USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root         2  0.0  0.0      0     0 ?        S    Mar07   0:00 [kthreadd]
root         3  0.0  0.0      0     0 ?        S    Mar07   0:03  \_ [ksoftirqd/0]
root         5  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [kworker/0:0H]
root         7  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [kworker/u:0H]
root         8  0.0  0.0      0     0 ?        S    Mar07   0:02  \_ [migration/0]
root         9  0.0  0.0      0     0 ?        S    Mar07   0:06  \_ [rcu_bh]
root        10  0.0  0.0      0     0 ?        S    Mar07   3:21  \_ [rcu_sched]
root        11  0.0  0.0      0     0 ?        S    Mar07   0:03  \_ [ksoftirqd/1]
root        12  0.0  0.0      0     0 ?        S    Mar07   0:03  \_ [migration/1]
root        14  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [kworker/1:0H]
root        15  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [khelper]
root       116  0.0  0.0      0     0 ?        S    Mar07   0:00  \_ [bdi-default]
root       118  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [kblockd]
root       241  0.0  0.0      0     0 ?        S    Mar07   0:00  \_ [khubd]
root       358  0.0  0.0      0     0 ?        S    Mar07   2:46  \_ [kswapd0]
root       421  0.0  0.0      0     0 ?        S    Mar07   0:00  \_ [fsnotify_mark]
root       436  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [crypto]
root      1037  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [edac-poller]
root      1048  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [deferwq]
root      1110  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [ata_sff]
root      1131  0.0  0.0      0     0 ?        S    Mar07   0:00  \_ [scsi_eh_0]
root      1134  0.0  0.0      0     0 ?        S    Mar07   0:00  \_ [scsi_eh_1]
root      1137  0.0  0.0      0     0 ?        S    Mar07   0:00  \_ [scsi_eh_2]
root      1140  0.0  0.0      0     0 ?        S    Mar07   0:00  \_ [scsi_eh_3]
root      1143  0.0  0.0      0     0 ?        S    Mar07   0:00  \_ [kworker/u:2]
root      1144  0.0  0.0      0     0 ?        S    Mar07   0:00  \_ [kworker/u:3]
root      1162  0.0  0.0      0     0 ?        S    Mar07   0:00  \_ [scsi_eh_4]
root      1165  0.0  0.0      0     0 ?        S    Mar07   0:00  \_ [scsi_eh_5]
root      1827  0.0  0.0      0     0 ?        S<   Mar07   0:33  \_ [kworker/0:1H]
root      1836  0.0  0.0      0     0 ?        S<   Mar07   0:34  \_ [kworker/1:1H]
root      2285  0.0  0.0      0     0 ?        S    Mar07   0:21  \_ [jbd2/sda6-8]
root      2286  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [ext4-dio-unwrit]
root      2292  0.0  0.0      0     0 ?        S    Mar07   0:39  \_ [flush-8:0]
root      2622  0.0  0.0      0     0 ?        S    Mar07   0:00  \_ [jbd2/sda1-8]
root      2623  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [ext4-dio-unwrit]
root      2624  0.0  0.0      0     0 ?        S    Mar07   0:17  \_ [jbd2/sda5-8]
root      2625  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [ext4-dio-unwrit]
root      2626  0.0  0.0      0     0 ?        S    Mar07   0:17  \_ [jbd2/sda7-8]
root      2627  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [ext4-dio-unwrit]
root      2628  0.0  0.0      0     0 ?        S    Mar07   0:01  \_ [jbd2/sda8-8]
root      2629  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [ext4-dio-unwrit]
root      2659  0.0  0.0      0     0 ?        S<   Mar07   0:00  \_ [redd]
root     10401  0.4  0.0      0     0 ?        S    Mar10  30:30  \_ [kworker/0:1]
root      9020  0.0  0.0      0     0 ?        S    Mar12   0:00  \_ [kworker/0:2]
root      2744  0.0  0.0      0     0 ?        S    Mar13   0:00  \_ [kworker/1:1]
root     14692  0.9  0.0      0     0 ?        S    10:50   3:23  \_ [kworker/1:2]
root         1  0.0  0.0   1912   516 ?        Ss   Mar07   0:03 init [3]  
root      2349  0.0  0.0   2492   468 ?        S<s  Mar07   0:00 /sbin/udevd --daemon
root      2496  0.0  0.0   2488   468 ?        S<   Mar07   0:00  \_ /sbin/udevd --daemon
root      2502  0.0  0.0   2488   352 ?        S<   Mar07   0:00  \_ /sbin/udevd --daemon
root      2794  0.0  0.0   1904   508 ?        Ss   Mar07   0:00 /sbin/acpid
200       2809  0.0  0.0   2592   400 ?        Ss   Mar07   0:00 /bin/dbus-daemon --system
201       3040  0.0  0.0   6088  1208 ?        Ss   Mar07   0:03 /usr/sbin/hald --daemon=yes
root      3041  0.0  0.0   3664   448 ?        S    Mar07   0:00  \_ hald-runner
root      3062  0.0  0.0   5600   296 ?        S    Mar07   0:00      \_ hald-addon-input: Listening on /dev/input/event0 /dev/input
201       3078  0.0  0.0   5324   276 ?        S    Mar07   0:00      \_ hald-addon-acpi: listening on acpid socket /var/run/acpid.s
root      3097  0.1  0.0   6196   956 ?        Ss   Mar07  11:50 /usr/sbin/irqd
root      3111  0.1  0.0   2164   432 ?        Ss   Mar07  16:01 /usr/sbin/lcm-162 5
root      3125  0.0  0.0   6252   864 ?        Ss   Mar07   1:53 /sbin/haveged -w 1024 -v 0
root      3169  0.0  0.8  51512 17100 ?        Ss   Mar07   2:59 confd [master]
root      3170  0.0  0.0   1892   432 ?        S    Mar07   0:00  \_ logger -p daemon.debug -t confd[3169]
root      3330  0.0  0.2  50796  4984 ?        S    Mar07   1:07  \_ confd [listener]
root      5120  0.0  0.2  50796  4896 ?        S    12:16   0:00      \_ confd [worker:prpc:system]
root     10235  2.1  1.3  60172 27772 ?        S    16:39   0:01      \_ confd [worker:prpc:webadmin]
root     10328  9.2  1.1  56408 23596 ?        S    16:39   0:01      \_ confd [worker:prpc:webadmin]
root     10332 18.3  0.0      0     0 ?        Z    16:39   0:02      \_ [confd.plx] <defunct>
root     10350 17.3  0.9  54464 20156 ?        S    16:39   0:00      \_ confd [worker:prpc:webadmin]
root     10357  0.0  0.0   2712   940 ?        R    16:39   0:00          \_ ps auxwf
root      3186  0.0  0.0   1892   440 ?        Ss   Mar07   0:01 /usr/local/bin/confd-queuer
root      3200  0.0  0.1   8052  3128 ?        Ss   Mar07   0:30 confd-qrunner.pl
root      3219  0.0  0.1   7904  3168 ?        S    Mar07   2:57 /usr/local/bin/sysmond
root      3261  0.0  0.2  15576  4292 ?        S    Mar07   0:02 /var/aua/aua.bin
root      3262  0.0  0.0   1892   192 ?        S    Mar07   0:00  \_ logger -p daemon.debug -t aua[3261]
root      3500  0.0  0.1  13888  3280 ?        S    Mar07   0:00 /usr/local/bin/notifier.plx -d
rrdcache  3544  0.0  0.0 133232   780 ?        Ssl  Mar07   2:37 /usr/bin/rrdcached -l unix:/var/run/rrdcached/socket -m 777 -b /var
at        3578  0.0  0.0   2348   304 ?        Ss   Mar07   0:00 /usr/sbin/atd
root      3720  0.0  0.0   2200   224 ?        Ss   Mar07   0:00 /usr/sbin/csync2 -ii -N 198.19.250.2
root      3721  0.0  0.2   4076  4072 ?        S<Lsl Mar07   0:33 /usr/local/bin/ha_daemon
root      3723  0.0  0.0   2036   512 ?        Ss   Mar07   0:18 /usr/local/bin/ha_sysmond
postgres  3906  0.0  0.0 573692   892 ?        S    Mar07   0:48 /usr/pgsql92/bin/postgres -D /var/storage/pgsql92/data
postgres  3924  0.0  1.1 574060 23576 ?        Ss   Mar07   1:33  \_ postgres: checkpointer process                        
postgres  3925  0.0  0.0 573952   752 ?        Ss   Mar07   0:03  \_ postgres: writer process                              
postgres  3926  0.0  0.6 573952 12656 ?        Ss   Mar07   2:06  \_ postgres: wal writer process                          
postgres  3927  0.0  0.0 575036  1792 ?        Ss   Mar07   1:21  \_ postgres: autovacuum launcher process                 
postgres  3928  0.0  0.0   7916   768 ?        Ss   Mar07   0:01  \_ postgres: archiver process   last was 0000000100000032000000B3
postgres  3929  0.0  0.0   8484  1160 ?        Ss   Mar07   3:28  \_ postgres: stats collector process                     
postgres  5441  0.2  1.0 577024 21856 ?        Ss   Mar07  20:43  \_ postgres: reporting reporting [local] idle            
postgres  5465  0.0  0.0 576352  1064 ?        Ss   Mar07   0:00  \_ postgres: pop3 pop3 127.0.0.1(38188) idle             
postgres  5662  0.0  0.4 576696  9692 ?        Ss   Mar07   0:11  \_ postgres: smtp smtp 127.0.0.1(38201) idle             
postgres 11054  0.0  0.0 576356   976 ?        Ss   00:00   0:00  \_ postgres: reporting reporting [local] idle            
postgres 11055  0.0  1.1 578068 23964 ?        Ss   00:00   0:40  \_ postgres: reporting reporting [local] idle            
postgres  9425  0.1  0.3 576468  7184 ?        Ss   16:34   0:00  \_ postgres: smtp smtp 127.0.0.1(45498) idle             
root      4114  0.0  1.6  99936 32444 ?        S    Mar07   6:26 /var/mdw/mdw.plx
root      4118  0.0  0.0   1892   460 ?        S    Mar07   0:00  \_ logger -p daemon.debug -t middleware[4114]
root      4147  0.7  0.1  11940  3532 ?        S    Mar07  72:47 /usr/local/bin/selfmonng.plx
root      4159  0.0  0.0  11284   976 ?        S    Mar07   0:01  \_ [timewarp check]
root      4187  0.0  0.0   1888   488 ?        Ss   Mar07   1:06 /usr/local/bin/daemon-watcher selfmonng.plx /usr/local/bin/selfmonn
root      4188  0.0  0.0   2416   580 tty1     Ss+  Mar07   0:00 /sbin/mingetty --noclear --no-hostname tty1
root      4189  0.0  0.0   2416   576 tty2     Ss+  Mar07   0:00 /sbin/mingetty --no-hostname tty2
root      4190  0.0  0.0   2416   576 tty3     Ss+  Mar07   0:00 /sbin/mingetty --no-hostname tty3
root      4191  0.0  0.0   2416   580 tty4     Ss+  Mar07   0:00 /sbin/mingetty --no-hostname tty4
root      4192  0.0  0.0   2136   532 ttyS0    Ss+  Mar07   0:00 /sbin/mingetty ttyS0
root      4193  0.0  0.0   2136   532 ttyS1    Ss+  Mar07   0:00 /sbin/mingetty ttyS1
root      4421  0.1  2.3  53568 47212 ?        S<s  Mar07  19:02 /usr/sbin/conntrackd -d
root      4439  0.0  0.2  16184  4556 ?        Ss   Mar07   0:04 confd-sync
nobody    4466  0.0  0.0   4036    16 ?        S    Mar07   0:02 /sbin/ha_proxy
nobody    4468  0.0  0.0   4036     4 ?        S    Mar07   0:00  \_ /sbin/ha_proxy
root      5109  0.0  0.2  12464  5956 ?        Ss   Mar07   0:54 dns-resolver.plx
root      5130  0.0  0.3  15104  7464 ?        Ss   Mar07   7:16 /usr/sbin/named -4
root      5184  0.0  0.0   2368   704 ?        Ss   Mar07   0:01 /usr/sbin/cron
root      5241  0.0  0.0   4916   536 ?        Ss   Mar07   0:00 /usr/sbin/sshd -f /etc/ssh/sshd_config
root      5262  0.0  0.6  37044 12556 ?        Ss   Mar07   3:32 awed [master]
root     23236  0.0  0.4  37044  9580 ?        S    05:02   0:25  \_ AP5 A3200885AFA8BF0 (Edenkoben)
root      5372  0.1  0.1   8436  3260 ?        Ss   Mar07  14:27 /usr/sbin/openvpn --config /etc/openvpn/openvpn.conf --writepid /va
root      5373  0.0  0.0   5112    28 ?        S    Mar07   0:00  \_ /usr/sbin/openvpn --config /etc/openvpn/openvpn.conf --writepid
root      7470  0.0  0.0   1884    32 ?        S    Mar07   0:00  \_ async_auth 15
root      5380  0.0  0.0  10812   368 ?        Ss   Mar07   0:11 /bin/httpd -f /etc/httpd/httpd.conf
root      5382  0.0  0.0   1892    52 ?        S    Mar07   0:00  \_ /bin/logger -t httpd -p local6.notice
wwwrun    5387  0.0  0.0  10744   428 ?        S    Mar07   0:00  \_ /bin/httpd -f /etc/httpd/httpd.conf
wwwrun   16731  0.0  0.0  39396     0 ?        S    Mar09   0:01  |   \_ /var/jape/index.plx
wwwrun   21739 26.1  4.5 100076 92124 ?        S    15:20  20:39  |   \_ /var/webadmin/webadmin.plx
wwwrun    2067 16.5  4.0  90080 82136 ?        S    16:14   4:12  |   \_ /var/webadmin/webadmin.plx
wwwrun   10082 25.4  4.0  84228 82076 ?        S    16:38   0:20  |   \_ /var/webadmin/webadmin.plx
wwwrun    9964  0.2  0.1  11240  3576 ?        S    16:37   0:00  \_ /bin/httpd -f /etc/httpd/httpd.conf
wwwrun   10234  0.2  0.1  11256  3200 ?        S    16:39   0:00  \_ /bin/httpd -f /etc/httpd/httpd.conf
wwwrun   10243  0.1  0.1  11128  3052 ?        S    16:39   0:00  \_ /bin/httpd -f /etc/httpd/httpd.conf
wwwrun   10314  0.0  0.1  11136  2968 ?        S    16:39   0:00  \_ /bin/httpd -f /etc/httpd/httpd.conf
wwwrun   10317  0.0  0.1  11136  3008 ?        S    16:39   0:00  \_ /bin/httpd -f /etc/httpd/httpd.conf
root      5436  0.1  0.1  33952  3504 ?        S<sl Mar07  16:18 /usr/sbin/ulogd -c /etc/ulogd.conf -d
root      5463  0.0  0.0   8776    80 ?        Ss   Mar07   0:00 /bin/pop3proxy
ftpproxy  5485  0.0  0.0   2288    44 ?        S    Mar07   0:00 /usr/sbin/frox -f /etc/frox.conf
root      5611  0.1  0.4  31660  8452 ?        Ss   Mar07  12:25 smtpd [master]
root      5634  0.0  0.2  34732  6060 ?        S    Mar07   0:58  \_ smtpd [queue manager]
smtp      5661  0.0  0.1   8432  2132 ?        S    Mar07   0:33  \_ /bin/exim -DINPUT -bdf
root      6022  0.6  0.0  22792  1880 ?        Ssl  Mar07  65:46 ./ctipd.bin -l /usr/lib/ctipd
root      6063  0.0  0.0   4132    20 ?        Ss   Mar07   0:00 /usr/lib/ctasd/ctasd -p /var/run/ctasd_outbound.pid -l /usr/lib/cta
root      6065  0.0  0.5  48640 10200 ?        Sl   Mar07   1:24  \_ /usr/lib/ctasd/ctasd -p /var/run/ctasd_outbound.pid -l /usr/lib
root      6066  0.0  0.0   4132    24 ?        Ss   Mar07   0:00 /usr/lib/ctasd/ctasd -p /var/run/ctasd_inbound.pid -l /usr/lib/ctas
root      6069  0.0  1.0  50188 20912 ?        Sl   Mar07   6:20  \_ /usr/lib/ctasd/ctasd -p /var/run/ctasd_inbound.pid -l /usr/lib/
afcd      6172  0.0  0.3  27376  7448 ?        S<sl Mar07   9:49 /usr/sbin/afcd
root      6242  0.0  0.0   5924   452 ?        Ssl  Mar07   0:04 /usr/local/bin/service_monitor
root      6401  0.0  0.0   6196   584 ?        Ss   Mar07   0:01 /usr/libexec/postfix/master -w
postfix   7653  0.0  0.0   6420   792 ?        S    Mar07   0:00  \_ qmgr -l -t unix -u -c
postfix  27284  0.0  0.0   6256   936 ?        S    15:45   0:00  \_ pickup -l -t unix -u -c
root      7611  0.0  0.0   4932  1548 ?        Ss   Mar07   0:22 /usr/sbin/dhcpd -cf /etc/dhcpd.conf reds11 reds20 reds16 reds15 red
root      7899  0.1  0.2  16476  4248 ?        Ss   Mar07  10:56 /usr/local/bin/red_server.plc
root      8290  0.0  0.0  15980  1184 ?        S    Mar07   2:22  \_ UPLOAD [idle]
root      8383  0.0  0.2  16344  4240 ?        S    Mar07   0:26  \_ Socket-Listener
root     10288  0.0  0.1  17100  3944 ?        S    Mar07   7:41      \_ A32008B0EE223D4 (11) [217.92.35.20]
root     10393  0.0  0.1  17100  3932 ?        S    Mar07   7:38      \_ A3200806075A61C (22) [213.3.53.194]
root     22509  0.0  0.1  17100  3880 ?        S    Mar09   6:14      \_ A3200885AFA8BF0 (15) [87.138.74.158]
root      9644  0.0  0.1  17100  3936 ?        S    Mar12   2:29      \_ A32008AF017F44F (2) [80.153.112.106]
root      2054  0.0  0.1  17100  3880 ?        S    Mar12   2:00      \_ A320080831E518D (7) [217.92.41.157]
root      2260  0.0  0.1  17100  3892 ?        S    Mar12   1:59      \_ A32008E1D25DD2A (1) [80.153.44.105]
root     23643  0.0  0.2  17100  4080 ?        S    Mar13   1:04      \_ A32008DFCDAE223 (13) [91.37.5.174]
root     11309  0.0  0.2  17100  4060 ?        S    Mar13   1:00      \_ A320081288736D3 (20) [91.53.10.182]
root     21508  0.0  0.2  17100  4080 ?        S    Mar13   0:58      \_ A32008B042FCC12 (9) [217.232.32.253]
root     27775  0.0  0.2  17100  4056 ?        S    Mar13   0:51      \_ A32008B2619BBED (5) [84.190.183.105]
root     21970  0.0  0.2  17100  4064 ?        S    00:42   0:46      \_ A320084287990E7 (4) [79.245.65.60]
root      6685  0.0  0.2  17100  4064 ?        S    06:09   0:32      \_ A3200890372298E (18) [79.239.26.190]
root     30536  0.0  0.2  17100  4140 ?        S    09:46   0:22      \_ A3200837E4DA72C (14) [91.47.19.149]
root     32077  0.0  0.2  17100  4124 ?        S    09:54   0:21      \_ A3200808F1CB809 (8) [80.130.34.59]
root     15015  0.0  0.2  17100  4112 ?        S    10:52   0:18      \_ A32008CB9E795BC (3) [79.228.32.190]
root     25705  0.0  0.2  17100  5344 ?        S    13:31   0:10      \_ A320082C9DFF11E (19) [93.192.15.31]
root     28966  0.0  0.2  17100  5220 ?        S    13:45   0:09      \_ A32008E563BEA60 (6) [79.241.37.177]
root      2820  0.0  0.3  17100  6656 ?        S    14:14   0:07      \_ A3200865BE05608 (10) [91.0.7.206]
root      5363  0.0  0.3  17100  6856 ?        S    14:19   0:07      \_ A320084EEA6236B (17) [79.230.2.163]
root     10911  0.0  0.3  17100  7176 ?        S    14:42   0:06      \_ A3200850B232139 (16) [91.57.35.29]
root     22418  0.0  0.3  17100  7324 ?        S    15:25   0:04      \_ A32008CE7C8B635 (21) [80.131.20.191]
root     15075  0.0  0.0   5740   412 ?        S    Mar07   0:00 supervising syslog-ng                     
root     15076  0.3  0.1   8244  2844 ?        Ss   Mar07  39:13  \_ /usr/sbin/syslog-ng -f /etc/syslog-ng.conf
root     11038  0.0  0.3  11648  6412 ?        S    00:00   0:02      \_ /usr/bin/perl /usr/local/bin/reporter/admin-reporter.pl
root     11044  0.0  0.2  11324  4888 ?        S    00:00   0:23      \_ /usr/bin/perl /usr/local/bin/reporter/pfilter-reporter.pl
root     11045  0.0  0.3  11808  6400 ?        S    00:00   0:25      \_ /usr/bin/perl /usr/local/bin/reporter/vpn-reporter.pl
root     11046  0.0  0.2  10512  5056 ?        S    00:00   0:07      \_ /usr/bin/perl /usr/local/bin/reporter/mailsec-reporter.pl
root     11047  0.0  0.2  11232  4336 ?        S    00:00   0:01      \_ /usr/bin/perl /usr/local/bin/reporter/ips-reporter.pl
root     11048  0.0  0.1  59416  2500 ?        Sl   00:00   0:22      \_ /usr/local/bin/reporter/websec-reporter.pl
root     11049  0.0  0.0  58144   928 ?        Sl   00:00   0:01      \_ /usr/local/bin/reporter/websec-reporter.pl -e
root     11050  0.0  0.1   9932  3140 ?        S    00:00   0:00      \_ /usr/bin/perl /usr/local/bin/reporter/waf-reporter.pl
snort    15408  2.7  8.5 350176 172092 ?       S<sl Mar07 270:17 /sbin/snort_inline -Q -D -c /etc/snort/snort.conf -R 1 -K none -P 6
root     15575  0.2  2.7 442796 55872 ?        Ssl  Mar07  23:36 /usr/bin/cssd -d
root     21633 31.1  1.8  40636 37132 ?        S    15:20  24:46 /usr/local/sbin/ctmon.plx -d -t /var/sec/chroot-httpd/var/tmp/ctmon
root     21634  3.0  0.1   4996  2548 ?        S    15:20   2:24  \_ /usr/sbin/cttop -b -g DPORT -g CTMARK --reverse-dns --ctmark-gr
root     21670  0.0  0.0   3204   524 ?        Ss   15:20   0:00 /sbin/ntpd
810       5609  4.7 29.7 901112 602128 ?       Ssl  16:21   0:51 /var/chroot-http/usr/bin/httpproxy -f -c /var/chroot-http -u httppr