From owner-freebsd-questions Sun Aug 27 1:43:19 2000 Delivered-To: freebsd-questions@freebsd.org Received: from earth.wnm.net (earth.wnm.net [208.246.240.243]) by hub.freebsd.org (Postfix) with ESMTP id 5B3B437B424; Sun, 27 Aug 2000 01:43:16 -0700 (PDT) Received: from localhost (alex@localhost) by earth.wnm.net (8.11.0/8.11.0) with ESMTP id e7R8hJc81443; Sun, 27 Aug 2000 03:43:20 -0500 (CDT) Date: Sun, 27 Aug 2000 03:43:19 -0500 (CDT) From: Alex Charalabidis To: Mark Ovens Cc: youlgok@attglobal.net, FreeBSD-Questions Subject: Re: [Q] USER nobody In-Reply-To: <20000826135947.D254@parish> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sat, 26 Aug 2000, Mark Ovens wrote: > On Sat, Aug 26, 2000 at 04:20:03AM -0500, Alex Charalabidis wrote: > > On Sat, 26 Aug 2000 youlgok@attglobal.net wrote: > > > > > I commanded this while the hard disk drive is suddenly moveing so fast : > > > ps -aux > > > and there's "USER nobody" on the list and it runs several processes > > > including su. > > > What is this USER nobody? Is this normal or someone's hacking my > > > computer? When I > > > command w or who, it displays only me. I'm the only user. > > > > > User nobody is a special user, used mostly with programs that need only > > minimal privileges on the machine. The 'su' means that something is su'ed > > TO nobody and not that 'nobody' is su'ing to another user. Can't really > > tell what might be going on, you're not giving us enough info to work > > with. Show us some of the processes and let us know what services the > > machine is running. > > > > /etc/periodic/weekly/310.locate which rebuilds the locate(1) database > runs as user ``nobody'' (and, as you would expect, generates a lot of > disk activity). It runs at 3:30 every Saturday, which looking at the > time of your post, suggests that is what was running. > A lucid answer if there ever was one. I'm so used to hearing the drive spin, thinking "it's " and paying no more attention that I quite forgot that possibility. :) -ac -- ============================================================== Alex Charalabidis (AC8139) 5050 Poplar Ave, Ste 170 Systems Administrator Memphis, TN 38157 WebNet Memphis (901) 432 6000 Author, The Book of IRC http://www.bookofirc.com/ ============================================================== To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message