386 Idle *.65103 Idle *.44494 Idle *.33526 Idle *.38232 Idle *.46614 Idle *.* Unbound 127.0.0.1.53 Idle *.* Unbound TCP: IPv4 Local Address Remote Address Swind Send-Q Rwind Recv-Q State -------------------- -------------------- ----- ------ ----- ------ ------- *.* *.* 0 0 24576 0 IDLE *.111 *.* 0 0 24576 0 LISTEN *.* *.* 0 0 24576 0 IDLE *.1023 *.* 0 0 24576 0 BOUND *.32771 *.* 0 0 24576 0 LISTEN *.32772 *.* 0 0 24576 0 LISTEN 127.0.0.1.53 *.* 0 0 24576 0 LISTEN 192.168.107.60.53 *.* 0 0 24576 0 LISTEN *.514 *.* 0 0 24576 0 LISTEN *.514 *.* 0 0 24576 0 LISTEN *.513 *.* 0 0 24576 0 LISTEN *.512 *.* 0 0 24576 0 LISTEN *.512 *.* 0 0 24576 0 LISTEN *.32785 *.* 0 0 24576 0 LISTEN *.4045 *.* 0 0 24576 0 LISTEN *.22 *.* 0 0 24576 0 LISTEN *.22 *.* 0 0 24576 0 LISTEN *.32789 *.* 0 0 24576 0 LISTEN *.2049 *.* 0 0 24576 0 LISTEN 192.168.107.60.22 192.168.107.43.50866 65536 0 24820 0 ESTABLISHED 192.168.107.60.37639 192.168.104.3.22 24820 0 24820 0 ESTABLISHED 192.168.107.60.2049 192.168.104.3.760 24820 0 24820 0 ESTABLISHED 192.168.107.60.22 192.168.107.43.55972 65024 0 24820 0 ESTABLISHED 192.168.107.60.48164 192.168.106.202.22 19456 0 24820 0 ESTABLISHED 192.168.107.60.22 192.168.104.96.53366 65196 0 24820 0 ESTABLISHED 192.168.107.60.22 192.168.106.249.55537 64768 0 24820 0 ESTABLISHED 192.168.107.60.32973 192.168.106.202.22 24320 0 24820 0 ESTABLISHED 192.168.107.60.22 192.168.106.71.16850 65280 0 24820 0 ESTABLISHED 192.168.107.60.50349 192.168.106.202.22 19456 0 24820 0 ESTABLISHED 192.168.107.60.22 192.168.104.96.60110 65016 0 24820 0 ESTABLISHED 192.168.107.60.2049 192.168.106.222.883 511680 0 24616 0 ESTABLISHED 192.168.107.60.2049 192.168.105.67.712 24820 0 24820 0 ESTABLISHED 192.168.107.60.2049 192.168.104.172.775 24820 0 24820 0 ESTABLISHED 192.168.107.60.2049 192.168.106.203.692 42256 0 24616 176 ESTABLISHED 192.168.107.60.22 192.168.105.67.59878 24820 0 24820 0 ESTABLISHED 192.168.107.60.2049 192.168.105.82.894 24820 0 24820 128 ESTABLISHED *.* *.* 0 0 24576 0 IDLE TCP: IPv6 Local Address Remote Address Swind Send-Q Rwind Recv-Q State If --------------------------------- --------------------------------- ----- ------ ----- ------ ----------- ----- *.* *.* 0 0 24576 0 IDLE *.514 *.* 0 0 24576 0 LISTEN *.513 *.* 0 0 24576 0 LISTEN *.512 *.* 0 0 24576 0 LISTEN *.22 *.* 0 0 24576 0 LISTEN Active UNIX domain sockets Address Type Vnode Conn Local Addr Remote Addr 30001d82a38 stream-ord 00000000 00000000 (socketpair) 30001d82be8 stream-ord 00000000 00000000 (socketpair) 30000f74518 stream-ord 00000000 00000000 30000f75958 stream-ord 00000000 00000000 30000f746c8 stream-ord 00000000 00000000 30001d83cc8 stream-ord 00000000 00000000 (socketpair) 30000f74878 stream-ord 00000000 00000000 30000f750e8 stream-ord 00000000 00000000 (socketpair) 30000f757a8 stream-ord 00000000 00000000 30000f75448 stream-ord 00000000 00000000 30000f74008 stream-ord 00000000 00000000 (socketpair) 30000f741b8 stream-ord 00000000 00000000 (socketpair) 30000f74a28 stream-ord 00000000 00000000 (socketpair) 30000f74f38 stream-ord 00000000 00000000 30000f75cb8 stream-ord 30000f34e40 00000000 /var/run/.ndcdir/ndc $ exit Connection to blade60 closed.
In hindsight, a really helpful ability would be more dynamic code, such that fsf has a variable identifying where in the buffer it is.. Something more variable..
Leave a Reply