[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

PID for ksoftireqd_CPU0 and friends



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello world,

Out of curiosity more than anything else, I ran chkrootkit (0.42 from
unstable) on my laptop. It comes back clean (though I recognize that
that's not definitive), except for a warning about LKM because there
are 4 processes hidden from the ps command.

I did a little digging and, following some advice that I googled, I
compared the PIDs in /proc with the PIDs from the PS command.

It turns out, AFAICT, that the only discrepancy is that processes
4, 5, 6, and 7 are missing from the PS command. Those, according to
/proc are ksoftirqd_CPU0, kswapd, bdflush, and kupdated.

And I can see why they don't compare properly, because the PS output
reports them all as PID 0.

USER       PID %CPU %MEM   VSZ  RSS TTY      STAT START   TIME COMMAND
root         1  0.0  0.0  1484  444 ?        S    Dec03   0:03 init
root         2  0.0  0.0     0    0 ?        SW   Dec03   0:01 [keventd]
root         3  0.0  0.0     0    0 ?        SW   Dec03   0:00 [kapmd]
root         0  0.0  0.0     0    0 ?        SWN  Dec03   0:00 [ksoftirqd_CPU0]
root         0  0.0  0.0     0    0 ?        SW   Dec03   0:16 [kswapd]
root         0  0.0  0.0     0    0 ?        SW   Dec03   0:00 [bdflush]
root         0  0.0  0.0     0    0 ?        SW   Dec03   0:00 [kupdated]
root        59  0.0  0.0     0    0 ?        SW   Dec03   0:00 [khubd]

Is this normal?

                                        Be seeing you,
                                          norm

- -- 
Norman Walsh <ndw@nwalsh.com> | Individuality seems to be Nature's
http://nwalsh.com/            | whole aim--and she cares nothing for
                              | individuals.-- Goethe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.8 <http://mailcrypt.sourceforge.net/>

iD8DBQE/0HzUOyltUcwYWjsRAn2oAJ4scNCvv6s8a+3lSeRupi9aHEeX5gCcDSBY
3d4lpBrBA0T4JUxQyHOTtPA=
=LuGg
-----END PGP SIGNATURE-----



Reply to: