Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I am seeing processes on Linux with the name "[123.45.78.901-ma]", where the number is the IP address of our NFS server. Does anyone know what these processes are, where I can find out information about them, or a good keyword to search the web with?

Background:

I see the processes on a machine where something funky is going on with NFS - something seems to be stuck in a loop making a huge number of NFS requests (read, renew, and authrefrsh), but all obvious candidates (like user programs) that might be doing so have been killed.

A large number of [123.45.78.901-ma] processes exist (for brief periods of time) on the machine in question, but not (at least not for long enough that I have detected them) on machines that are acting normally.

So it would appear that these processes are involved somehow in the problem, but I don't know how.

I found them while looking for processes in "uninterruptible sleep", via

while [ 1 ] ; do ps -w -w -e -o pid,state,tname,time,args| grep ' D ' | grep -v grep; sleep 0.1; done

Details about the system:

  • Red Hat Enterprise Linux Workstation release 6.3 (Santiago)

  • Linux [...] 2.6.32-279.5.1.el6.x86_64 #1 SMP Tue Jul 24 13:57:35 EDT 2012 x86_64 x86_64 x86_64 GNU/Linux

Thanks in advance!

share|improve this question
add comment

1 Answer

On Linux, ps reports kernel threads in square brackets. These are not "processes" in the normal sense of that word. That is, there is not an executable loaded from disk to start them, they aren't owned by a normal user, etc. They're just one of the many things the kernel has going on in the background.

For that reason, the name shown by ps doesn't have to correspond to any file on your hard disk. (In the case of zombie processes, though, it does.)

share|improve this answer
    
Warren: Thanks, yes. Do you know how I could find specific details about these ones though? The name isn't easy to Google... –  N F Feb 3 '13 at 20:29
1  
Because they're kernel threads and not processes, there's not exactly a man page to peruse to figure this out. You'd have to know how the Linux NFS implementation works internally. Personally, I wouldn't be chasing a problem like that through the process table. I'd be using Wireshark instead. –  Warren Young Feb 3 '13 at 20:32
1  
Indeed, unfortunately I am just a normal user on this system so I can't really use Wireshark and I'm trying to make as much progress as I can this way. –  N F Feb 3 '13 at 20:45
    
If you're not the system's administrator, you're not in any position to do anything about NFS problems anyway. –  Warren Young Feb 3 '13 at 21:01
    
Well, I can write them obnoxious emails :) –  N F Feb 3 '13 at 21:09
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.