LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 03-07-2017, 08:24 PM   #1
hilou
Member
 
Registered: May 2013
Posts: 93

Rep: Reputation: Disabled
weird w/who output


Hi All,

I just find a test user is logging on my server, but the TTY and FROM are :0 :0, what does that mean, and I find lots of processes owned by test user, check this out below:

w:
Code:
 10:14:54 up 17:28,  2 users,  load average: 1.48, 0.77, 0.50
USER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU WHAT
test     :0       :0               二16   ?xdm?   8:10m  0.15s init --user
who:
Code:
test     :0           2017-03-07 16:47 (:0)
processes:
Code:
test      1882  0.0  0.0 396464  9048 ?        Sl    3月07   0:00 /usr/bin/gnome-keyring-daemon --daemonize --login
test      1884  0.0  0.0  40332  4512 ?        Ss    3月07   0:00 init --user
test      1986  0.0  0.0  40028  3380 ?        Ss    3月07   0:01 dbus-daemon --fork --session --address=unix:abstract=/tmp/dbus-s5DZ7fS1rz
test      1997  0.0  0.0  22304  2572 ?        Ss    3月07   0:00 upstart-event-bridge
test      2003  0.0  0.0  78200  8132 ?        Ss    3月07   0:00 /usr/lib/x86_64-linux-gnu/hud/window-stack-bridge
test      2016  0.0  0.0  22312   204 ?        S     3月07   0:00 upstart-dbus-bridge --daemon --session --user --bus-name session
test      2019  0.0  0.0  30788   276 ?        S     3月07   0:00 upstart-file-bridge --daemon --user
test      2020  0.0  0.0  22312   208 ?        S     3月07   0:00 upstart-dbus-bridge --daemon --system --user --bus-name system
test      2023  0.0  0.0 376348 10112 ?        Ssl   3月07   0:00 /usr/bin/ibus-daemon --daemonize --xim
test      2048  0.0  0.0 822976 30280 ?        Ssl   3月07   0:00 /usr/lib/unity-settings-daemon/unity-settings-daemon
test      2052  0.0  0.0 645156 31680 ?        Ssl   3月07   0:00 /usr/lib/x86_64-linux-gnu/hud/hud-service
test      2056  0.0  0.0 196648  5824 ?        Sl    3月07   0:00 /usr/lib/gvfs/gvfsd
test      2060  0.0  0.0 360432  9180 ?        Sl    3月07   0:00 /usr/lib/gvfs/gvfsd-fuse /run/user/1000/gvfs -f -o big_writes
test      2063  0.0  0.0 295668  8228 ?        Sl    3月07   0:00 /usr/lib/ibus/ibus-dconf
test      2069  0.0  0.0 367684 11944 ?        Ssl   3月07   0:00 /usr/lib/at-spi2-core/at-spi-bus-launcher --launch-immediately
test      2070  0.0  0.0 584756 21824 ?        Ssl   3月07   0:00 gnome-session --session=ubuntu
test      2076  0.0  0.0 487944 25556 ?        Sl    3月07   0:00 /usr/lib/ibus/ibus-ui-gtk3
test      2077  0.0  0.0  39252  3520 ?        S     3月07   0:00 /bin/dbus-daemon --config-file=/etc/at-spi2/accessibility.conf --nofork --print-address 3
test      2080  0.0  0.0 124916  4840 ?        Sl    3月07   0:00 /usr/lib/at-spi2-core/at-spi2-registryd --use-gnome-session
test      2087  0.0  0.0 396384 17680 ?        Sl    3月07   0:00 /usr/lib/ibus/ibus-x11 --kill-daemon
test      2107  0.0  0.0 293912  7192 ?        S<l   3月07   0:00 /usr/bin/pulseaudio --start --log-target=syslog
test      2111  0.0  0.0 219948  7860 ?        Sl    3月07   0:00 /usr/lib/ibus/ibus-engine-simple
test      2112  0.0  0.0 503052 26640 ?        Ssl   3月07   0:02 /usr/lib/unity/unity-panel-service
test      2116  0.0  0.0 178180  4660 ?        Sl    3月07   0:00 /usr/lib/dconf/dconf-service
test      2130  0.0  0.0 557804 22744 ?        Sl    3月07   0:00 /usr/lib/x86_64-linux-gnu/bamf/bamfdaemon
test      2163  0.0  0.0 595564 25208 ?        Sl    3月07   0:00 /usr/lib/x86_64-linux-gnu/indicator-keyboard-service --use-gtk
test      2170  0.0  0.0 365564  8056 ?        Ssl   3月07   0:00 /usr/lib/x86_64-linux-gnu/indicator-messages/indicator-messages-service
test      2171  0.0  0.0 293744  7716 ?        Ssl   3月07   0:00 /usr/lib/x86_64-linux-gnu/indicator-bluetooth/indicator-bluetooth-service
test      2173  0.0  0.0 295644  7980 ?        Ssl   3月07   0:00 /usr/lib/x86_64-linux-gnu/indicator-power/indicator-power-service
test      2176  0.0  0.0 1164760 19424 ?       Ssl   3月07   0:00 /usr/lib/x86_64-linux-gnu/indicator-datetime/indicator-datetime-service
test      2181  0.0  0.0 495712 11572 ?        Ssl   3月07   0:00 /usr/lib/x86_64-linux-gnu/indicator-sound/indicator-sound-service
test      2185  0.0  0.0 456064 23016 ?        Ssl   3月07   0:00 /usr/lib/x86_64-linux-gnu/indicator-printers/indicator-printers-service
test      2190  0.0  0.0 349876 18976 ?        Sl    3月07   0:00 /usr/lib/x86_64-linux-gnu/notify-osd
test      2193  0.0  0.0 644248 10424 ?        Ssl   3月07   0:00 /usr/lib/x86_64-linux-gnu/indicator-session/indicator-session-service
test      2194  0.0  0.0 286756  8316 ?        Ssl   3月07   0:00 /usr/lib/x86_64-linux-gnu/indicator-application/indicator-application-service
test      2217  0.0  0.0 975956 20128 ?        Sl    3月07   0:00 /usr/lib/evolution/evolution-source-registry
test      2241 14.4  0.3 1861908 236920 ?      Sl    3月07 152:24 compiz
test      2251  0.0  0.0 468664 26456 ?        Sl    3月07   0:00 nm-applet
test      2253  0.0  0.0 341240 18456 ?        Sl    3月07   0:00 /usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1
test      2256  0.0  0.0 1096232 52016 ?       Sl    3月07   0:00 /usr/lib/evolution/evolution-calendar-factory
test      2257  0.0  0.0 890568 42816 ?        Sl    3月07   0:00 nautilus -n
test      2261  0.0  0.0 410656 17464 ?        Sl    3月07   0:00 /usr/lib/unity-settings-daemon/unity-fallback-mount-helper
test      2275  0.0  0.0 311440  9368 ?        Sl    3月07   0:00 /usr/lib/gvfs/gvfs-udisks2-volume-monitor
test      2278  0.0  0.0  58032  6312 ?        S     3月07   0:00 /usr/lib/x86_64-linux-gnu/gconf/gconfd-2
test      2309  0.0  0.0 212448  6120 ?        Sl    3月07   0:00 /usr/lib/gvfs/gvfs-gphoto2-volume-monitor
test      2313  0.0  0.0 285972  6420 ?        Sl    3月07   0:00 /usr/lib/gvfs/gvfs-afc-volume-monitor
test      2318  0.0  0.0 200284  5600 ?        Sl    3月07   0:00 /usr/lib/gvfs/gvfs-mtp-volume-monitor
test      2325  0.0  0.0 447928 10412 ?        Sl    3月07   0:00 /usr/lib/gvfs/gvfsd-trash --spawner :1.5 /org/gtk/gvfs/exec_spaw/0
test      2341  0.0  0.0 270384  4940 ?        Sl    3月07   0:00 /usr/lib/gvfs/gvfsd-burn --spawner :1.5 /org/gtk/gvfs/exec_spaw/1
test      2384  0.0  0.0 613816 25652 ?        Sl    3月07   0:00 /usr/lib/x86_64-linux-gnu/unity-scope-home/unity-scope-home
test      2395  0.0  0.0 600140 25672 ?        Sl    3月07   0:01 /usr/bin/unity-scope-loader applications/applications.scope applications/scopes.scope commands.scope
test      2397  0.0  0.0 626868 17172 ?        Sl    3月07   0:00 /usr/lib/x86_64-linux-gnu/unity-lens-files/unity-files-daemon
test      2401  0.0  0.0 350244 14580 ?        Sl    3月07   0:00 /usr/lib/x86_64-linux-gnu/unity-lens-music/unity-music-daemon
test      2410  0.0  0.0 363748  8308 ?        Sl    3月07   0:00 /usr/bin/zeitgeist-daemon
test      2419  0.0  0.0 330020 15160 ?        Sl    3月07   0:00 /usr/lib/x86_64-linux-gnu/zeitgeist-fts
test      2421  0.0  0.0 528116 16960 ?        Sl    3月07   0:00 zeitgeist-datahub
 
Old 03-08-2017, 12:42 AM   #2
JJJCR
Senior Member
 
Registered: Apr 2010
Posts: 2,150

Rep: Reputation: 449Reputation: 449Reputation: 449Reputation: 449Reputation: 449
have you tried typing: whoami

Most probably it will be "test"

Or try using: ps -u test
 
Old 03-08-2017, 12:52 AM   #3
Jjanel
Member
 
Registered: Jun 2016
Distribution: any&all, in VBox; Ol'UnixCLI; NO GUI resources
Posts: 999
Blog Entries: 12

Rep: Reputation: 364Reputation: 364Reputation: 364Reputation: 364
Distro? (History?) MIGHT that terminal be 'messed-up'? reset;clear
Valid user [YOU? vs. hacker!]? last|head; grep -w test /etc/passwd; ls -l /etc/passwd; dmesg|tail
GUI/ssh? Is your IP address 'private' 192.168.. (or 'public'? [doNOT post it!])

p.s. Can a guru toss me a link explaining "init --user"? reparented? Upstart?

Last edited by Jjanel; 03-08-2017 at 01:23 AM.
 
Old 03-08-2017, 11:54 AM   #4
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Code:
w -s
may yield a clue?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
weird output of df. hilou Linux - Newbie 6 02-19-2014 03:00 AM
weird logwatch output arty Linux - Security 21 04-05-2010 03:09 PM
my dmesg output looks really weird *Xenny* SUSE / openSUSE 7 08-10-2006 06:35 AM
Weird DF Output Mr_Munkey Linux - General 4 03-09-2005 09:11 AM
weird nestat output tyler_durden Linux - Security 1 02-28-2002 12:31 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 10:09 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration