topic I can't find certain PID in Operating System - Linux

I can't find certain PID

Josef Forman — Mon, 25 Sep 2006 03:45:14 GMT

Hi everybody!
I've just found a process with certain PID using top, but I can't find the same process using `ps aux`. How is it possible?

JF

Re: I can't find certain PID

Stuart Browne — Mon, 25 Sep 2006 04:36:26 GMT

Try using 'ps -fp ' instead.

Failing that, use 'ls -l /proc/'.

If neither of the 'ps' commands work, but the last 'ls' does, then I'd say you have trojan'd executables on your system, and you've been root-kit'd.

If the 'ls' doesn't work either, then the PID doesn't actually exist any more. I'm assuming it was a transient PID which came and went. If 'top' is showing the same PID still, and you can't find it with those commands, then your system is seriously unhealthy.

Re: I can't find certain PID

Josef Forman — Mon, 25 Sep 2006 05:55:42 GMT

I can't see the process using the other commands, but I can still see the process using top command.

As you wrote - I assume that the system is little bit unhealthy ;o)
I'm gonna reboot it later today.

THANKS

Re: I can't find certain PID

Ilay_1 — Mon, 25 Sep 2006 09:16:31 GMT

top show processes as well as threads,where ps show processes only.
So one of possibilities that you talk about thread and not process

cat /proc/yourPID/status |grep PPid

will say who is parent of this process.
As well you can find in /proc/yourPID/ a lot of interesting information

Re: I can't find certain PID

George Liu_4 — Mon, 25 Sep 2006 11:42:53 GMT

It is likely the process dies very quickly. This is a kind of problems happened when a process can't start child processes due to errors.