PID TTY STAT TIME COMMAND 2 ? S 0:00 [kthreadd] 3 ? S 2494:27 \_ [ksoftirqd/0] 5 ? S 0:05 \_ [kworker/u:0] 6 ? S 0:00 \_ [migration/0] 7 ? S 0:00 \_ [migration/1] 9 ? S 159:44 \_ [ksoftirqd/1] 11 ? S< 0:00 \_ [cpuset] 12 ? S< 0:00 \_ [khelper] 13 ? S< 0:00 \_ [netns] 14 ? S 0:00 \_ [kworker/u:1] 15 ? S 1:17 \_ [sync_supers] 16 ? S 0:02 \_ [bdi-default] 17 ? S< 0:00 \_ [kintegrityd] 18 ? S< 0:00 \_ [kblockd] 19 ? S< 0:00 \_ [ata_sff] 20 ? S 0:00 \_ [khubd] 21 ? S< 0:00 \_ [md] 23 ? S 0:12 \_ [khungtaskd] 24 ? S 0:12 \_ [kswapd0] 25 ? SN 0:00 \_ [ksmd] 26 ? SN 0:00 \_ [khugepaged] 27 ? S 0:00 \_ [fsnotify_mark] 28 ? S 0:00 \_ [ecryptfs-kthrea] 29 ? S< 0:00 \_ [crypto] 37 ? S< 0:00 \_ [kthrotld] 39 ? S 0:00 \_ [scsi_eh_0] 40 ? S 0:00 \_ [scsi_eh_1] 41 ? S 0:00 \_ [scsi_eh_2] 42 ? S 0:00 \_ [scsi_eh_3] 205 ? S 0:00 \_ [scsi_eh_4] 206 ? S 0:00 \_ [scsi_eh_5] 207 ? S 0:00 \_ [scsi_eh_6] 244 ? S< 0:00 \_ [kdmflush] 245 ? S< 0:00 \_ [kmirrord] 246 ? S< 0:00 \_ [kcopyd] 260 ? S< 0:00 \_ [kdmflush] 264 ? S< 0:00 \_ [kdmflush] 298 ? S 17:09 \_ [flush-252:1] 299 ? S 15:01 \_ [jbd2/dm-1-8] 300 ? S< 0:00 \_ [ext4-dio-unwrit] 557 ? S< 0:00 \_ [kpsmoused] 580 ? S< 0:00 \_ [hd-audio0] 1863 ? S< 0:00 \_ [rpciod] 1893 ? S 0:00 \_ [lockd] 1894 ? S< 0:00 \_ [nfsd4] 1895 ? S< 0:00 \_ [nfsd4_callbacks] 1896 ? S 0:00 \_ [nfsd] 1897 ? S 0:00 \_ [nfsd] 1898 ? S 0:00 \_ [nfsd] 1899 ? S 0:00 \_ [nfsd] 1900 ? S 0:00 \_ [nfsd] 1901 ? S 0:00 \_ [nfsd] 1902 ? S 0:00 \_ [nfsd] 1903 ? S 0:00 \_ [nfsd] 30659 ? S 0:10 \_ [kworker/1:1] 3670 ? S 0:26 \_ [kworker/0:0] 3885 ? S 0:00 \_ [kworker/1:2] 5979 ? S 0:06 \_ [kworker/0:1] 1 ? Ss 1:09 /sbin/init 350 ? S 0:01 upstart-udev-bridge --daemon 354 ? Ss 0:00 udevd --daemon 462 ? S 0:00 \_ udevd --daemon 463 ? S 0:00 \_ udevd --daemon 631 ? S 0:00 upstart-socket-bridge --daemon 636 ? Ss 1788:21 rpcbind -w 802 ? Ss 0:00 /usr/sbin/sshd -D 3997 ? Ss 0:00 \_ sshd: root@pts/2 3999 pts/2 Ss 0:00 | \_ -bash 4142 pts/2 S+ 0:05 | \_ mc 4144 pts/4 Ss 0:00 | \_ bash -rcfile .bashrc 6850 pts/4 R+ 0:00 | \_ ps afx 4224 ? Ss 0:00 \_ sshd: root@notty 4226 ? Ss 0:00 \_ bash -c echo FISH:; /bin/sh 4227 ? S 0:00 \_ /bin/sh 826 ? Sl 97:52 rsyslogd -c5 827 ? Ss 0:00 rpc.statd -L 860 ? Ss 0:01 dbus-daemon --system --fork --activation=upstart 898 tty4 Ss+ 0:00 /sbin/getty -8 38400 tty4 910 tty5 Ss+ 0:00 /sbin/getty -8 38400 tty5 916 tty2 Ss+ 0:00 /sbin/getty -8 38400 tty2 917 tty3 Ss+ 0:00 /sbin/getty -8 38400 tty3 920 tty6 Ss+ 0:00 /sbin/getty -8 38400 tty6 924 ? Ss 1:36 cron 925 ? Ss 0:00 atd 936 ? Ssl 371:54 /usr/sbin/mysqld 960 ? Ss 77:28 /usr/sbin/irqbalance 1624 ? Ssl 829:58 /usr/sbin/clamd 1737 ? Ss 1741:18 /usr/bin/freshclam -d --quiet 1754 ? Ss 0:00 /usr/sbin/clamsmtpd 1907 ? Ss 0:00 /usr/sbin/rpc.mountd --manage-gids 2052 ? Ss 0:00 /usr/sbin/saslauthd -a pam -c -m /var/run/saslauthd -n 5 2053 ? S 0:00 \_ /usr/sbin/saslauthd -a pam -c -m /var/run/saslauthd -n 5 2054 ? S 0:00 \_ /usr/sbin/saslauthd -a pam -c -m /var/run/saslauthd -n 5 2055 ? S 0:00 \_ /usr/sbin/saslauthd -a pam -c -m /var/run/saslauthd -n 5 2056 ? S 0:00 \_ /usr/sbin/saslauthd -a pam -c -m /var/run/saslauthd -n 5 2088 ? S 132:01 /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 2175 ? Ss 18:36 /usr/sbin/apache2 -k start 17068 ? S 1:20 \_ /usr/sbin/apache2 -k start 12965 ? S 1:18 \_ /usr/sbin/apache2 -k start 18115 ? S 1:05 \_ /usr/sbin/apache2 -k start 18420 ? S 1:11 \_ /usr/sbin/apache2 -k start 29333 ? S 0:27 \_ /usr/sbin/apache2 -k start 29334 ? S 0:29 \_ /usr/sbin/apache2 -k start 29344 ? S 0:35 \_ /usr/sbin/apache2 -k start 29984 ? S 0:14 \_ /usr/sbin/apache2 -k start 746 ? S 0:09 \_ /usr/sbin/apache2 -k start 747 ? S 0:12 \_ /usr/sbin/apache2 -k start 2276 tty1 Ss+ 0:00 /sbin/getty -8 38400 tty1 30534 ? S 0:00 su -c /etc/ppp/reinet 30535 ? S 0:45 \_ /usr/bin/perl /etc/ppp/reinet 24713 ? Ssl 41:38 named 15337 ? S 0:00 su -c redir --laddr 80.252.133.24 --lport 8080 --caddr 192.168.200.102 --cport 80 15345 ? S 0:00 \_ redir --laddr 80.252.133.24 --lport 8080 --caddr 192.168.200.102 --cport 80 15338 ? S 0:00 su -c redir --laddr 80.252.133.24 --lport 1935 --caddr 10.255.18.200 --cport 1935 15352 ? S 0:00 \_ redir --laddr 80.252.133.24 --lport 1935 --caddr 10.255.18.200 --cport 1935 15339 ? S 0:00 su -c redir --laddr 80.252.133.24 --lport 554 --caddr 10.255.18.200 --cport 554 15351 ? S 0:00 \_ redir --laddr 80.252.133.24 --lport 554 --caddr 10.255.18.200 --cport 554 15340 ? S 0:00 su -c redir --laddr 80.252.133.24 --lport 88 --caddr 10.205.11.224 --cport 88 15348 ? S 0:00 \_ redir --laddr 80.252.133.24 --lport 88 --caddr 10.205.11.224 --cport 88 15341 ? S 0:00 su -c redir --laddr 80.252.133.24 --lport 3070 --caddr 10.205.11.224 --cport 3070 15346 ? S 0:00 \_ redir --laddr 80.252.133.24 --lport 3070 --caddr 10.205.11.224 --cport 3070 15342 ? S 0:00 su -c redir --laddr 80.252.133.24 --lport 500 --caddr 10.205.11.224 --cport 500 15350 ? S 0:00 \_ redir --laddr 80.252.133.24 --lport 500 --caddr 10.205.11.224 --cport 500 15343 ? S 0:00 su -c redir --laddr 80.252.133.24 --lport 3544 --caddr 10.205.11.224 --cport 3544 15347 ? S 0:00 \_ redir --laddr 80.252.133.24 --lport 3544 --caddr 10.205.11.224 --cport 3544 15344 ? S 0:00 su -c redir --laddr 80.252.133.24 --lport 4500 --caddr 10.205.11.224 --cport 4500 15349 ? S 0:00 \_ redir --laddr 80.252.133.24 --lport 4500 --caddr 10.205.11.224 --cport 4500 22376 pts/0 Ss+ 1047:07 xl2tpd 3722 ? Ss 0:00 \_ /usr/sbin/pppd passive nodetach : name MiraNet file /etc/ppp/options.xl2tpd ipparam 10.255.255.254 /dev/pts/0 31130 ? Ss 0:00 udhcpd 23377 ? Ssl 0:17 /usr/sbin/freeradius 8151 ? S 0:00 redir --laddr 80.252.133.24 --lport 554 --caddr 10.255.18.200 --cport 554 11303 ? Ss 0:00 proftpd: (accepting connections) 23970 ? S 0:00 redir --laddr 80.252.133.24 --lport 554 --caddr 10.255.18.200 --cport 554 27658 ? Ss 0:11 /usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid 27660 ? S 0:06 \_ spamd child 27661 ? S 0:00 \_ spamd child 4923 ? S 0:00 /usr/sbin/courierlogger -pid=/var/run/courier/authdaemon/pid -start /usr/lib/courier/courier-authlib/authdaemond 4924 ? S 0:00 \_ /usr/lib/courier/courier-authlib/authdaemond 4927 ? S 0:00 \_ /usr/lib/courier/courier-authlib/authdaemond 4928 ? S 0:00 \_ /usr/lib/courier/courier-authlib/authdaemond 4929 ? S 0:00 \_ /usr/lib/courier/courier-authlib/authdaemond 4930 ? S 0:00 \_ /usr/lib/courier/courier-authlib/authdaemond 4931 ? S 0:00 \_ /usr/lib/courier/courier-authlib/authdaemond 4959 ? S 0:00 /usr/sbin/courierlogger -pid=/var/run/courier/pop3d.pid -start -name=pop3d /usr/sbin/couriertcpd -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup -address=0 110 /usr/lib/courier/courier/courierpop3login /usr/lib/courier/courier/courierpop3d Maildir 4960 ? S 0:00 \_ /usr/sbin/couriertcpd -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup -address=0 110 /usr/lib/courier/courier/courierpop3login /usr/lib/courier/courier/courierpop3d Maildir 5660 ? S 0:00 /usr/sbin/courierlogger -pid=/var/run/courier/imapd.pid -start -name=imapd /usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=20 -nodnslookup -noidentlookup 143 /usr/lib/courier/courier/imaplogin /usr/bin/imapd Maildir 5661 ? S 0:00 \_ /usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=20 -nodnslookup -noidentlookup 143 /usr/lib/courier/courier/imaplogin /usr/bin/imapd Maildir 6029 ? S 0:00 \_ /usr/bin/imapd miranet.ru/mar/ 6023 ? S 0:00 /usr/lib/gamin/gam_server 6558 ? Ss 0:00 /usr/lib/postfix/master 6561 ? S 0:00 \_ pickup -l -t fifo -u -c 6562 ? S 0:00 \_ qmgr -l -t fifo -u 6574 ? S 0:00 \_ tlsmgr -l -t unix -u -c 6575 ? S 0:00 \_ anvil -l -t unix -u -c 6736 ? S 0:00 /usr/sbin/courierlogger -pid=/var/run/courier/imapd-ssl.pid -start -name=imapd-ssl /usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=20 -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/lib/courier/courier/imaplogin /usr/bin/imapd Maildir 6737 ? S 0:00 \_ /usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=20 -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/lib/courier/courier/imaplogin /usr/bin/imapd Maildir