Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'What process is signaling this?' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
What process is signaling this?
Authored by: hamarkus on Aug 19, '05 02:44:41PM

Which process is doing the ssh stuff? In other words, how do I see it when people are pounching at my door? I often have the processes 'sh', 'pmTool', 'kerneltask' taking up a lot of cycles (10% to 20%), I attribute some of these to Matlab, which might use these processes, or VirtualPC as well.



[ Reply to This | # ]
Monitoring and Delays
Authored by: lullabud on Aug 19, '05 03:06:13PM

I've actually never paid attention to what process is doing the authentication, and frankly I'm not too sure about OS X's `top` binary, but I keep an eye on my network meter for systematic looking patterns and my CPU meter for consistent CPU usage when my system should be idling. If something looks fishy I `tail -f /var/log/system.log`. (That's also handy when used with /var/log/httpd/access_log when people are hacking your webserver.)

Also, while testing to see which process would be hogging the CPU, I noticed this in the system log:

Failed Authentication return is being delayed due to over five recent auth failures for username: foo.

I wonder if there's a variable I can change to lengthen that delay....



[ Reply to This | # ]
What process is signaling this?
Authored by: vykor on Aug 19, '05 05:22:07PM

For every ssh connection, there should be a correspondingly forked sshd instance to handle it. So the list in top or ps, look for the sshd instances.



[ Reply to This | # ]