操作系统相关进程
[db2inst@db2host SQL00001]$ ps -ef |grep db2
root 3992 1 0 15:30 ? 00:00:00 db2wdog 0
db2inst 3994 3992 0 15:30 ? 00:00:10 db2sysc 0
root 3995 3994 0 15:30 ? 00:00:00 db2ckpwd 0
root 3996 3994 0 15:30 ? 00:00:00 db2ckpwd 0
root 3999 3994 0 15:30 ? 00:00:00 db2ckpwd 0
root 4846 1 0 Dec30 ? 00:00:39 /opt/ibm/db2/V9.7/bin/db2fmcd
dasusr 5790 1 0 Dec30 ? 00:00:01 /home/dasusr/das/adm/db2dasrrm
dasusr 5813 1 0 Dec30 ? 00:00:00 /opt/ibm/db2/V9.7/das/bin/db2fmd -i dasusr -m /opt/ibm/db2/V9.7/das/lib/libdb2dasgcf.so.1
db2inst 23403 1 0 20:09 pts/3 00:00:00 /home/db2inst/sqllib/bin/db2bp 31090A601 5 A
[db2inst@db2host SQL00001]$
Db2wdog 进程 watch dog
Db2wdog是所有其他db2进程的父进程
Db2chpwd进程
Db2 connect to xxx user yyy using zzz
Db2chpwd进程将用户名xxx与/etc/passwd文件进行对比,检查用户和密码合法性
Db2sysc进程
监控多线程
Db2pd 监视线程并与ps输出映射
[db2inst@db2host ~]$ ps -fu db2inst
UID PID PPID C STIME TTY TIME CMD
db2inst 4186 29624 0 15:31 pts/2 00:00:00 /bin/sh /home/db2inst/sqllib/bin/db2cc
db2inst 4187 4186 0 15:31 pts/2 00:00:00 db2javit -j:CC -i: -l: -o:-Xmx128m -Xms8m -a:
db2inst 4188 4187 0 15:31 pts/2 00:00:20 /home/db2inst/sqllib/java/jdk64/jre/bin/java -Xmx128m -Xms8m -Ddb2path=/home/db2inst
db2inst 4748 1 0 Dec30 ? 00:00:00 /opt/ibm/db2/V9.7/itma/lx8266/ud/bin/kuddb2 db2host_db2inst
db2inst 26388 26387 0 20:53 pts/3 00:00:00 -bash
db2inst 26549 26547 0 20:54 pts/3 00:00:00 db2sysc 0
db2inst 26566 26547 0 20:54 pts/3 00:00:00 db2acd 0 ,0,0,0,1,0,0,0,1,0,8a65b0,14,1e014,2,0,1,11fc0,0x210000000,0x210000000,1600
db2inst 27546 26388 0 21:08 pts/3 00:00:00 ps -fu db2inst
db2inst 28172 28171 0 14:35 pts/1 00:00:00 -bash
db2inst 28388 28172 0 14:37 pts/1 00:00:00 tail -f db2diag.log
db2inst 29624 29623 0 14:52 pts/2 00:00:00 -bash
[db2inst@db2host ~]$ ps -lLfp 26549
F S UID PID PPID LWP C NLWP PRI NI ADDR SZ WCHAN STIME TTY TIME CMD
4 S db2inst 26549 26547 26549 0 8 85 0 - 218544 184466 20:54 pts/3 00:00:00 db2sysc 0
1 S db2inst 26549 26547 26553 0 8 78 0 - 218544 msgrcv 20:54 pts/3 00:00:00 db2sysc 0
1 S db2inst 26549 26547 26554 0 8 78 0 - 218544 - 20:54 pts/3 00:00:00 db2sysc 0
1 S db2inst 26549 26547 26555 0 8 78 0 - 218544 semtim 20:54 pts/3 00:00:00 db2sysc 0
1 S db2inst 26549 26547 26556 0 8 85 0 - 218544 - 20:54 pts/3 00:00:00 db2sysc 0
1 S db2inst 26549 26547 26557 0 8 78 0 - 218544 msgrcv 20:54 pts/3 00:00:00 db2sysc 0
1 S db2inst 26549 26547 26564 0 8 78 0 - 218544 - 20:54 pts/3 00:00:00 db2sysc 0
1 S db2inst 26549 26547 26908 0 8 76 0 - 218544 - 20:59 pts/3 00:00:00 db2sysc 0
db2ps -db sshdb2 -applications
然后可以根据cpu占用情况,选择可疑的EDU ID和相关联的应用程序的句柄
然后分析应用的活动
db2 get snapshot for application agentid
来自 “ ITPUB博客 ” ,链接:http://blog.itpub.net/25037908/viewspace-683093/,如需转载,请注明出处,否则将追究法律责任。
转载于:http://blog.itpub.net/25037908/viewspace-683093/