How to investigate mysterious processes

[Dave Burns]

> On Wed, Feb 20, 2008 at 10:47 PM, Tomasz Torcz <tomek at crocom.com.pl> wrote:
> > Dnia 20-02-2008, śro o godzinie 10:40 -1000, Dave Burns pisze:
> > > When I do ps -ef, I see a mysterious process:
> > >
> > > ps -ef|grep scsi_eh_5
> > > root     31004    11  0 09:29 ?        00:00:00 [scsi_eh_5]
> > >
> > > How do I figure out what is really running, what rpm its from, etc.?
> > > What do the brackets [...] indicate?
> >
> >  "ps" prints brackets when process arguments are not available to read.

What gets put inside the brackets?

> > This is typical for kernel threads.

So [] always means kernel thread, or sometimes? Usually? Kernel thread
until proven innocent?

> >scsi_eh_5 is a kernel thread, a SCSI
> > Error Handler. It is spawned for each SCSI host in computer (there
> > should be EH thread for each /sys/class/scsi_host/* )

How did you figure this out? What documentation could I consult to
find this answer myself?

The actual answer to the question is less important to me than
learning how to find the answer.
Thanks,
Dave

> >
> >
> > --
> > Tomasz Torcz
> >
> > --
> > fedora-list mailing list
> > fedora-list at redhat.com
> > To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
> >
>
>