"find" process User =nobody [?], using up to 90% of CPU = G5Quad [??? !]

This one is for the PPC G5 Quad pros:
Had been working for hours on my Mac Pro (different machine, I know) with my networked G5 Quad supposedly idling in the background.
The only open applications on the G5 Quad are Adobe Photoshop CS4 and Adobe Bridge CS4, the main reason for my keeping the G5 at this point, because of vital plug-ins that are not Intel-compatible and are absolutely irreplaceable and mandatory. (I do have Ps CS5 and CS6 on the Mac Pro. Both aforementioned applications had no open documents. I have not actually used then in about six weeks, so the chance of Bridge building or rebuilding caches id very low.
Alerted by a sudden, very substantial increase of fan and liquid pump activity in my essentially idle G5 Quad, I switched the shared monitors inputs to it and was not surprised by the temperatures, almost all showing no more than 49ºC/121º.
Launched the Activity Monitor, which was showing a Process named "find" owned by a User named "nobody" using up to 90º% of the CPU column.
Terminated said process, only to see it become active again a short time (few minutes) later.
While typing this post, with interruptions, (20 minutes or so) the "nobody" user disappeared, as did the "find" process. some 15 minutes later, the fan and pump activity ended, returning to the G5's normal vigorous hum.
It has been running normally for about 30 minutes now, with very quiet sound levels.
Obviously, I'm mystified because all of this is above my pay grade.
I have a bunch of questions:
1.— Why on Earth is/was there a user named "nobody" working my machine so hard? What or who can it be?
2.— What is a "find" process, especially on a supposedly idle machine?
2.— Any chance my computer has been hacked and overtaken by a "third party"?
3.— Should I be worried? I am.
4.— What steps would you recommend I take at this point?
Thanks in advance to all. I look forward to hearing from old Apple forum friends. 
2.5 GHz Power Mac (PPC) G5-Quad; 16GB RAM; mutant, flashed 550MHz nVidia GeForce 7800GTX 1,700MHz 512MB VRAM; ATTO ExpressPCI UL5D LP SCSI card; Mac OS X Tiger 10.4.11 and Leopard 10.5.8 boot drives; intrusive Spotblight, Dashboard and Time Machine permanently disabled; dual 22"CRT/22"LCD monitors; USB wireless 'N' available but connected to the Internet via wired Ethernet; 2 SCSI scanners (one tabloid-size transparency scanner and a film scanner); various internal & external HDs; FW Epson 2200 and Ethernet Samsung ML-2850ND printers; 2 X Back-UPS RS 1500 XS units.
Intel Xeon Mac_Pro1,1 [late 2006] 2.66 GHz Quad; 16 GB RAM; mutant/flashed, factory-overclocked 875/1225 "Apple PowerColor" ATI Radeon HD 5770 with 1 GB of GDDR5VRAM driving side-by-side dual 22" CRT/24"LCD monitors in Extended-Desktop mode; Mac OS X Lion 10.7.5 and Snow Leopard 10.6.8 boot drives; intrusive Spotlight and frivolous Dashboard permanently disabled; USB wireless 'n' available but connected to the Internet and networked via wired Ethernet.
These two computers share keyboard and mouse through a simple, manually activated USB switchbox.

Gee… I should have done my due diligence frst.
Niel had already answered the very same question here:
https://discussions.apple.com/message/21746515#21746515
My bad.
Thank you, Niel. Please say at least "Hi !" here so I can give you your well deserve points here as I cannot do it in the other thread.

Similar Messages

How to find out User Id Used in Debugging Mode

Hi Gurus
Could you plz advice . how find to out SAP user Id used to delete SAP table entries in Debugging Mode.
Thanks
Ravi

Hi Ravikanth,
I'm not sure how to check the change log in debugging mode,
but you can get the LOG DATA CHANGES from tcode SCU3(If log checkbox selected in Technical settings).
You may check the coding for scu3 for more details.
Happy coding..!!
//Kiran Singh

How to find which users has used external scripting

I want to find out the users who used the scripting for doing any mass changes activity.

Hi Murphy;
Please check which user has which forms open? and Re: how to determine which forms are currently open?
Hope it helps you in your issue
Regard
Helios

Find the user(s) using more CPU in a database

Hi, I am new to the Database Admin work. I need to find the user/Users that are consuming more space in a given database. I have 30 users in the database. Please help me in identifying these users.
Thanks

Space or CPU? For space the following might be what you're looking for:
SQL> select owner, sum(bytes)/(1024*1024) "Total (MB)" from DBA_SEGMENTS group by owner;

How to find out user privilege using JPDK

Hi All,
How can I find out what type of user-privilege that a user has inside the renderBody method of the subclass of the BaseManagedRenderer class? e.g: whether the user has the Administer privilege.
I looked through the ProviderUser object which can be obtained from the pr.getUser() (PortletRenderRequest.getUser()) and it does not seem to provide the method to get the user's privilege.
Any insight is greatly appreciated!
Thanks,
Vince

Vince,
How did you figure out calling the is_user_in_group or other
similar function calls in the WWSEC_API?
I tried making a regular SQL Statement by doing the following.
CallableStatement callablestatement = conn.prepareCall
("begin ? := wwsec_api.is_user_in_group(?,?); end;");
callablestatement.registerOutParameter(1, 12);
callablestatement.setInt(2, 17);
callablestatement.setInt(3, 0);
callablestatement.execute();
boolean s2 = callablestatement.getBoolean(1);
callablestatement.close();
but it fails with the following exception in the JSP...
java.sql.SQLException: ORA-06550: line 1, column 13: PLS-00382:
expression is of wrong type ORA-06550: line 1, column 7: PL/SQL:
Statement ignored
Can you shed some light on the problem?
Thanks,
Niket Parikh

Finding create user statement using the export dump

I have an Oracle export dump and it is a schema level export only.
Is there any way that I can get the create user statement from that dump using import full=y show=y ?
How do I identify the create user statement once I did the show=y

Yes with full export this is possible because full export will create all schemas but this is not possible with schema level export because schema level import does not recreate schema.

How to find which user is using the index?

Hi All,
I have an index named 'CTXT_ITEM_CODE' . The Index _type is Domain. When i try to drop this index its telling ORA-00054: resource busy and acquire with NOWAIT specified error
now i need to find out which session is using this index, so that i can kill it and drop the index.
Thanks

SELECT c.owner,
       c.object_name,
       c.object_type,
       b.SID,
       b.serial#,
       b.status,
       b.osuser,
       b.machine
FROM v$locked_object a, v$session b, dba_objects c
WHERE b.SID = a.session_id AND a.object_id = c.object_id
AND c.object_name='CTXT_ITEM_CODE';
ALTER SYSTEM KILL SESSION '<sid, serial#>'

When I try to use spellcheck, I get the "Cannot find the User dictionary". It has always worked in the past and when I go to choose the main dictionary, it just goes back to the same line, cannot find user dictionary.

When I try to use spellcheck, I get the "Cannot find the User dictionary". It has always worked in the past and when I go to choose the main dictionary, it just goes back to the same line, cannot find user dictionary.

Have you ever created a user dictionary? You have to manually create one, AppleWorks won't do for you. The user dictionary & any other dictionaries belong in the AppleWorks Essentials folder which belongs in the AppleWorks 6 folder in Applications.
Deleting & reinstalling AppleWorks from the original disk will not delete your files unless you have saved them in the application folder. The Mac OS creates a separate Documents folder for your files & that is where the documents you created should be.
Unless all of your documents are AppleWorks 6 word processing documents, Pages alone is not sufficient. The iWork applications - Keynote, Pages & Numbers - can only open AppleWorks 6 presentation, word processing & spreadsheet documents, respectively. They will not open any other type of AppleWorks 6 files or any AppleWorks 5 or any version of ClarisWorks files.

To find the user processes that are connected to a database currently ??

Hi,
I wish to find the user processes that are connected to a database currently.
How to find this ?
any specific table/view for this ??
Thanks.

Hi..
You can use
SELECT NVL(s.username, '(oracle)') AS username,
s.osuser,
s.sid,
s.serial#,
p.spid,
s.status,
s.module,
s.machine,
s.program,
TO_CHAR(s.logon_Time,'DD-MON-YYYY HH24:MI:SS') AS logon_time
FROM v$session s,
v$process p
WHERE s.paddr = p.addr
ORDER BY s.username, s.osuser;
HTH
Anand

How to find the users of teamviewer using oracle database?

Friends,
DB: 9iR2
OS: RHEL AS 3
Client pc: win xp
We have 3 branches. One of our user accessed our application from the other branch using teamviewer.
is it possible to find the user from the database side?
i mean from the v$session or from any other table.
thanks

Hello,
you can use folloiwng script to see the OS user, database user and the programme they are using to connect to database.
SET TRIMSPOOL ON TRIMOUT ON ECHO OFF VERIFY OFF HEAD OFF FEEDBACK ON LIN 150 PAGES 10000
set linesize 150
CLEAR BREAKS COMPUTES
COL type_grp NOPRINT
COL logon_time NOPRINT
COL logontime FOR A14
COL osuser FOR A21
COL username FOR A28
COL lastcall FOR A14
COL program FOR A50
--COL program FOR A&plen
BREAK ON type_grp SKIP 1
--PROMPT
PROMPT **************************************************************** SESSIONS INFORMATION ****************************************************************
PROMPT
PROMPT |------- O/S -------|--------- ORACLE ----------| Logon | Last Call | |
PROMPT |Username | Pid |Username | Pid | 'SID,Ser#'| DateTime | DateTime | TYPE | PROGRAM
PROMPT |_________|_________|_________|_____|___________|______________|______________|__________|____________________________________________________________
SELECT ' '||rpad(nvl(osuser,p.username), 9) ||lpad(nvl(s.process,p.spid), 10) osuser,
rpad(nvl(s.username,' '),9) ||lpad(decode(s.sid,'','',p.spid), 6) ||lpad(decode(s.sid,'','',''''||s.sid||','||s.serial#||''''),12) username,
to_char(logon_time,'mm/dd hh24:mi:ss') logontime,
to_char(sysdate - (s.LAST_CALL_ET / 86400),'mm/dd hh24:mi:ss') lastcall,
s.type,
nvl(s.program, p.program) program,
s.type type_grp,
logon_time
FROM v$session s, v$process p
WHERE spid is not null
AND s.paddr (+) = p.addr and s.username not in('SYS','SYSTEM','SYSMAN','DBSNMP')
ORDER BY s.type, logon_time, s.sid;
set head on;
Regards,
Anil Malkai

How to find out the Transactions used per month & the USER who used that

Hi,
1)How to find out the Transactions used per month & the USER who used that?
2)and can i get the above same for minimum 20 month?
System : SAP- Enterprise Core Component.

You can use my program...
*& Report Z_ABAP_TCODE_MONITOR
*****& Program Type          : Report                                 *
*****& Title                 : Z_ABAP_TCODE_MONITOR                   *
*****& Transaction code      : ZTCODE_USAGE                           *
*****& Developer name        : Shailendra Kolakaluri                  *
*****& Deveopment start date : 26 th Dec 2011                         *
*****& Development Package   : ZDEV                                   *
*****& Transport No          : DEVK906086                                       *
*****& Program Description   : This program is to display
*List all tcodes executed during previous day.
*& Show the number of users executing tcodes
*& Modification history
REPORT Z_ABAP_TCODE_MONITOR.
*& List all tcodes executed during previous day.
*& Show the number of users executing tcodes
TYPE-POOLS : slis.
DATA: ind TYPE i,
      fcat TYPE slis_t_fieldcat_alv WITH HEADER LINE,
      layout TYPE slis_layout_alv,
      variant TYPE disvariant,
      events TYPE slis_t_event WITH HEADER LINE,
      heading TYPE slis_t_listheader WITH HEADER LINE.
*REPORT z_report_usage.
TYPES: BEGIN OF zusertcode,
date   TYPE swncdatum,
user   TYPE swncuname,
mandt     TYPE swncmandt,
tcode     TYPE swnctcode,
report TYPE swncreportname,
count     TYPE swncshcnt,
END OF zusertcode.
*data   : date type n.
DATA: t_usertcode TYPE swnc_t_aggusertcode,
      wa_usertcode TYPE swncaggusertcode,
      wa           TYPE zusertcode,
      t_ut         TYPE STANDARD TABLE OF zusertcode,
      wa_result    TYPE zusertcode,
      t_result     TYPE STANDARD TABLE OF zusertcode.
PARAMETER: month TYPE dats DEFAULT sy-datum.
*PARAMETER: date TYPE dats.
*select-options : username for wa_usertcode-account.
START-OF-SELECTION.
PERFORM get_data.
PERFORM get_fieldcatalog.
PERFORM set_layout.
PERFORM get_event.
PERFORM get_comment.
PERFORM display_data.
FORM get_data .
*date = sy-datum - 2 .
After start-of-selection add this line (parameter Month required 01 as day).
concatenate month+0(6) '01' into month.
CALL FUNCTION 'SWNC_COLLECTOR_GET_AGGREGATES'
    EXPORTING
      component     = 'TOTAL'
      ASSIGNDSYS    = 'DEV'
      periodtype    = 'M'
      periodstrt    = month
    TABLES
      usertcode     = t_usertcode
    EXCEPTIONS
      no_data_found = 1
      OTHERS        = 2.
wa-date = month.
*wa-date = date.
wa-mandt = sy-mandt.
wa_usertcode-account = username.
LOOP AT t_usertcode INTO wa_usertcode.
    wa-user = wa_usertcode-account.
    IF wa_usertcode-entry_id+72 = 'T'.
      wa-tcode = wa_usertcode-entry_id.
      wa-report = space.
    ELSE.
      wa-tcode = space.
      wa-report = wa_usertcode-entry_id.
    ENDIF.
    COLLECT wa INTO t_ut.
ENDLOOP.
SORT t_ut BY report ASCENDING.
CLEAR: wa, wa_result.
endform.
FORM get_fieldcatalog .
fcat-tabname     = 't_ut'.
fcat-fieldname   = 'DATE'.
fcat-seltext_l   = 'Date'.
fcat-key         = 'X'.
APPEND fcat.
CLEAR fcat.
fcat-tabname     = 't_ut'.
fcat-fieldname   = 'MANDT'.
fcat-seltext_l   = 'Client'.
fcat-key         = 'X'.
APPEND fcat.
CLEAR fcat.
fcat-tabname     = 't_ut'.
fcat-fieldname   = 'USER'.
fcat-seltext_l   = 'User Name'.
fcat-key         = 'X'.
APPEND fcat.
CLEAR fcat.
fcat-tabname     = 't_ut'.
fcat-fieldname   = 'TCODE'.
fcat-seltext_l   = 'Transaction Code'.
fcat-key         = 'X'.
APPEND fcat.
ENDFORM.
*&      Form SET_LAYOUT
      text
--> p1        text
<-- p2        text
FORM set_layout .
layout-colwidth_optimize = 'X'.
ENDFORM.                    " SET_LAYOUT
*&      Form GET_EVENT
      text
--> p1        text
<-- p2        text
*FORM get_event .
events-name = slis_ev_top_of_page.
events-form = 'TOP_OF_PAGE'.
APPEND events.
*ENDFORM.                    " GET_EVENT
**&      Form GET_COMMENT
      text
--> p1        text
<-- p2        text
*FORM get_comment .
DATA: text(30).
text = 'Billing Report'.
heading-typ = 'H'.
heading-info = text.
APPEND heading.
*ENDFORM.                    " GET_COMMENT
**&      Form top_of_page
      text
--> p1        text
<-- p2        text
*FORM top_of_page .
CALL FUNCTION 'REUSE_ALV_COMMENTARY_WRITE'
   EXPORTING
     it_list_commentary       = heading[]
I_LOGO                   =
I_END_OF_LIST_GRID       =
*ENDFORM.                    " top_of_page
*&      Form DISPLAY_DATA
      text
--> p1        text
<-- p2        text
FORM display_data .
sort t_ut[].
DELETE ADJACENT DUPLICATES FROM t_ut[] COMPARING ALL FIELDS.
CALL FUNCTION 'REUSE_ALV_GRID_DISPLAY'
    EXPORTING
      i_callback_program = sy-cprog
      is_layout          = layout
      it_fieldcat        = fcat[]
      i_save             = 'A'
      is_variant         = variant
      it_events          = events[]
    TABLES
      t_outtab           = t_ut
    EXCEPTIONS
      program_error      = 1
      OTHERS             = 2.
IF sy-subrc <> 0.
    MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
            WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
ENDIF.
ENDFORM.                    " DISPLAY_DATA

How to find process chain using background job in sm37

How to find process chain using background job in sm37

Better is to select the job.
Select (Define) Step (s) or F6.
Select the line and Menu Goto>Variant.
The variant contains the name of the CHAIN and its VARIANT.
Success
We faced an old job and via job monitoring we were informed about a cancelled job every 'interval'.
We noticed that the related chain was deleted but still the job was scheduled each interval again and was cancelled because an event was missing
We could not find the scheduled job via SM37.
Via view V_OP, view over tbtco abd tbtcp, we find the related entry.
We delete these entries via function BP_JOB_DELETE....
Edited by: Jack Otten on Jul 9, 2010 2:50 PM

I am a new Mac user. How do I easily move files to new locations and folders in Finder, like I was used to doing with Windows Explorer?

I am a new Mac user, converting from the Windows world. How do I easily transfer files from one folder location to another in Finder, like I was used to doing in Windows Explorer?

You can expand Finder into multi-panes, I am not at my Mac right now to get the exact key strokes so don't want to mislead you. Do so many things on auto-pilot that when someone asks I need the machine so I can get the exact things to click on.
But you can get the multi-pane view and drag and drop from pane to pane.

How can I find out the screen size of the users moniter using the Acrobat SDK?

How can I find out the screen size of the users moniter using the Acrobat SDK? I need to know how much sreen real estate that is available on the users moniter. Is there some call that I can make from the SDK to discover the maximun X and Y coordinates?
Thanks,
Gregory

Currently, I am testing on multiple moniters and it is defaulting to the moniter designated as the #1 moniter. For our purposes, this is acceptable. Once the two documents have loaded, the user can move and re-size at will.
Gregory

How to find out the 'z' user exit used in a Particular Transaction

Hi,
I have requirement to analyse all the user exits used in a transaction say 'VA01' . How can i find the user exits in a VA01 transaction. Can anyone suggest how to find the User exits
Thanks in Anticipation.
With Best Regards
mamatha

you can execute the following program , give the transaction name and execute
*& Report YCHATEST                                                    *
REPORT z_find_userexit NO STANDARD PAGE HEADING.
*& Enter the transaction code that you want to search through in order
*& to find which Standard SAP User Exits exists.
*& Tables
TABLES : tstc,     "SAP Transaction Codes
         tadir,    "Directory of Repository Objects
         modsapt, "SAP Enhancements - Short Texts
         modact,   "Modifications
         trdir,    "System table TRDIR
         tfdir,    "Function Module
         enlfdir, "Additional Attributes for Function Modules
         tstct.    "Transaction Code Texts
*& Variables
DATA : jtab LIKE tadir OCCURS 0 WITH HEADER LINE.
DATA : field1(30).
DATA : v_devclass LIKE tadir-devclass.
*& Selection Screen Parameters
SELECTION-SCREEN BEGIN OF BLOCK a01 WITH FRAME TITLE text-001.
SELECTION-SCREEN SKIP.
PARAMETERS : p_tcode LIKE tstc-tcode OBLIGATORY.
SELECTION-SCREEN SKIP.
SELECTION-SCREEN END OF BLOCK a01.
*& Start of main program
START-OF-SELECTION.
* Validate Transaction Code
SELECT SINGLE * FROM tstc
    WHERE tcode EQ p_tcode.
* Find Repository Objects for transaction code
IF sy-subrc EQ 0.
    SELECT SINGLE * FROM tadir
       WHERE pgmid    = 'R3TR'
         AND object   = 'PROG'
         AND obj_name = tstc-pgmna.
    MOVE : tadir-devclass TO v_devclass.
    IF sy-subrc NE 0.
      SELECT SINGLE * FROM trdir
         WHERE name = tstc-pgmna.
      IF trdir-subc EQ 'F'.
        SELECT SINGLE * FROM tfdir
          WHERE pname = tstc-pgmna.
        SELECT SINGLE * FROM enlfdir
          WHERE funcname = tfdir-funcname.
        SELECT SINGLE * FROM tadir
          WHERE pgmid    = 'R3TR'
            AND object   = 'FUGR'
            AND obj_name = enlfdir-area.
        MOVE : tadir-devclass TO v_devclass.
      ENDIF.
    ENDIF.
* Find SAP Modifactions
    SELECT * FROM tadir
      INTO TABLE jtab
      WHERE pgmid    = 'R3TR'
        AND object   = 'SMOD'
        AND devclass = v_devclass.
    SELECT SINGLE * FROM tstct
      WHERE sprsl EQ sy-langu
        AND tcode EQ p_tcode.
    FORMAT COLOR COL_POSITIVE INTENSIFIED OFF.
    WRITE:/(19) 'Transaction Code - ',
    20(20) p_tcode,
    45(50) tstct-ttext.
    SKIP.
    IF NOT jtab[] IS INITIAL.
      WRITE:/(95) sy-uline.
      FORMAT COLOR COL_HEADING INTENSIFIED ON.
      WRITE:/1 sy-vline,
      2 'Exit Name',
      21 sy-vline ,
      22 'Description',
      95 sy-vline.
      WRITE:/(95) sy-uline.
      LOOP AT jtab.
        SELECT SINGLE * FROM modsapt
        WHERE sprsl = sy-langu AND
        name = jtab-obj_name.
        FORMAT COLOR COL_NORMAL INTENSIFIED OFF.
        WRITE:/1 sy-vline,
        2 jtab-obj_name HOTSPOT ON,
        21 sy-vline ,
        22 modsapt-modtext,
        95 sy-vline.
      ENDLOOP.
      WRITE:/(95) sy-uline.
      DESCRIBE TABLE jtab.
      SKIP.
      FORMAT COLOR COL_TOTAL INTENSIFIED ON.
      WRITE:/ 'No of Exits:' , sy-tfill.
    ELSE.
      FORMAT COLOR COL_NEGATIVE INTENSIFIED ON.
      WRITE:/(95) 'No User Exit exists'.
    ENDIF.
ELSE.
    FORMAT COLOR COL_NEGATIVE INTENSIFIED ON.
    WRITE:/(95) 'Transaction Code Does Not Exist'.
ENDIF.
* Take the user to SMOD for the Exit that was selected.
AT LINE-SELECTION.
GET CURSOR FIELD field1.
CHECK field1(4) EQ 'JTAB'.
SET PARAMETER ID 'MON' FIELD sy-lisel+1(10).
CALL TRANSACTION 'SMOD' AND SKIP FIRST SCREEN.

"find" process User =nobody [?], using up to 90% of CPU = G5Quad [??? !]

Similar Messages

Maybe you are looking for