USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND

root 2 0.0 0.0 0 0 ? S Aug03 0:00 [kthreadd]

root 3 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [rcu_gp]
root 4 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [rcu_par_gp]
root 6 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[kworker/0:0H]
root 8 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[mm_percpu_wq]
root 9 0.0 0.0 0 0 ? S Aug03 0:53 \_
[ksoftirqd/0]
root 10 0.0 0.0 0 0 ? I Aug03 5:24 \_ [rcu_sched]
root 11 0.0 0.0 0 0 ? S Aug03 0:02 \_
[migration/0]
root 12 0.0 0.0 0 0 ? S Aug03 0:00 \_
[idle_inject/0]
root 14 0.0 0.0 0 0 ? S Aug03 0:00 \_ [cpuhp/0]
root 15 0.0 0.0 0 0 ? S Aug03 0:00 \_ [cpuhp/1]
root 16 0.0 0.0 0 0 ? S Aug03 0:00 \_
[idle_inject/1]
root 17 0.0 0.0 0 0 ? S Aug03 0:03 \_
[migration/1]
root 18 0.0 0.0 0 0 ? S Aug03 0:51 \_
[ksoftirqd/1]
root 20 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[kworker/1:0H-kblockd]
root 21 0.0 0.0 0 0 ? S Aug03 0:00 \_ [cpuhp/2]
root 22 0.0 0.0 0 0 ? S Aug03 0:00 \_
[idle_inject/2]
root 23 0.0 0.0 0 0 ? S Aug03 0:03 \_
[migration/2]
root 24 0.0 0.0 0 0 ? S Aug03 0:42 \_
[ksoftirqd/2]
root 26 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[kworker/2:0H]
root 27 0.0 0.0 0 0 ? S Aug03 0:00 \_ [cpuhp/3]
root 28 0.0 0.0 0 0 ? S Aug03 0:00 \_
[idle_inject/3]
root 29 0.0 0.0 0 0 ? S Aug03 0:03 \_
[migration/3]
root 30 0.0 0.0 0 0 ? S Aug03 0:47 \_
[ksoftirqd/3]
root 32 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[kworker/3:0H-kblockd]
root 33 0.0 0.0 0 0 ? S Aug03 0:00 \_ [cpuhp/4]
root 34 0.0 0.0 0 0 ? S Aug03 0:00 \_
[idle_inject/4]
root 35 0.0 0.0 0 0 ? S Aug03 0:03 \_
[migration/4]
root 36 0.0 0.0 0 0 ? S Aug03 0:43 \_
[ksoftirqd/4]
root 38 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[kworker/4:0H-kblockd]
root 39 0.0 0.0 0 0 ? S Aug03 0:00 \_ [cpuhp/5]
root 40 0.0 0.0 0 0 ? S Aug03 0:00 \_
[idle_inject/5]
root 41 0.0 0.0 0 0 ? S Aug03 0:03 \_
[migration/5]
root 42 0.0 0.0 0 0 ? S Aug03 0:43 \_
[ksoftirqd/5]
root 44 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[kworker/5:0H-kblockd]
root 45 0.0 0.0 0 0 ? S Aug03 0:00 \_ [cpuhp/6]
root 46 0.0 0.0 0 0 ? S Aug03 0:00 \_
[idle_inject/6]
root 47 0.0 0.0 0 0 ? S Aug03 0:03 \_
[migration/6]
root 48 0.0 0.0 0 0 ? S Aug03 0:56 \_
[ksoftirqd/6]
root 50 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[kworker/6:0H-kblockd]
root 51 0.0 0.0 0 0 ? S Aug03 0:00 \_ [cpuhp/7]
root 52 0.0 0.0 0 0 ? S Aug03 0:00 \_
[idle_inject/7]
root 53 0.0 0.0 0 0 ? S Aug03 0:03 \_
[migration/7]
root 54 0.0 0.0 0 0 ? S Aug03 0:47 \_
[ksoftirqd/7]
root 56 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[kworker/7:0H-kblockd]
root 57 0.0 0.0 0 0 ? S Aug03 0:00 \_ [kdevtmpfs]
root 58 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [netns]
root 59 0.0 0.0 0 0 ? S Aug03 0:00 \_
[rcu_tasks_kthre]
root 60 0.0 0.0 0 0 ? S Aug03 0:00 \_ [kauditd]
root 61 0.0 0.0 0 0 ? S Aug03 0:00 \_ [khungtaskd]
root 62 0.0 0.0 0 0 ? S Aug03 0:00 \_ [oom_reaper]
root 63 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [writeback]
root 64 0.0 0.0 0 0 ? S Aug03 0:00 \_ [kcompactd0]
root 65 0.0 0.0 0 0 ? SN Aug03 0:00 \_ [ksmd]
root 113 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[kintegrityd]
root 114 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [kblockd]
root 115 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[blkcg_punt_bio]
root 117 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [tpm_dev_wq]
root 118 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [ata_sff]
root 119 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [md]
root 120 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [edac-
poller]
root 121 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [devfreq_wq]
root 122 0.0 0.0 0 0 ? S Aug03 0:00 \_ [watchdogd]
root 126 0.0 0.0 0 0 ? S Aug03 0:20 \_ [kswapd0]
root 127 0.0 0.0 0 0 ? S Aug03 0:00 \_ [ecryptfs-
kthrea]
root 129 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [kthrotld]
root 130 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/24-
pciehp]
root 131 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/25-
pciehp]
root 132 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/26-
pciehp]
root 133 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/27-
pciehp]
root 134 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/28-
pciehp]
root 135 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/29-
pciehp]
root 136 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/30-
pciehp]
root 137 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/31-
pciehp]
root 138 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/32-
pciehp]
root 139 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/33-
pciehp]
root 140 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/34-
pciehp]
root 141 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/35-
pciehp]
root 142 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/36-
pciehp]
root 143 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/37-
pciehp]
root 144 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/38-
pciehp]
root 145 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/39-
pciehp]
root 146 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/40-
pciehp]
root 147 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/41-
pciehp]
root 148 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/42-
pciehp]
root 149 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/43-
pciehp]
root 150 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/44-
pciehp]
root 151 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/45-
pciehp]
root 152 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/46-
pciehp]
root 153 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/47-
pciehp]
root 154 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/48-
pciehp]
root 155 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/49-
pciehp]
root 156 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/50-
pciehp]
root 157 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/51-
pciehp]
root 158 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/52-
pciehp]
root 159 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/53-
pciehp]
root 160 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/54-
pciehp]
root 161 0.0 0.0 0 0 ? S Aug03 0:00 \_ [irq/55-
pciehp]
root 166 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[acpi_thermal_pm]
root 167 0.0 0.0 0 0 ? S Aug03 0:00 \_ [scsi_eh_0]
root 168 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [scsi_tmf_0]
root 169 0.0 0.0 0 0 ? S Aug03 0:00 \_ [scsi_eh_1]
root 170 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [scsi_tmf_1]
root 172 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [vfio-irqfd-
clea]
root 173 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[ipv6_addrconf]
root 184 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [kstrp]
root 187 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[kworker/u17:0]
root 200 0.0 0.0 0 0 ? I< Aug03 0:00 \_
[charger_manager]
root 201 0.0 0.0 0 0 ? I< Aug03 0:05 \_
[kworker/3:1H-kblockd]
root 258 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [mpt_poll_0]
root 259 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [mpt/0]
root 261 0.0 0.0 0 0 ? I< Aug03 0:05 \_
[kworker/5:1H-kblockd]
root 262 0.0 0.0 0 0 ? I< Aug03 0:05 \_
[kworker/2:1H-kblockd]
root 263 0.0 0.0 0 0 ? I< Aug03 0:05 \_
[kworker/0:1H-kblockd]
root 264 0.0 0.0 0 0 ? S Aug03 0:00 \_ [scsi_eh_2]
root 265 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [scsi_tmf_2]
root 268 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [kdmflush]
root 270 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [kdmflush]
root 308 0.0 0.0 0 0 ? I< Aug03 0:05 \_
[kworker/4:1H-kblockd]
root 309 0.0 0.0 0 0 ? S Aug03 1:03 \_ [jbd2/dm-1-
8]
root 310 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [ext4-rsv-
conver]
root 344 0.0 0.0 0 0 ? I< Aug03 0:05 \_
[kworker/7:1H-kblockd]
root 346 0.0 0.0 0 0 ? I< Aug03 0:11 \_
[kworker/6:1H-kblockd]
root 347 0.0 0.0 0 0 ? I< Aug03 0:05 \_
[kworker/1:1H-kblockd]
root 385 0.0 0.0 2488 508 ? S Aug03 0:00 \_ bpfilter_umh
root 531 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [cryptd]
root 540 0.0 0.0 0 0 ? S Aug03 0:00 \_ [jbd2/sda1-
8]
root 541 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [ext4-rsv-
conver]
root 567 0.0 0.0 0 0 ? S Aug03 0:33 \_ [irq/16-
vmwgfx]
root 569 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [ttm_swap]
root 587 0.0 0.0 0 0 ? I< Aug03 0:00 \_ [nfit]
root 1892604 0.0 0.0 0 0 ? I 10:27 0:00 \_
[kworker/6:1-events]
root 1920144 0.0 0.0 0 0 ? I 10:49 0:00 \_
[kworker/5:0-events]
root 1923578 0.0 0.0 0 0 ? I 10:52 0:00 \_
[kworker/0:2-events]
root 1934149 0.0 0.0 0 0 ? I 11:00 0:00 \_
[kworker/1:2-events]
root 1936078 0.0 0.0 0 0 ? I 11:02 0:00 \_
[kworker/u16:0-events_unbound]
root 1940977 0.0 0.0 0 0 ? I 11:06 0:00 \_
[kworker/6:2-events]
root 1952463 0.0 0.0 0 0 ? I 11:15 0:00 \_
[kworker/u16:3-events_power_efficient]
root 1956799 0.0 0.0 0 0 ? I 11:19 0:00 \_
[kworker/0:1-events]
root 1957045 0.0 0.0 0 0 ? I 11:19 0:00 \_
[kworker/3:1-events]
root 1958082 0.0 0.0 0 0 ? I 11:20 0:00 \_
[kworker/4:1-events]
root 1961630 0.0 0.0 0 0 ? I 11:23 0:00 \_
[kworker/1:0-events]
root 1964007 0.0 0.0 0 0 ? I 11:25 0:00 \_
[kworker/2:0-events]
root 1967646 0.0 0.0 0 0 ? I 11:28 0:00 \_
[kworker/3:2-cgroup_destroy]
root 1969749 0.0 0.0 0 0 ? I 11:30 0:00 \_
[kworker/7:1-events]
root 1970677 0.0 0.0 0 0 ? I 11:30 0:00 \_
[kworker/3:3-events]
root 1971237 0.0 0.0 0 0 ? I 11:31 0:00 \_
[kworker/1:1-events]
root 1972026 0.0 0.0 0 0 ? I 11:31 0:00 \_
[kworker/7:3-events]
root 1973161 0.0 0.0 0 0 ? I 11:32 0:00 \_
[kworker/4:0-memcg_kmem_cache]
root 1973497 0.0 0.0 0 0 ? I 11:33 0:00 \_
[kworker/2:1-events]
root 1973821 0.0 0.0 0 0 ? I 11:33 0:00 \_
[kworker/5:1-cgroup_destroy]
root 1973841 0.0 0.0 0 0 ? I 11:33 0:00 \_
[kworker/5:3-events]
root 1974014 0.0 0.0 0 0 ? I 11:33 0:00 \_
[kworker/2:2-memcg_kmem_cache]
root 1976127 0.0 0.0 0 0 ? I 11:35 0:00 \_
[kworker/6:0-events]
root 1976132 0.0 0.0 0 0 ? I 11:35 0:00 \_
[kworker/6:3-events]
root 1977615 0.0 0.0 0 0 ? I 11:36 0:00 \_
[kworker/0:0-mpt_poll_0]
root 1977628 0.0 0.0 0 0 ? I 11:36 0:00 \_
[kworker/0:3-memcg_kmem_cache]
root 1977704 0.0 0.0 0 0 ? I 11:36 0:00 \_
[kworker/1:3-events]
root 1979278 0.0 0.0 0 0 ? I 11:37 0:00 \_
[kworker/u16:1]
root 1980134 0.0 0.0 0 0 ? I 11:38 0:00 \_
[kworker/7:0-events]
root 1 0.0 0.0 171368 12296 ? Ss Aug03 7:17 /sbin/init
root 352 0.0 0.9 233236 149764 ? S<s Aug03 7:54
/lib/systemd/systemd-journald
root 396 0.0 0.0 22208 5348 ? Ss Aug03 6:05
/lib/systemd/systemd-udevd
root 1981017 0.0 0.0 22208 3196 ? S 11:38 0:00 \_
/lib/systemd/systemd-udevd
root 1981018 0.0 0.0 22208 3196 ? S 11:38 0:00 \_
/lib/systemd/systemd-udevd
root 1981019 0.0 0.0 22208 3196 ? S 11:38 0:00 \_
/lib/systemd/systemd-udevd
root 1981020 0.0 0.0 22208 3196 ? S 11:38 0:00 \_
/lib/systemd/systemd-udevd
root 1981021 0.0 0.0 22208 3196 ? S 11:38 0:00 \_
/lib/systemd/systemd-udevd
root 1981022 0.0 0.0 22208 3196 ? S 11:38 0:00 \_
/lib/systemd/systemd-udevd
root 1981023 0.0 0.0 22208 3196 ? S 11:38 0:00 \_
/lib/systemd/systemd-udevd
root 1981024 0.0 0.0 22208 3196 ? S 11:38 0:00 \_
/lib/systemd/systemd-udevd
root 724 0.0 0.0 69348 8312 ? Ss Aug03 0:00
/usr/bin/VGAuthService
root 725 0.0 0.0 332580 6808 ? Ssl Aug03 6:19
/usr/bin/vmtoolsd
root 733 0.0 0.0 29476 3996 ? Ss Aug03 0:00 /bin/bash
/opt/bitdefender/scripts/bitdefender-va-check.sh
root 1972129 0.0 0.0 27296 520 ? S 11:32 0:00 \_ sleep 30m
message+ 736 0.0 0.0 7328 4360 ? Ss Aug03 3:33 /usr/bin/dbus-
daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --
syslog-only
bdadmin 753 0.0 0.0 2608 528 ? Ss Aug03 0:00 /bin/sh -c
/usr/bin/nodejs service.js >>
/opt/bitdefender/var/log/gzupdatesystem/UpdateService/output.log 2>&1
bdadmin 763 0.0 0.1 620812 25552 ? Sl Aug03 0:42 \_
/usr/bin/nodejs service.js
memcache 758 0.0 0.0 411824 6256 ? Ssl Aug03 1:40
/usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P
/var/run/memcached/memcached.pid
mongodb 759 2.4 4.1 2251828 683004 ? SLsl Aug03 202:43 /usr/bin/mongod
--quiet --config /etc/mongodb.conf
rabbitmq 766 0.0 0.0 2608 460 ? Ss Aug03 0:00 /bin/sh
/usr/sbin/rabbitmq-server
rabbitmq 802 1.1 0.6 5490928 98544 ? Sl Aug03 93:37 \_
/usr/lib/erlang/erts-10.6.4/bin/beam.smp -W w -A 128 -MBas ageffcbf -MHas ageffcbf
-MBlmbcs 512 -MHlmbcs 512 -MMmcs 30 -P 1048576 -t 5000000 -stbt db -zdbbl 128000 -K
true -- -root /usr/lib/erlang -progname erl -- -home /var/lib/rabbitmq -- -pa
/usr/lib/rabbitmq/lib/rabbitmq_server-3.8.2/ebin -noshell -noinput -s rabbit boot
-sname rabbit@2fe6457d3420fe1d6a1f9949a730e1fd -boot start_sasl -config
/etc/rabbitmq/rabbitmq -kernel inet_default_connect_options [{nodelay,true}] -sasl
errlog_type error -sasl sasl_error_logger false -rabbit lager_log_root
"/var/log/rabbitmq" -rabbit lager_default_file
"/var/log/rabbitmq/[email protected]" -rabbit
lager_upgrade_file
"/var/log/rabbitmq/rabbit@2fe6457d3420fe1d6a1f9949a730e1fd_upgrade.log" -rabbit
feature_flags_file
"/var/lib/rabbitmq/mnesia/rabbit@2fe6457d3420fe1d6a1f9949a730e1fd-feature_flags" -
rabbit enabled_plugins_file "/etc/rabbitmq/enabled_plugins" -rabbit plugins_dir
"/usr/lib/rabbitmq/plugins:/usr/lib/rabbitmq/lib/rabbitmq_server-3.8.2/plugins" -
rabbit plugins_expand_dir
"/var/lib/rabbitmq/mnesia/rabbit@2fe6457d3420fe1d6a1f9949a730e1fd-plugins-expand" -
os_mon start_cpu_sup false -os_mon start_disksup false -os_mon start_memsup false -
mnesia dir "/var/lib/rabbitmq/mnesia/rabbit@2fe6457d3420fe1d6a1f9949a730e1fd" -ra
data_dir "/var/lib/rabbitmq/mnesia/rabbit@2fe6457d3420fe1d6a1f9949a730e1fd/quorum"
--
rabbitmq 1493 0.0 0.0 2492 1332 ? Ss Aug03 0:09 \_
erl_child_setup 65536
rabbitmq 2274 0.0 0.0 3880 824 ? Ss Aug03 0:00 \_
inet_gethost 4
rabbitmq 2276 0.0 0.0 3960 1716 ? S Aug03 0:00 \_
inet_gethost 4
syslog 770 0.0 0.0 224104 4376 ? Ssl Aug03 1:05
/usr/sbin/rsyslogd -n -iNONE
root 780 0.0 0.0 5556 2840 ? Ss Aug03 0:00
/usr/lib/ipsec/starter --daemon charon --nofork
root 933 0.0 0.0 1188976 5204 ? Ssl Aug03 0:00 \_
/usr/lib/ipsec/charon
root 785 0.0 0.0 18256 8396 ? Ss Aug03 2:23
/lib/systemd/systemd-logind
ntp 810 0.0 0.0 74248 2776 ? Ssl Aug03 0:17 /usr/sbin/ntpd -
p /var/run/ntpd.pid -g -u 109:120
root 920 0.0 0.0 12200 6508 ? Ss Aug03 0:12 sshd:
/usr/sbin/sshd -D [listener] 1 of 10-100 startups
root 1979412 0.0 0.0 13308 8020 ? Ss 11:37 0:00 \_ sshd:
unknown [priv]
sshd 1979413 0.0 0.0 12312 4924 ? S 11:37 0:00 | \_ sshd:
unknown [net]
root 1979909 0.0 0.0 13308 8600 ? Ss 11:38 0:00 \_ sshd:
bdadmin [priv]
bdadmin 1980207 0.0 0.0 13308 5616 ? S 11:38 0:00 \_ sshd:
bdadmin@pts/0
bdadmin 1980208 0.0 0.0 29836 4876 pts/0 Ss 11:38 0:00 \_ -
bash
root 1980285 0.0 0.0 30804 4424 pts/0 S 11:38 0:00 \_
sudo su
root 1980380 0.0 0.0 30040 4108 pts/0 S 11:38 0:00
\_ su
root 1980382 0.0 0.0 29056 4200 pts/0 S 11:38 0:00
\_ bash
root 1980966 1.0 0.0 30032 4988 pts/0 S+ 11:38 0:00
\_ bash /usr/sbin/logcollector all save
root 1981090 0.0 0.0 31040 3676 pts/0 R+ 11:38 0:00
\_ ps auxf
rabbitmq 962 0.0 0.0 8324 2784 ? S Aug03 0:05
/usr/lib/erlang/erts-10.6.4/bin/epmd -daemon
proxy 1033 0.0 0.1 106124 31004 ? Ss Aug03 2:44 /usr/sbin/squid3
-sYC -N -f /etc/squid3/squid.conf
proxy 1130706 0.0 0.0 6064 1724 ? Ss 00:00 0:00 \_ (pinger)
proxy 1130707 0.0 0.0 6372 1576 ? Ss 00:00 0:00 \_
(basic_ncsa_auth) /etc/squid3/passwd
root 1058 0.0 0.0 121500 2836 ? Sl Aug03 1:18
/opt/BitDefender/bin/bdregd -s
root 1069 0.0 0.0 729656 2460 ? Sl Aug03 2:10
/opt/BitDefender/bin/bdlogd -s
root 1130 0.0 0.0 1384508 14448 ? Sl Aug03 2:54
/opt/BitDefender/bin/bdepagd -s
root 1207 0.0 0.0 1733736 11980 ? Sl Aug03 1:30
/opt/BitDefender/bin/bdptd -s
root 1361 66.2 0.7 1341244 116356 ? S<l Aug03 5573:50
/opt/BitDefender/bin/bdsrvscand -s
root 1906502 52.0 4.0 1218548 667752 ? S<l 10:38 31:32 \_
/opt/BitDefender/bin/enginescand antivirus_262
root 1906503 51.7 3.7 1156700 618300 ? S<l 10:38 31:20 \_
/opt/BitDefender/bin/enginescand antivirus_262
root 1700 0.0 0.0 259908 2936 ? Sl Aug03 0:57
/opt/BitDefender/bin/bdicapd -s
root 1712 0.0 0.0 192656 2596 ? Sl Aug03 3:42
/opt/BitDefender/bin/bdmond -s
root 1718 0.1 0.0 210920 13488 ? Sl Aug03 16:35
/opt/BitDefender/bin/bdlived -s
root 2083 1.9 1.6 365896 272184 ? Ssl Aug03 164:44 /usr/bin/redis-
server 127.0.0.1:6379
root 2759 0.0 0.0 78384 264 ? Ssl Aug03 2:09
/opt/BitDefender/bin/spiped -d -s [10.1.151.30]:6379 -t [127.0.0.1]:6379 -k
/opt/BitDefender/var/tmp/cache/spipedkey-run
root 3251 0.2 0.0 78384 268 ? Ssl Aug03 23:37
/opt/BitDefender/bin/spiped -e -s [127.0.0.1]:0 -t [10.1.151.32]:6379 -k
/opt/BitDefender/var/tmp/cache/spipedkey-run -P
/opt/BitDefender/var/tmp/cache/[email protected]
root 3941 0.0 0.0 232732 5044 ? Ssl Aug03 0:53
/usr/lib/policykit-1/polkitd --no-debug
bitdefe+ 3021517 12.9 0.5 4827516 92000 ? Sl Aug05 779:09
/opt/bitdefender/bin/arrakis -s
root 3042969 0.0 0.0 28660 2976 ? Ss Aug05 0:06 /usr/sbin/cron -
f
root 3052505 0.0 0.0 28792 2376 tty1 Ss+ Aug05 0:00 /bin/bash
/opt/bitdefender/scripts/chkpasswd.sh
root 3052521 0.0 0.0 31116 2888 tty1 S+ Aug05 0:00 \_ sudo
/opt/bitdefender/eltiw/installer
root 3052522 0.0 0.2 130844 41592 tty1 S+ Aug05 0:01 \_ perl
/opt/bitdefender/eltiw/installer
root 3052814 0.0 0.0 2608 528 tty1 S+ Aug05 0:00 \_ sh -
c /usr/bin/dialog --title "Please login" --backtitle "Bitdefender GravityZone
Virtual Appliance" --colors --cr-wrap --no-cancel --ok-label "Login" --insecure --
passwordbox "Password for bdadmin user: " "10" "31" 2> /tmp/lrkJLHfGiD
root 3052816 0.0 0.0 29608 3316 tty1 S+ Aug05 0:00 \
_ /usr/bin/dialog --title Please login --backtitle Bitdefender GravityZone Virtual
Appliance --colors --cr-wrap --no-cancel --ok-label Login --insecure --passwordbox
Password for bdadmin user: 10 31
root 3052556 1.1 0.3 930432 53652 ? Ssl Aug05 69:44
/opt/bitdefender/bin/node /opt/bitdefender/scripts/va_sync.js
bitdefe+ 3053022 0.0 0.1 188516 17492 ? Ss Aug05 3:39 /usr/bin/php -
f /opt/bitdefender/hydra/Processors/runProcessorController.php >>
/opt/bitdefender/var/log/runProcessorController.log 2>&1
root 3053195 0.0 0.0 42140 1644 ? Ss Aug05 0:00 nginx: master
process /usr/sbin/nginx -c /etc/nginx/nginx.conf
nginx 3053196 0.0 0.1 76056 18348 ? S Aug05 0:03 \_ nginx:
worker process
nginx 3053197 0.0 0.1 76044 19540 ? S Aug05 0:03 \_ nginx:
worker process
nginx 3053198 0.0 0.2 75908 37736 ? S Aug05 0:03 \_ nginx:
worker process
nginx 3053199 0.0 0.0 75908 6636 ? S Aug05 0:04 \_ nginx:
worker process
nginx 3053200 0.0 0.0 75908 12064 ? S Aug05 0:03 \_ nginx:
worker process
nginx 3053201 0.0 0.1 75908 21612 ? S Aug05 0:03 \_ nginx:
worker process
nginx 3053202 0.0 0.1 76044 23408 ? S Aug05 0:04 \_ nginx:
worker process
nginx 3053203 0.0 0.1 75908 27280 ? S Aug05 0:03 \_ nginx:
worker process
root 3053277 0.0 0.1 307160 17880 ? Ss Aug05 0:14 php-fpm: master
process (/etc/php/7.4/fpm/php-fpm.conf)
nginx 315360 0.0 0.5 330788 87404 ? S Aug08 0:03 \_ php-fpm:
pool www
nginx 315361 0.0 0.5 328772 89148 ? S Aug08 0:04 \_ php-fpm:
pool www
nginx 501995 0.0 0.4 328448 81784 ? S Aug08 0:01 \_ php-fpm:
pool www
nginx 502080 0.0 0.5 324628 82400 ? S Aug08 0:01 \_ php-fpm:
pool www
nginx 502081 0.0 0.5 324972 84440 ? S Aug08 0:01 \_ php-fpm:
pool www
nginx 1973380 0.2 0.4 328512 76712 ? S 11:33 0:00 \_ php-fpm:
pool www
bitdefe+ 3053297 0.0 0.0 2608 460 ? Ss Aug05 0:00 /bin/sh -c
/usr/bin/node --stack-size=2015232 --stack-trace-limit=1000 --expose-gc
/opt/bitdefender/ecs/cluster.js --env prod --prod gz >>
/opt/bitdefender/var/log/ecs/ecs.log 2>&1
bitdefe+ 3053298 0.5 0.3 973948 50188 ? Sl Aug05 35:10 \_
/usr/bin/node --stack-size=2015232 --stack-trace-limit=1000 --expose-gc
/opt/bitdefender/ecs/cluster.js --env prod --prod gz
bitdefe+ 3053320 0.7 0.4 979760 75308 ? Sl Aug05 44:13 \_ ecs --
env prod --prod gz processType:worker processSubtype:common
bitdefe+ 3053326 0.7 0.4 987332 80916 ? Sl Aug05 44:25 \_ ecs --
env prod --prod gz processType:worker processSubtype:common
bitdefe+ 3053328 0.7 0.4 970692 71916 ? Sl Aug05 44:28 \_ ecs --
env prod --prod gz processType:worker processSubtype:common
bitdefe+ 3053329 0.7 0.4 978792 72932 ? Sl Aug05 45:13 \_ ecs --
env prod --prod gz processType:worker processSubtype:common
bitdefe+ 3053337 0.7 0.4 990748 81908 ? Sl Aug05 44:30 \_ ecs --
env prod --prod gz processType:worker processSubtype:common
bitdefe+ 3053349 0.7 0.4 983164 74716 ? Sl Aug05 44:09 \_ ecs --
env prod --prod gz processType:worker processSubtype:common
bitdefe+ 3053356 0.7 0.4 985992 79116 ? Sl Aug05 44:32 \_ ecs --
env prod --prod gz processType:worker processSubtype:common
bitdefe+ 3053367 0.7 0.4 985160 79804 ? Sl Aug05 44:29 \_ ecs --
env prod --prod gz processType:worker processSubtype:common
bitdefe+ 3053369 0.2 0.1 782528 29748 ? Sl Aug05 13:26 \_ ecs --
env prod --prod gz processType:genericMqProcessor processSubtype:common
bitdefe+ 3053377 1.2 0.3 975716 55064 ? Sl Aug05 72:57 \_ ecs --
env prod --prod gz processType:processor processSubtype:Sva Status Events Processor
bitdefe+ 3053383 0.7 0.4 976280 78604 ? Sl Aug05 46:37 \_ ecs --
env prod --prod gz processType:processor processSubtype:Product Status Events
Processor
bitdefe+ 3053391 0.5 0.2 968692 47928 ? Sl Aug05 35:07 \_ ecs --
env prod --prod gz processType:processor processSubtype:Pending Offline Processor
bitdefe+ 3053393 0.6 0.2 975644 46444 ? Sl Aug05 37:43 \_ ecs --
env prod --prod gz processType:processor processSubtype:Events Processor #1
bitdefe+ 3053399 0.5 0.3 973680 56616 ? Sl Aug05 34:10 \_ ecs --
env prod --prod gz processType:processor processSubtype:Events Processor #2
bitdefe+ 3053411 0.5 0.2 972464 48636 ? Sl Aug05 35:07 \_ ecs --
env prod --prod gz processType:processor processSubtype:Events Processor #3
bitdefe+ 3053414 0.5 0.2 976860 48724 ? Sl Aug05 35:30 \_ ecs --
env prod --prod gz processType:processor processSubtype:Events Processor #5
bitdefe+ 3053425 0.9 0.5 994812 82664 ? Sl Aug05 56:51 \_ ecs --
env prod --prod gz processType:processor processSubtype:Events Processor #6
bitdefe+ 3053432 0.5 0.2 974816 48700 ? Sl Aug05 35:46 \_ ecs --
env prod --prod gz processType:processor processSubtype:Events Processor #7
bitdefe+ 3053966 0.0 0.2 184200 44916 ? Ss Aug05 1:01 php
runProcessorRouter.php
bitdefe+ 3053974 0.0 0.4 197412 77160 ? Ss Aug05 1:26 php
runVmwareProcessor.php
bitdefe+ 3053987 0.0 0.4 190552 70324 ? Ss Aug05 1:06 php
runXenProcessor.php
bitdefe+ 3054036 0.0 0.4 190556 70140 ? Ss Aug05 1:07 php
runSveIntegrationProcessor.php
bitdefe+ 3054046 0.0 0.3 180132 61164 ? Ss Aug05 0:59 php
runNtsaIntegrationProcessor.php
bitdefe+ 3054086 0.0 0.3 182320 62200 ? Ss Aug05 1:06 php
runADComputersInventorySyncMaster.php
bitdefe+ 3054104 0.0 0.4 186412 65748 ? Ss Aug05 1:00 php
runEmailsProcessor.php
bitdefe+ 3054112 0.0 0.3 184412 64408 ? Ss Aug05 0:59 php
runReportsProcessor.php
bitdefe+ 3054115 0.0 0.3 180272 60400 ? Ss Aug05 1:01 php
runADSecurityGroupsInventorySyncMaster.php
bitdefe+ 3054124 0.0 0.3 182320 62028 ? Ss Aug05 1:05 php
runADUsersImportSyncMaster.php
bitdefe+ 3054140 0.0 0.4 194796 72892 ? Ss Aug05 1:16 php
runEpsDeployProcessor.php
bitdefe+ 3054187 0.0 0.4 188648 68772 ? Ss Aug05 0:59 php
runInstallSVAProcessor.php
bitdefe+ 3054214 0.0 0.3 184356 64212 ? Ss Aug05 1:43 php
runNotificationsProcessor.php
bitdefe+ 3054221 0.2 0.5 212888 92524 ? Ss Aug05 16:00 php
runProcessorWorker.php Processors.Notifications Consumer.getRabbitMqNotifications 0
bitdefe+ 3054223 0.2 0.5 212888 91304 ? Ss Aug05 16:00 php
runProcessorWorker.php Processors.Notifications Consumer.getRabbitMqNotifications 1
bitdefe+ 3054225 0.2 0.5 212888 92176 ? Ss Aug05 15:59 php
runProcessorWorker.php Processors.Notifications Consumer.getRabbitMqNotifications 2
bitdefe+ 3054227 0.2 0.5 212888 92000 ? Ss Aug05 15:57 php
runProcessorWorker.php Processors.Notifications Consumer.getRabbitMqNotifications 3
bitdefe+ 3054268 0.0 0.3 180752 60392 ? Ss Aug05 1:22 php
runLicenseCloudProcessor.php
bitdefe+ 3054315 0.0 0.4 194780 77284 ? Ss Aug05 1:42 php
runProcessorWorker.php Processors.LicenseCloud Worker.listenForEvents 0
bitdefe+ 3054401 0.0 0.4 194664 72568 ? Ss Aug05 1:18 php
runSveDeployProcessor.php
bitdefe+ 3054429 0.0 0.4 264568 70048 ? Ss Aug05 1:23 php
runUpdateProcessor.php
bitdefe+ 3054451 0.0 0.3 184356 64248 ? Ss Aug05 1:12 php
runGzUpdateMonitorProcessor.php
bitdefe+ 3054455 0.0 0.3 180268 61128 ? Ss Aug05 0:10 php
runConfigGeneratorProcessor.php
bitdefe+ 3054466 0.0 0.3 184228 63612 ? Ss Aug05 1:01 php
runSecurityIssuesProcessor.php
bitdefe+ 3054470 0.0 0.3 180392 61084 ? Ss Aug05 0:15 php
runBackupProcessor.php
bitdefe+ 3054493 0.0 0.3 184228 63692 ? Ss Aug05 2:01 php
runGenericProcessor.php
bitdefe+ 3054502 0.0 0.3 178180 58016 ? Ss Aug05 0:00 php
runProcessorWorker.php Processors.Generic SvaChangedWorker.listenForNotifications 1
bitdefe+ 3054504 0.0 0.4 189076 70664 ? Ss Aug05 0:00 php
runProcessorWorker.php Processors.Generic VmChangedWorker.listenForNotifications 2
bitdefe+ 3054506 0.0 0.3 178180 57888 ? Ss Aug05 0:00 php
runProcessorWorker.php Processors.Generic ActionRunnerWorker.listenForNotifications
3
bitdefe+ 3054508 0.0 0.3 178180 57832 ? Ss Aug05 0:00 php
runProcessorWorker.php Processors.Generic HostChangedWorker.listenForNotifications
4
bitdefe+ 3054510 0.0 0.3 180740 60756 ? Ss Aug05 0:00 php
runProcessorWorker.php Processors.Generic
PolicyChangedWorker.listenForNotifications 5
bitdefe+ 3054512 0.0 0.3 178180 57848 ? Ss Aug05 0:00 php
runProcessorWorker.php Processors.Generic
ExchangeOrganizationInfoWorker.listenForNotifications 6
bitdefe+ 3054514 0.0 0.3 180768 59572 ? Ss Aug05 0:04 php
runProcessorWorker.php Processors.Generic
SerenityResultsCollectorWorker.listenForNotifications 7
bitdefe+ 3054516 0.0 0.3 178180 58084 ? Ss Aug05 0:00 php
runProcessorWorker.php Processors.Generic
SandboxAnalyzerChangedWorker.listenForNotifications 8
bitdefe+ 3054518 0.0 0.3 178180 57856 ? Ss Aug05 0:00 php
runProcessorWorker.php Processors.Generic
ConvertedPoliciesRegeneratorWorker.listenForNotifications 9
bitdefe+ 3054538 0.0 0.4 192552 72232 ? Ss Aug05 1:17 php
runHviSupplementalPackProcessor.php
bitdefe+ 3054578 0.0 0.4 190504 71688 ? Ss Aug05 1:12 php
runHviRebootVmProcessor.php
bitdefe+ 3054585 0.0 0.3 180132 60696 ? Ss Aug05 1:19 php
runPowerStateProcessor.php
bitdefe+ 3054592 0.0 0.4 193028 74420 ? Ss Aug05 0:11 php
runProcessorWorker.php Processors.PowerState Consumer.getRabbitMqMessages 0
bitdefe+ 3054595 0.0 0.3 184488 64828 ? Ss Aug05 1:06 php
runNetworkCleanupProcessor.php
bitdefe+ 3054605 0.0 0.4 188648 69352 ? Ss Aug05 1:57 php
runBackgroundTasksProcessor.php
bitdefe+ 3054621 0.0 0.3 180132 60976 ? Ss Aug05 1:25 php
runPushIntegrationsProcessor.php
bitdefe+ 3054664 0.0 0.4 186276 66324 ? Ss Aug05 3:29 php
runProcessorWorker.php Processors.PushIntegrations Worker.init 0
bitdefe+ 3055774 0.0 0.4 186276 75872 ? Ss Aug05 3:31 php
runProcessorWorker.php Processors.PushIntegrations Worker.init 1
bitdefe+ 1555366 0.0 0.7 224632 121824 ? Ss Aug06 3:36 php
runProcessorWorker.php Processors.SVE.Vmware InventorySyncWorker.sync 0
bitdefe+ 1973406 0.1 0.6 213720 109532 ? Ss 11:33 0:00 php
runProcessorWorker.php Processors.SVE.Vmware UserRightSyncWorker.sync 1
root 1976649 0.0 0.0 303952 15812 ? Ssl 11:35 0:00
/usr/lib/packagekit/packagekitd
bdadmin 1980007 0.1 0.0 19300 9528 ? Ss 11:38 0:00
/lib/systemd/systemd --user
bdadmin 1980008 0.0 0.0 172552 4104 ? S 11:38 0:00 \_ (sd-pam)
root 1981016 4.0 0.0 17176 5860 ? Ss 11:38 0:00
/lib/systemd/systemd-timedated