Date: Fri, 8 Aug 2008 12:09:13 -0500 From: Dan Nelson <dnelson@allantgroup.com> To: Agus <agus.262@gmail.com> Cc: FreeBSD Questions <freebsd-questions@freebsd.org> Subject: Re: Weird Processes on my server from user.... Message-ID: <20080808170913.GD68181@dan.emsphone.com> In-Reply-To: <fda61bb50808071459g5f928845vb770c0fbf41bec48@mail.gmail.com> References: <fda61bb50808071459g5f928845vb770c0fbf41bec48@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
In the last episode (Aug 07), Agus said: > Hi guys, > > Checking my server i found this processess....The user doesnt appear > doing w..so its like if he was doing an scp or something like > that...though in this case its sftp... But i read the man and doesnt > have much information..so i dont understand what is going in the > background with this proccesess or how can i check it... > > the user is deamon and is a registered user... > here is the pstree output: > > | |-+= 74888 root sshd: deamon [priv] (sshd) > | | \-+- 74891 deamon sshd: deamon@notty (sshd) > | | \-+= 74892 deamon csh -c /usr/libexec/sftp-server > | | \--- 74893 deamon /usr/libexec/sftp-server I think you'll see this if the user is sftp'ing over SSHv1; the sftp-server component has to be launched via a shell login because SSHv1 doesn't have subsystems. -- Dan Nelson dnelson@allantgroup.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080808170913.GD68181>