peeking at the processes(ps command)
Fields of the output:
UID: The user responsible for launching the process
PID: The process ID of the process
- PPID: The PID of the parent process
- C: Processor utilization over the lifetime of the process
- STIME: The system time when the process started.
- TTY: The terminal device from which the process was launched
- TIME: The cumulative CPU time required to run the process
- CMD: The name of the program that was started.
(2). Extra Fields
- F: System flags assigned to the process by the kernel
- S: The state of the process(O=running on processor; S=sleeping; R=runnable, waiting to run; Z = zombie, process terminated but parent not available; T=process stopped)
- PRI: The priority of the process(higher numbers mean lower priority)
- NI: The nice value, which is used for determine priorities
- ADDR: The memory address of the process
- SZ: approximate amount of swap space required if the process was swapped out
- WCHAN: Address of the kernel function where the process is sleeping
(3). Unix style
- VSZ: The size in kilobytes of the process in memory
- RSS: The physical memory that a process has used that isn't swapped out
- STAT: A two-character statecode representing the current process state
Detail state code for processes:
- < : The process is running at high priority
- N: The process is running at low priority
- L: The process has pages locked in memory
- s: The process is a session leader
- l: The process is multi-threaded
- +: The processor is running in the foreground
Real-time process monitoring
The load average appears as three numbers: The 1-minutes, 5-minutes, 15-minutes load average.
- PID: The process ID of the process
- USER: The user name of the owner of the process
- PR: The priority of the process
- NI: The nice value of the process
- VIRT: The total amount of virtual memory used by the process
- RES: The amount of physical memory the process is using.
- SHR: The amount of memory the process is sharing with other processes.
- S: The process status (D=interruptible sleep, R=running, S=sleeping, T=traced or stopped, or Z=zombie)
- %CPU: The share of CPU time that the process is using.
- %MEM: The share of available physical memory the process is using.
- TIME+: The total CPU time the process had used since starting.
COMMAND: The command line name of the process.
Keystrokes for changing the display
f: Allows you to select the field used to sort the output
d: Allows you to change the polling interval.
- q: Allow you to exit the display
User, which user owning the process
ps aux | grep zabbix
- see which user is runner process
ps aux | awk '{ print $1 }' | sed '1 d' | sort | uniq