topic Re: strange ps -ef in Operating System - HP-UX

strange ps -ef

Vijaya Kumar_3 — Mon, 20 Oct 2003 15:23:28 GMT

Hi i am getting strange ps -ef behavior sinve my /var is full. I cleared /var and now is ok.
but still ps shows like this (no user name)
$ ps -f
UID PID PPID C STIME TTY TIME COMMAND
5029 29396 29395 1 16:19:29 pts/tj 0:00 -ksh
5029 29520 29396 4 16:22:37 pts/tj 0:00 ps -f
0 29395 879 0 16:19:29 pts/tj 0:00 telnetd
$

someone show me some light
TIA
vijay

Re: strange ps -ef

Vijaya Kumar_3 — Mon, 20 Oct 2003 15:24:54 GMT

i know ps uses /var/adm/ps-data..for logging

but now it is fine

what else then?

Re: strange ps -ef

Michael Steele_2 — Mon, 20 Oct 2003 15:38:05 GMT

Please verify your O/S and paste in the verify.log errors.

# check_patches

Re: strange ps -ef

Bill Hassell — Mon, 20 Oct 2003 21:10:44 GMT

The user ID is 5029 which is correct. The reason that ps doesn't show the user name is likely due to someone deleting the user from the password file. Try this:

grep 5029 /etc/passwd

If nothing comes back, then the user was deleted. NOTE: it is quite possible to have processes running for a user that does not exist in /etc/passwd. After all, all the files owned by this user still have the UID (try ls -l on the user's HOME directory) stored in the inode. It's just the decoding of UID into a friendly username that is failing.

Re: strange ps -ef

Vijaya Kumar_3 — Mon, 20 Oct 2003 22:13:38 GMT

thanks bill and michael for ur time.

i tried both options already. but no success. I am doubting /var/adm/ps-data file. On that day, /var was full and 0 blocks.
We solved the issue by rebooting(obviously, standard solution!). but i wonder why this happens. what is the reason behind this? whu user name is not showing up after /var is freed up?

any experts?

TIA
Vijay

Re: strange ps -ef

Jakes Louw — Tue, 21 Oct 2003 01:25:49 GMT

I've only seen this on a trusted system where the UID cannot resolve to a username because the filesystem is full, but this is usually /, not /var.

Re: strange ps -ef

Jean-Louis Phelix — Tue, 21 Oct 2003 03:40:25 GMT

Hi,

I played with my ps_data file and I corrupted it manually. After that I got some strange results like :

/var/adm> ps -ef
ps: not enough memory for tables

I removed it and ps worked correctly after recreation ... Your full /var perhaps also corrupted yours.

Best regards.

Re: strange ps -ef

Vijaya Kumar_3 — Tue, 21 Oct 2003 09:43:06 GMT

Thanks jakes and Jean-louis

Re: strange ps -ef

Rory R Hammond — Tue, 21 Oct 2003 16:15:19 GMT

I think your /var/adm/ps_data file was corrupted because of the space problem.

I kind of duplicated this on my test box by
doing the following:

1. mv ps_data ps_data.rl
2. head ps_data.rl > ps_data

3. ps -fe
ps: not enough memory for tables

4. rm ps_data
5 ps -fe #every thing works.
6. diff ps_data ps_data.rl #no difference

I think you might have been able to fix the problem by deleting ps_data and running ps
It recreated an exact duplicate of the old ps_data

Rory