SYSTEM MONITORING:
who, whoami,w,watch w --> who is connected
ps -ef -->all process state ;pstree (PPID=father)
|grep user01 -->see user
|grep Feb >out.txt 2>err.txt
|tee log|grep Feb
--> writes in log the ps proceses than find Feb
-a --> append
|grep Feb|grep -v grep
-->dont write last proces grep
-aux -->processes running
-u user_name --> jobs for the user
pstree --> active services in tree format
hostid, sync --> syncronize drive with buffers
kill 619 ;
-9 619 636 --> strong end of process
--> kills only childs
%1 --> to end a backround job
-15 --> kids first than parants
-2 --> refresh
skill, fuser -v -m /usr
jobs --> list of jobs :%3 ->to make a job run
bg -->run the backgroung jobs
.login .cshrc -->login file for every user
fg -->foreground
basepriority=20 -->who gets the cpu
nice +10 prog9 -->means gets 30 (everybody first)
-15 -->goes first
uptime -->since when comp working
last --> display user logon history
top, gtop --> see procesess
tload --> ~general use
lastlog --> who loged to the system and when
uname -m,-s,-a --> computer architecture
tset -r --> shows options at the terminal
lsof --> shows the open files
procinfo --> comp condition
/proc/cpuinfo
stat faile.txt --> file detailes, change time and more..
vmstat --> displays the virtual memory
xsysinfo --> karnel info (setup)
xosview --> system info (need setup)
df -h --> disk utalization
-kl --> hdd condition
du -h dir_name -->size of dir + files inside
-sk -->size of dir in blocks
-sh * -->in kilo & mega bites
find / -nouser -o -nogroup
--> files without known users indicate
unothorized access.
-type f -perm -2
--> files with other write permition
+6000 2> /dev/null > ~/stickyfiles
-2 > /root/world.writable.files
tmpwatch -v 1 /tmp
--> rmoves files in/tmp not
been accessed in last hour.
--test 168 /tmp
-->not deleted (test flag)in last in 7 days
chattr +i file1 --> file1 cannot b deleted
-i
+a file1 --> allow data 2
only b append 2 file1 like:
echo "footbar"" >> file1
lsattr file1 --> these files attributes
|