_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24692    14908    ?    Ss    Jan08    0:02    23:45:35    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-netns]    <noArgs>
root    9    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:35    [kworker/0:0-mm_percpu_wq]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:35    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:45:35    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:35    [kworker/u18:3-flush-254:0]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:35    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:35    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:35    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:45:35    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:35    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:35    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [irq/9-acpi]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-tpm_dev_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-edac-poller]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I    Jan08    0:05    23:45:35    [kworker/1:1-events]    <noArgs>
root    72    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/2:1H-kblockd]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/0:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:34    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/u25:0]    <noArgs>
root    174    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/3:1H-kblockd]    <noArgs>
root    207    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/1:1H-kblockd]    <noArgs>
root    248    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-ata_sff]    <noArgs>
root    259    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [scsi_eh_0]    <noArgs>
root    260    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [scsi_eh_1]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    269    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:33    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:45:32    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [hwrng]    <noArgs>
root    383    0.0    0.2    41984    20636    ?    Ss    Jan08    0:00    23:45:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:45:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    417    0.0    0.1    37452    12116    ?    Ss    Jan08    0:00    23:45:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:31    [psimon]    <noArgs>
root    556    0.0    0.0    8388    5168    ?    Ss    Jan08    0:01    23:45:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:45:30    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10532    2500    ?    S    Jan08    0:00    23:45:30    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2068    ?    S    Jan08    0:00    23:45:30    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2132    ?    S    Jan08    0:00    23:45:30    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-cfg80211]    <noArgs>
dhcpcd    628    0.0    0.0    10532    2208    ?    S    Jan08    0:00    23:45:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.201
dhcpcd    629    0.0    0.0    10532    2336    ?    S    Jan08    0:00    23:45:28    dhcpcd:    [DHCP6_proxy]_fe80::48d1:d6d2:4d7d:258f
dhcpcd    648    0.0    0.0    10532    2336    ?    S    Jan08    0:00    23:45:23    dhcpcd:    [BOOTP_proxy]_10.0.254.201
root    741    0.0    0.0    309036    7184    ?    Ssl    Jan08    0:00    23:45:23    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2700    ?    Ss    Jan08    0:00    23:45:23    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9212    5460    ?    Ss    Jan08    0:00    23:45:23    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    747    0.0    0.1    382300    9752    ?    Ssl    Jan08    0:01    23:45:23    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    4032    ?    Ssl    Jan08    0:00    23:45:23    /usr/sbin/qemu-ga    <noArgs>
root    751    0.0    0.1    18344    8824    ?    Ss    Jan08    0:00    23:45:23    /usr/lib/systemd/systemd-logind    <noArgs>
root    784    0.0    0.2    336448    19052    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/NetworkManager    --no-daemon
root    812    0.0    0.1    325524    12376    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/ModemManager    <noArgs>
root    821    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:22    [kworker/3:2H-kblockd]    <noArgs>
root    839    0.0    0.0    381356    7836    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/lightdm    <noArgs>
root    845    0.0    0.0    16356    2324    ?    S    Jan08    0:00    23:45:22    /usr/sbin/xrdp-sesman    <noArgs>
root    856    0.0    0.2    1904820    20220    ?    Ssl    Jan08    0:19    23:45:22    /laforge.bin    <noArgs>
xrdp    872    0.0    0.0    15652    2440    ?    S    Jan08    0:00    23:45:22    /usr/sbin/xrdp    <noArgs>
root    883    0.0    1.3    915128    107560    tty7    Ssl+    Jan08    0:02    23:45:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    884    0.0    0.0    8124    2720    tty1    Ss+    Jan08    0:00    23:45:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    905    0.0    0.0    169620    8104    ?    Sl    Jan08    0:00    23:45:21    lightdm    --session-child_17_20
root    911    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:21    [psimon]    <noArgs>
lightdm    914    0.0    0.1    22824    13208    ?    Ss    Jan08    0:00    23:45:21    /usr/lib/systemd/systemd    --user
lightdm    916    0.0    0.0    22712    3840    ?    S    Jan08    0:00    23:45:21    (sd-pam)    <noArgs>
lightdm    939    0.0    0.0    8348    4660    ?    Ss    Jan08    0:00    23:45:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    940    0.0    0.1    101224    10632    ?    S<sl    Jan08    0:00    23:45:21    /usr/bin/pipewire    <noArgs>
lightdm    941    0.0    1.2    666648    105504    ?    Ssl    Jan08    0:16    23:45:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    945    0.0    0.1    479276    16108    ?    S<sl    Jan08    0:00    23:45:21    /usr/bin/wireplumber    <noArgs>
rtkit    946    0.0    0.0    21492    3152    ?    SNsl    Jan08    0:00    23:45:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    947    0.0    0.0    84704    5188    ?    Ssl    Jan08    0:00    23:45:21    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    948    0.0    0.1    98776    8264    ?    S<sl    Jan08    0:00    23:45:21    /usr/bin/pipewire-pulse    <noArgs>
lightdm    973    0.0    0.0    381080    7308    ?    Ssl    Jan08    0:00    23:45:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    981    0.0    0.0    8208    4476    ?    S    Jan08    0:00    23:45:21    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    988    0.0    0.0    312816    7944    ?    Ssl    Jan08    0:00    23:45:21    /usr/libexec/gvfsd    <noArgs>
lightdm    999    0.0    0.0    398408    7444    ?    Sl    Jan08    0:00    23:45:21    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1033    0.0    0.0    14372    5744    ?    S    Jan08    0:00    23:45:20    lightdm    --session-child_13_20
lightdm    1035    0.0    0.0    168772    7076    ?    Sl    Jan08    0:00    23:45:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1069    0.2    1.8    375728    146924    ?    Sl    Jan08    3:41    23:45:19    splunkd    -p_8089_start
root    1072    0.0    0.2    135648    18016    ?    Ss    Jan08    0:04    23:45:19    [splunkd    pid=1069]_splunkd_-p_8089_start_[process-runner]
root    1959    0.0    0.0    2688    1736    ?    S    Jan08    0:00    23:44:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1960    0.1    10.2    1414160    833916    ?    Sl    Jan08    2:00    23:44:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    122312    0.0    0.0    0    0    ?    I    Jan08    0:00    11:07:59    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    128739    0.0    0.0    0    0    ?    I    Jan08    0:00    10:28:52    [kworker/u20:0-flush-254:0]    <noArgs>
root    137590    0.0    0.0    0    0    ?    I    00:16    0:00    09:30:44    [kworker/u19:1-flush-254:0]    <noArgs>
root    142001    0.0    0.0    0    0    ?    I    00:43    0:00    09:04:09    [kworker/u17:2-flush-254:0]    <noArgs>
root    147752    0.0    0.0    0    0    ?    I    01:17    0:01    08:29:37    [kworker/3:2-events]    <noArgs>
root    167004    0.0    0.0    0    0    ?    I    03:18    0:00    06:28:55    [kworker/u17:1]    <noArgs>
root    167157    0.0    0.0    0    0    ?    I    03:19    0:00    06:27:17    [kworker/u19:0-writeback]    <noArgs>
root    171406    0.0    0.0    0    0    ?    I    03:47    0:00    05:59:55    [kworker/u19:2-events_unbound]    <noArgs>
root    188460    0.0    0.0    0    0    ?    I    05:33    0:00    04:14:01    [kworker/u20:1-flush-254:0]    <noArgs>
root    203554    0.0    0.0    0    0    ?    I    07:07    0:00    02:39:25    [kworker/u18:1-flush-254:0]    <noArgs>
root    217179    0.0    0.0    0    0    ?    I    08:33    0:00    01:13:54    [kworker/u20:2-flush-254:0]    <noArgs>
root    227405    0.0    0.0    0    0    ?    I    09:38    0:00    09:04    [kworker/1:2-ata_sff]    <noArgs>
root    227481    0.0    0.0    0    0    ?    I    09:38    0:00    08:16    [kworker/2:1-ata_sff]    <noArgs>
root    227649    0.0    0.0    0    0    ?    I    09:40    0:00    06:55    [kworker/3:1-ata_sff]    <noArgs>
root    227710    0.0    0.0    0    0    ?    I    09:40    0:00    06:19    [kworker/0:2-ata_sff]    <noArgs>
root    228153    0.0    0.0    0    0    ?    I    09:43    0:00    03:48    [kworker/1:0-ata_sff]    <noArgs>
root    228214    0.0    0.0    0    0    ?    I    09:44    0:00    03:04    [kworker/2:0-ata_sff]    <noArgs>
root    228354    0.0    0.0    0    0    ?    I    09:45    0:00    01:35    [kworker/3:0-ata_sff]    <noArgs>
root    228415    0.0    0.0    0    0    ?    I    09:46    0:00    00:55    [kworker/0:1-ata_sff]    <noArgs>
root    228621    0.0    0.0    2688    1748    ?    S    09:47    0:00    00:10    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    228622    0.0    0.0    2688    1852    ?    S    09:47    0:00    00:10    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    228643    0.0    0.0    5624    2196    ?    S    09:47    0:00    00:10    iostat    -xky_60_1
root    228644    0.0    0.0    5592    1912    ?    S    09:47    0:00    00:10    tee    /dev/null
root    228645    0.0    0.0    9472    3932    ?    S    09:47    0:00    00:10    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
root    228770    0.0    0.0    2688    1800    ?    S    09:47    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    228771    0.0    0.0    2688    1764    ?    S    09:47    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    228792    0.0    0.0    9372    4196    ?    R    09:47    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    228793    0.0    0.0    5592    1864    ?    S    09:47    0:00    00:00    tee    /dev/null
root    228794    0.0    0.0    9472    4044    ?    S    09:47    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24680    14884    ?    Ss    Jan08    0:02    23:45:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:45:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [ksoftirqd/3]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:33    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:33    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:33    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:45:33    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:33    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:33    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:05    23:45:33    [kworker/1:1-mm_percpu_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-edac-poller]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/1:1H-kblockd]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/u25:0]    <noArgs>
root    132    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:32    [kworker/u19:3-flush-254:0]    <noArgs>
root    175    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/2:1H-kblockd]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/3:1H-kblockd]    <noArgs>
root    219    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/0:1H-kblockd]    <noArgs>
root    237    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-ata_sff]    <noArgs>
root    247    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:31    [scsi_eh_0]    <noArgs>
root    249    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    251    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:31    [scsi_eh_1]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    269    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:31    [kworker/2:2-events]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:45:30    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [hwrng]    <noArgs>
root    383    0.0    0.3    50352    24640    ?    Ss    Jan08    0:00    23:45:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7476    ?    Ssl    Jan08    0:00    23:45:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12096    ?    Ss    Jan08    0:00    23:45:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:29    [psimon]    <noArgs>
root    562    0.0    0.0    8388    7712    ?    Ss    Jan08    0:01    23:45:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:45:28    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10536    2504    ?    S    Jan08    0:00    23:45:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:45:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:45:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:28    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:28    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    628    0.0    0.0    10536    2248    ?    S    Jan08    0:00    23:45:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.202
dhcpcd    629    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:45:26    dhcpcd:    [DHCP6_proxy]_fe80::d870:a9e1:678:d338
dhcpcd    648    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:45:22    dhcpcd:    [BOOTP_proxy]_10.0.254.202
root    741    0.0    0.0    309036    6988    ?    Ssl    Jan08    0:00    23:45:22    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2644    ?    Ss    Jan08    0:00    23:45:22    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    10068    6476    ?    Ss    Jan08    0:00    23:45:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382480    9908    ?    Ssl    Jan08    0:01    23:45:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    3880    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/qemu-ga    <noArgs>
root    751    0.0    0.1    18480    9156    ?    Ss    Jan08    0:00    23:45:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    787    0.0    0.2    336476    18792    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    391060    12368    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/ModemManager    <noArgs>
root    830    0.0    0.0    381356    7768    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/lightdm    <noArgs>
root    842    0.0    0.0    18320    4264    ?    S    Jan08    0:00    23:45:22    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    860    0.0    0.0    15652    2564    ?    S    Jan08    0:00    23:45:22    /usr/sbin/xrdp    <noArgs>
root    863    0.0    0.2    1978552    20784    ?    Ssl    Jan08    0:19    23:45:22    /laforge.bin    <noArgs>
root    869    0.0    1.2    915132    104272    tty7    Ssl+    Jan08    0:02    23:45:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    875    0.0    0.0    8124    2600    tty1    Ss+    Jan08    0:00    23:45:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    902    0.0    0.0    169620    8132    ?    Sl    Jan08    0:00    23:45:21    lightdm    --session-child_17_20
lightdm    908    0.0    0.1    22452    12988    ?    Ss    Jan08    0:00    23:45:21    /usr/lib/systemd/systemd    --user
root    909    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:21    [psimon]    <noArgs>
lightdm    912    0.0    0.0    22712    3852    ?    S    Jan08    0:00    23:45:21    (sd-pam)    <noArgs>
root    930    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:20    [kworker/3:2H-kblockd]    <noArgs>
lightdm    938    0.0    0.0    8348    4696    ?    Ss    Jan08    0:00    23:45:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    939    0.0    0.1    101240    10684    ?    S<sl    Jan08    0:00    23:45:20    /usr/bin/pipewire    <noArgs>
lightdm    940    0.0    1.2    666648    105372    ?    Ssl    Jan08    0:16    23:45:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    942    0.0    0.0    21492    3192    ?    SNsl    Jan08    0:00    23:45:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    946    0.0    0.1    479280    15968    ?    S<sl    Jan08    0:00    23:45:20    /usr/bin/wireplumber    <noArgs>
lightdm    947    0.0    0.0    84704    5228    ?    Ssl    Jan08    0:00    23:45:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    948    0.0    0.1    98776    8352    ?    S<sl    Jan08    0:00    23:45:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    974    0.0    0.0    381080    7292    ?    Ssl    Jan08    0:00    23:45:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    982    0.0    0.0    8208    4420    ?    S    Jan08    0:00    23:45:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    990    0.0    0.1    312816    8180    ?    Ssl    Jan08    0:00    23:45:20    /usr/libexec/gvfsd    <noArgs>
lightdm    997    0.0    0.0    398408    7412    ?    Sl    Jan08    0:00    23:45:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1030    0.0    0.0    14372    5780    ?    S    Jan08    0:00    23:45:20    lightdm    --session-child_13_20
lightdm    1032    0.0    0.0    168772    7096    ?    Sl    Jan08    0:00    23:45:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1063    0.2    1.8    375728    147816    ?    Sl    Jan08    3:34    23:45:19    splunkd    -p_8089_start
root    1066    0.0    0.2    135648    17812    ?    Ss    Jan08    0:04    23:45:18    [splunkd    pid=1063]_splunkd_-p_8089_start_[process-runner]
root    1076    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:18    [kworker/0:3-mm_percpu_wq]    <noArgs>
root    1902    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:44:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1903    0.1    11.8    1545232    967668    ?    Sl    Jan08    2:02    23:44:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    128688    0.0    0.0    0    0    ?    I    Jan08    0:00    10:29:33    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    141502    0.0    0.0    0    0    ?    I    00:39    0:00    09:07:34    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    154915    0.0    0.0    0    0    ?    I    02:02    0:00    07:44:46    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    174072    0.0    0.0    0    0    ?    I    04:02    0:00    05:44:43    [kworker/u18:1-writeback]    <noArgs>
root    174241    0.0    0.0    0    0    ?    I    04:03    0:00    05:43:26    [kworker/u20:2-flush-254:0]    <noArgs>
root    178810    0.0    0.0    0    0    ?    I    04:32    0:00    05:14:36    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    198103    0.0    0.0    0    0    ?    I    06:33    0:00    03:13:36    [kworker/u19:1-flush-254:0]    <noArgs>
root    202919    0.0    0.0    0    0    ?    I    07:03    0:00    02:43:57    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    208376    0.0    0.0    0    0    ?    I    07:39    0:00    02:08:07    [kworker/u20:1-ext4-rsv-conversion]    <noArgs>
root    212470    0.0    0.0    0    0    ?    I    08:03    0:00    01:43:57    [kworker/u20:0-ext4-rsv-conversion]    <noArgs>
root    219548    0.0    0.0    0    0    ?    I    08:48    0:00    58:54    [kworker/u17:0-flush-254:0]    <noArgs>
root    224597    0.0    0.0    0    0    ?    I    09:20    0:00    26:59    [kworker/3:1-events]    <noArgs>
root    227384    0.0    0.0    0    0    ?    I    09:38    0:00    09:12    [kworker/0:0-ata_sff]    <noArgs>
root    227430    0.0    0.0    0    0    ?    I    09:38    0:00    08:42    [kworker/2:1-ata_sff]    <noArgs>
root    227763    0.0    0.0    0    0    ?    I    09:41    0:00    05:38    [kworker/1:0-ata_sff]    <noArgs>
root    227891    0.0    0.0    0    0    ?    I    09:42    0:00    05:04    [kworker/3:0-ata_sff]    <noArgs>
xrdp    227985    3.3    0.4    62044    33232    ?    S    09:42    0:09    04:54    /usr/sbin/xrdp    <noArgs>
root    228107    0.0    0.0    18320    4344    ?    S    09:42    0:00    04:20    /usr/sbin/xrdp-sesman    <noArgs>
pentester    228110    0.0    0.1    22904    13248    ?    Ss    09:42    0:00    04:20    /usr/lib/systemd/systemd    --user
pentester    228112    0.0    0.0    22592    3856    ?    S    09:42    0:00    04:20    (sd-pam)    <noArgs>
pentester    228132    0.0    0.0    8936    5672    ?    Ss    09:42    0:00    04:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    228133    0.0    0.1    97356    8196    ?    Ssl    09:42    0:00    04:20    /usr/bin/pipewire    <noArgs>
pentester    228134    0.1    1.2    630548    98060    ?    Sl    09:42    0:00    04:20    xfce4-session    <noArgs>
pentester    228135    1.2    2.3    448480    191944    ?    Sl    09:42    0:03    04:20    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    228138    0.0    0.0    7212    3680    ?    Ss    09:42    0:00    04:20    /usr/bin/mpris-proxy    <noArgs>
pentester    228139    0.0    0.1    399580    14228    ?    Ssl    09:42    0:00    04:20    /usr/bin/wireplumber    <noArgs>
pentester    228140    0.0    0.0    84704    5088    ?    Ssl    09:42    0:00    04:20    /usr/bin/pipewire    -c_filter-chain.conf
pentester    228141    0.0    0.1    99176    8900    ?    Ssl    09:42    0:00    04:20    /usr/bin/pipewire-pulse    <noArgs>
pentester    228164    0.0    0.0    95084    6176    ?    Sl    09:42    0:00    04:19    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    228241    0.0    0.0    10688    1860    ?    Ss    09:42    0:00    04:19    /usr/bin/ssh-agent    x-session-manager
pentester    228252    0.0    0.0    381172    7876    ?    Ssl    09:42    0:00    04:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    228259    0.0    0.0    8344    4852    ?    S    09:42    0:00    04:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    228263    0.0    0.0    307776    6648    ?    Ssl    09:42    0:00    04:19    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    228270    0.0    0.0    168784    7560    ?    Sl    09:42    0:00    04:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    228283    0.0    0.0    155488    3672    ?    SLsl    09:42    0:00    04:19    /usr/bin/gpg-agent    --supervised
pentester    228286    0.4    0.6    305996    53676    ?    Sl    09:42    0:01    04:19    xfwm4    <noArgs>
pentester    228291    0.0    0.0    312816    7948    ?    Ssl    09:42    0:00    04:19    /usr/libexec/gvfsd    <noArgs>
pentester    228297    0.0    0.0    398408    7504    ?    Sl    09:42    0:00    04:19    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    228306    0.0    0.3    348404    27120    ?    Sl    09:42    0:00    04:18    xfsettingsd    <noArgs>
pentester    228312    0.0    0.0    165276    6016    ?    Ssl    09:42    0:00    04:18    /usr/libexec/dconf-service    <noArgs>
pentester    228313    0.2    0.5    505984    43304    ?    Sl    09:42    0:00    04:18    xfce4-panel    <noArgs>
pentester    228322    0.0    0.3    420256    26216    ?    Sl    09:42    0:00    04:18    Thunar    --daemon
pentester    228334    0.2    0.8    663288    69616    ?    Sl    09:42    0:00    04:18    xfdesktop    <noArgs>
pentester    228340    0.0    0.5    428300    42600    ?    Sl    09:42    0:00    04:18    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    228345    0.0    0.0    7180    3308    ?    S    09:42    0:00    04:18    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    228351    0.0    0.2    405608    19472    ?    Sl    09:42    0:00    04:18    xfce4-power-manager    <noArgs>
pentester    228355    0.0    0.4    281552    35640    ?    Sl    09:42    0:00    04:18    xfce4-screensaver    <noArgs>
pentester    228357    0.0    0.4    606504    37688    ?    Sl    09:42    0:00    04:18    diodon    <noArgs>
pentester    228358    0.0    0.0    12432    1892    ?    Ssl    09:42    0:00    04:18    xcape    -e_Super_L_Control_L_Escape
pentester    228362    0.1    0.7    612664    61256    ?    Sl    09:42    0:00    04:18    /usr/bin/python3    /usr/bin/blueman-applet
pentester    228364    0.0    0.5    66232    41084    ?    S    09:42    0:00    04:18    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    228372    0.0    0.2    481796    21816    ?    Ssl    09:42    0:00    04:18    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    228377    0.0    0.2    265304    18416    ?    Sl    09:42    0:00    04:18    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    228407    0.0    0.0    308560    6560    ?    Sl    09:42    0:00    04:18    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    228410    0.0    0.1    922612    9020    ?    Sl    09:42    0:00    04:18    xiccd    <noArgs>
pentester    228418    0.0    0.5    586932    42912    ?    Sl    09:42    0:00    04:18    nm-applet    <noArgs>
pentester    228423    0.0    0.3    282400    28100    ?    SNsl    09:42    0:00    04:18    /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd    <noArgs>
colord    228434    0.0    0.1    317060    15372    ?    Ssl    09:42    0:00    04:18    /usr/libexec/colord    <noArgs>
root    228471    0.0    0.1    318520    10200    ?    Ssl    09:42    0:00    04:17    /usr/libexec/upowerd    <noArgs>
pentester    228477    0.0    0.0    95896    7716    ?    Sl    09:42    0:00    04:17    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
pentester    228521    0.0    0.1    458428    9932    ?    Ssl    09:42    0:00    04:17    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    228548    0.0    0.2    352692    20340    ?    Ssl    09:42    0:00    04:17    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    228554    0.2    0.7    310940    61904    ?    Sl    09:42    0:00    04:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    228555    0.0    0.4    499532    38032    ?    Sl    09:42    0:00    04:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    228557    0.2    0.3    272796    28888    ?    Sl    09:42    0:00    04:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    228558    0.0    0.4    359160    39176    ?    Sl    09:42    0:00    04:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    228560    0.0    0.4    425196    37320    ?    Sl    09:42    0:00    04:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    228563    0.0    0.4    286068    37404    ?    Sl    09:42    0:00    04:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    228577    0.0    0.4    425472    37724    ?    Sl    09:42    0:00    04:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    228649    0.0    0.1    538332    11632    ?    Ssl    09:42    0:00    04:16    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    228653    0.0    0.1    478376    13952    ?    Ssl    09:42    0:00    04:16    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    228665    0.0    0.0    307864    6692    ?    Ssl    09:42    0:00    04:16    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    228670    0.0    0.0    308884    7208    ?    Ssl    09:42    0:00    04:16    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    228675    0.0    0.0    307916    6824    ?    Ssl    09:42    0:00    04:16    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    228680    0.0    0.1    389944    8764    ?    Ssl    09:42    0:00    04:16    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    228694    0.0    0.0    168868    6652    ?    Ssl    09:42    0:00    04:16    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    228706    0.0    0.1    534256    8996    ?    Sl    09:42    0:00    04:16    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
root    228816    0.0    0.0    0    0    ?    I    09:43    0:00    04:06    [kworker/0:1-ata_sff]    <noArgs>
root    229174    0.0    0.0    0    0    ?    I    09:43    0:00    03:29    [kworker/2:0-ata_sff]    <noArgs>
pentester    230377    23.5    6.0    3170944    492952    ?    Sl    09:45    0:20    01:27    /usr/lib/firefox-esr/firefox-esr    <noArgs>
pentester    230382    0.0    0.0    20868    3148    ?    Sl    09:45    0:00    01:27    /usr/lib/firefox-esr/crashhelper    230377_9_/tmp/_11
pentester    230423    0.0    0.2    557012    19872    ?    Ssl    09:45    0:00    01:27    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    230435    0.0    0.0    308740    6640    ?    Ssl    09:45    0:00    01:27    /usr/libexec/xdg-permission-store    <noArgs>
pentester    230447    0.5    0.8    808052    70644    ?    Sl    09:45    0:00    01:27    /usr/bin/qterminal    <noArgs>
pentester    230448    0.0    0.0    614476    7184    ?    Ssl    09:45    0:00    01:27    /usr/libexec/xdg-document-portal    <noArgs>
root    230458    0.0    0.0    2592    1928    ?    Ss    09:45    0:00    01:27    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    230464    0.0    0.2    479576    19704    ?    Ssl    09:45    0:00    01:27    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    230507    0.0    0.5    235304    44148    ?    Sl    09:45    0:00    01:26    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:26899_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{80910b05-b4c8-41bc-9b53-17c5da149673}_-parentPid_230377_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_1_socket
pentester    230510    1.1    0.0    13940    7652    pts/0    Ss    09:45    0:01    01:26    /usr/bin/zsh    <noArgs>
pentester    230564    0.5    1.2    2467728    102688    ?    Sl    09:45    0:00    01:26    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:27829_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{33e5dd8c-5a3e-485c-b4d0-47d2516f7239}_-parentPid_230377_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_2_tab
pentester    230570    0.0    0.6    373380    51576    ?    Sl    09:45    0:00    01:26    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:27874_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{b019036c-707d-4949-ae98-4d9b7374c559}_-parentPid_230377_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_3_rdd
pentester    230609    0.7    1.9    2515532    162504    ?    Sl    09:45    0:00    01:25    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:28182_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{6451ff1e-9f48-4793-a491-d37913f6cf3a}_-parentPid_230377_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_4_tab
pentester    230678    0.0    0.5    232684    41836    ?    Sl    09:45    0:00    01:24    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-sandboxingKind_0_-prefsHandle_0:39222_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{4fad4691-99bb-482f-b6f9-f6442efa2522}_-parentPid_230377_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_5_utility
pentester    230687    1.7    2.0    2542100    164816    ?    Sl    09:45    0:01    01:24    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37546_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{4e16d3e3-d80b-42b2-a923-3ee52dd1b110}_-parentPid_230377_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_6_tab
pentester    230689    5.2    2.4    2591580    200660    ?    Sl    09:45    0:04    01:24    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37546_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{11c18fe4-c350-49be-bd9b-19a860114257}_-parentPid_230377_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_7_tab
pentester    230699    0.1    0.9    2429912    80548    ?    Sl    09:45    0:00    01:24    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37546_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{e098122a-c179-424b-bcbf-45b763c7909e}_-parentPid_230377_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_8_tab
pentester    230756    0.6    1.6    2491136    135440    ?    Sl    09:45    0:00    01:23    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:39660_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{720bd0d5-6f44-4f3d-b4b7-cb0d6c0f2440}_-parentPid_230377_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_9_tab
pentester    230894    0.1    0.9    2430540    80704    ?    Sl    09:45    0:00    01:16    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:38292_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{014c684b-af8c-436a-8850-9903fa46f555}_-parentPid_230377_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_10_tab
pentester    230952    0.1    0.9    2430540    80652    ?    Sl    09:46    0:00    01:13    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:38292_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{82272245-734d-4b56-bd67-0eb663b312bc}_-parentPid_230377_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_11_tab
pentester    231450    0.0    0.0    7180    3536    pts/0    S+    09:46    0:00    00:36    /bin/bash    ./start.sh
pentester    231451    0.0    0.0    5592    1908    pts/0    S+    09:46    0:00    00:36    tee    -a_/home/pentester/start_install.log
root    231452    0.0    0.0    19964    7212    pts/0    S+    09:46    0:00    00:36    sudo    -v
root    231486    0.0    0.0    0    0    ?    I    09:46    0:00    00:32    [kworker/1:2-ata_sff]    <noArgs>
root    231852    0.0    0.0    2688    1744    ?    S    09:47    0:00    00:09    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    231853    0.0    0.0    2688    1872    ?    S    09:47    0:00    00:09    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    231882    0.0    0.0    5624    2308    ?    S    09:47    0:00    00:09    iostat    -xky_60_1
root    231883    0.0    0.0    5592    2020    ?    S    09:47    0:00    00:09    tee    /dev/null
root    231884    0.0    0.0    9472    4068    ?    S    09:47    0:00    00:09    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
pentester    231917    0.0    0.0    5588    2064    ?    S    09:47    0:00    00:08    sleep    10
root    232054    0.0    0.0    0    0    ?    I    09:47    0:00    00:02    [kworker/3:2-ata_sff]    <noArgs>
root    232086    0.0    0.0    2688    1764    ?    S    09:47    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    232087    0.0    0.0    2688    1800    ?    S    09:47    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    232108    0.0    0.0    9636    4368    ?    R    09:47    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    232109    0.0    0.0    5592    1956    ?    S    09:47    0:00    00:00    tee    /dev/null
root    232110    0.0    0.0    9472    4008    ?    S    09:47    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24704    15320    ?    Ss    Jan08    0:02    23:45:30    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-netns]    <noArgs>
root    9    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:30    [kworker/0:0-mm_percpu_wq]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:30    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:45:30    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [ksoftirqd/3]    <noArgs>
root    44    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:30    [kworker/u18:1-ext4-rsv-conversion]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:30    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:30    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:30    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:45:30    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:30    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:30    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:29    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:29    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/u25:0]    <noArgs>
root    200    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/0:1H-kblockd]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/1:1H-kblockd]    <noArgs>
root    206    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/3:1H-kblockd]    <noArgs>
root    233    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:29    [kworker/1:2-mm_percpu_wq]    <noArgs>
root    247    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/R-ata_sff]    <noArgs>
root    252    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:29    [scsi_eh_0]    <noArgs>
root    254    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/R-scsi_tmf_0]    <noArgs>
root    255    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:29    [scsi_eh_1]    <noArgs>
root    257    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/R-scsi_tmf_1]    <noArgs>
root    302    0.0    0.0    0    0    ?    S    Jan08    0:01    23:45:28    [jbd2/vda1-8]    <noArgs>
root    303    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:28    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    327    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:28    [hwrng]    <noArgs>
root    380    0.0    0.3    50352    24564    ?    Ss    Jan08    0:00    23:45:27    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    413    0.0    0.0    90112    7472    ?    Ssl    Jan08    0:00    23:45:27    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    417    0.0    0.1    37588    12100    ?    Ss    Jan08    0:00    23:45:27    /usr/lib/systemd/systemd-udevd    <noArgs>
root    426    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:27    [psimon]    <noArgs>
root    562    0.0    0.0    8388    5480    ?    Ss    Jan08    0:01    23:45:26    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    606    0.0    0.0    10532    4528    ?    S    Jan08    0:00    23:45:26    dhcpcd:    eth0_[ip4]_[ip6]
root    607    0.0    0.0    10540    2512    ?    S    Jan08    0:00    23:45:26    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:45:26    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2120    ?    S    Jan08    0:00    23:45:26    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:26    [kworker/R-rpciod]    <noArgs>
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:26    [kworker/R-xprtiod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:25    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10540    2256    ?    S    Jan08    0:00    23:45:25    dhcpcd:    [BPF_ARP]_eth0_10.0.254.205
dhcpcd    628    0.0    0.0    10540    2384    ?    S    Jan08    0:00    23:45:24    dhcpcd:    [DHCP6_proxy]_fe80::e8ae:ca32:1759:19db
dhcpcd    647    0.0    0.0    10540    2320    ?    S    Jan08    0:00    23:45:20    dhcpcd:    [BOOTP_proxy]_10.0.254.205
root    740    0.0    0.0    309036    7000    ?    Ssl    Jan08    0:00    23:45:19    /usr/libexec/accounts-daemon    <noArgs>
root    742    0.0    0.0    6876    2696    ?    Ss    Jan08    0:00    23:45:19    /usr/sbin/cron    -f
messagebus    743    0.0    0.0    10060    6488    ?    Ss    Jan08    0:00    23:45:19    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382480    9864    ?    Ssl    Jan08    0:01    23:45:19    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3844    ?    Ssl    Jan08    0:00    23:45:19    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18356    9160    ?    Ss    Jan08    0:00    23:45:19    /usr/lib/systemd/systemd-logind    <noArgs>
root    789    0.0    0.2    336480    18840    ?    Ssl    Jan08    0:00    23:45:19    /usr/sbin/NetworkManager    --no-daemon
root    810    0.0    0.1    391064    12260    ?    Ssl    Jan08    0:00    23:45:19    /usr/sbin/ModemManager    <noArgs>
root    838    0.0    0.0    381488    7748    ?    Ssl    Jan08    0:00    23:45:19    /usr/sbin/lightdm    <noArgs>
root    840    0.0    0.0    18320    4312    ?    S    Jan08    0:00    23:45:19    /usr/sbin/xrdp-sesman    <noArgs>
root    849    0.0    0.2    1978808    20104    ?    Ssl    Jan08    0:19    23:45:19    /laforge.bin    <noArgs>
root    855    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:19    [kworker/3:2H-kblockd]    <noArgs>
xrdp    875    0.0    0.0    15652    2556    ?    S    Jan08    0:00    23:45:19    /usr/sbin/xrdp    <noArgs>
root    878    0.0    1.3    915128    106124    tty7    Ssl+    Jan08    0:02    23:45:19    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2716    tty1    Ss+    Jan08    0:00    23:45:19    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    901    0.0    0.1    169620    8220    ?    Sl    Jan08    0:00    23:45:18    lightdm    --session-child_17_20
root    906    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:18    [psimon]    <noArgs>
lightdm    909    0.0    0.1    22872    13012    ?    Ss    Jan08    0:00    23:45:18    /usr/lib/systemd/systemd    --user
lightdm    911    0.0    0.0    22712    3840    ?    S    Jan08    0:00    23:45:18    (sd-pam)    <noArgs>
lightdm    933    0.0    0.0    8348    4564    ?    Ss    Jan08    0:00    23:45:18    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    934    0.0    0.1    101256    10768    ?    S<sl    Jan08    0:00    23:45:18    /usr/bin/pipewire    <noArgs>
lightdm    935    0.0    1.2    666648    105404    ?    Ssl    Jan08    0:15    23:45:18    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    938    0.0    0.1    479280    16008    ?    S<sl    Jan08    0:00    23:45:18    /usr/bin/wireplumber    <noArgs>
lightdm    939    0.0    0.0    84704    5224    ?    Ssl    Jan08    0:00    23:45:18    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    941    0.0    0.0    98776    8048    ?    S<sl    Jan08    0:00    23:45:18    /usr/bin/pipewire-pulse    <noArgs>
rtkit    942    0.0    0.0    21492    3132    ?    SNsl    Jan08    0:00    23:45:18    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    967    0.0    0.0    381080    7136    ?    Ssl    Jan08    0:00    23:45:18    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    977    0.0    0.0    8208    4528    ?    S    Jan08    0:00    23:45:18    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_13_--address=unix:path=/run/user/123/at-spi/bus
lightdm    985    0.0    0.1    312816    8152    ?    Ssl    Jan08    0:00    23:45:18    /usr/libexec/gvfsd    <noArgs>
lightdm    995    0.0    0.0    398408    7384    ?    Sl    Jan08    0:00    23:45:17    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1032    0.0    0.0    14372    5768    ?    S    Jan08    0:00    23:45:17    lightdm    --session-child_13_20
lightdm    1034    0.0    0.0    168772    7104    ?    Sl    Jan08    0:00    23:45:17    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1062    0.2    1.8    377776    150824    ?    Sl    Jan08    3:22    23:45:16    splunkd    -p_8089_start
root    1065    0.0    0.2    135648    18016    ?    Ss    Jan08    0:04    23:45:16    [splunkd    pid=1062]_splunkd_-p_8089_start_[process-runner]
root    1899    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:44:44    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1900    0.1    10.2    1414160    836568    ?    Sl    Jan08    1:44    23:44:44    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    54768    0.0    0.0    0    0    ?    I    Jan08    0:03    18:11:49    [kworker/3:2-mm_percpu_wq]    <noArgs>
root    142949    0.0    0.0    0    0    ?    I    00:47    0:00    08:59:24    [kworker/u19:1-writeback]    <noArgs>
root    148715    0.0    0.0    0    0    ?    I    01:25    0:00    08:21:46    [kworker/u17:0-flush-254:0]    <noArgs>
root    152465    0.0    0.0    0    0    ?    I    01:47    0:00    07:59:29    [kworker/u17:1-flush-254:0]    <noArgs>
root    152713    0.0    0.0    0    0    ?    I    01:50    0:00    07:57:06    [kworker/u18:2-flush-254:0]    <noArgs>
root    170902    0.0    0.0    0    0    ?    I    03:45    0:00    06:02:06    [kworker/u20:1-flush-254:0]    <noArgs>
root    178922    0.0    0.0    0    0    ?    I    04:33    0:00    05:13:52    [kworker/u17:2-flush-254:0]    <noArgs>
root    194006    0.0    0.0    0    0    ?    I    06:08    0:00    03:38:44    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    196633    0.0    0.0    0    0    ?    I    06:25    0:00    03:21:40    [kworker/u18:0-events_unbound]    <noArgs>
root    222051    0.0    0.0    0    0    ?    I    09:03    0:00    43:55    [kworker/u20:0]    <noArgs>
root    223062    0.0    0.0    0    0    ?    I    09:11    0:00    35:44    [kworker/u19:2-flush-254:0]    <noArgs>
root    225274    0.0    0.0    0    0    ?    I    09:25    0:00    22:07    [kworker/u19:0-flush-254:0]    <noArgs>
root    227402    0.0    0.0    0    0    ?    I    09:37    0:00    09:17    [kworker/1:1-ata_sff]    <noArgs>
root    227478    0.0    0.0    0    0    ?    I    09:38    0:00    08:23    [kworker/0:2-ata_sff]    <noArgs>
root    227781    0.0    0.0    0    0    ?    I    09:41    0:00    05:32    [kworker/2:1-ata_sff]    <noArgs>
root    227812    0.0    0.0    0    0    ?    I    09:41    0:00    05:17    [kworker/3:1-ata_sff]    <noArgs>
root    228135    0.0    0.0    0    0    ?    I    09:43    0:00    04:05    [kworker/1:0-ata_sff]    <noArgs>
xrdp    228137    0.1    0.4    55996    36420    ?    S    09:43    0:00    04:00    /usr/sbin/xrdp    <noArgs>
root    228243    0.0    0.0    0    0    ?    I    09:44    0:00    02:58    [kworker/0:1-ata_sff]    <noArgs>
root    228309    0.0    0.0    18320    4384    ?    S    09:44    0:00    02:19    /usr/sbin/xrdp-sesman    <noArgs>
pentester    228312    0.1    0.1    23088    13292    ?    Ss    09:44    0:00    02:19    /usr/lib/systemd/systemd    --user
pentester    228314    0.0    0.0    22592    3868    ?    S    09:44    0:00    02:19    (sd-pam)    <noArgs>
pentester    228334    0.1    0.0    8768    5684    ?    Ss    09:44    0:00    02:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    228335    0.0    0.0    97360    7980    ?    Ssl    09:44    0:00    02:19    /usr/bin/pipewire    <noArgs>
pentester    228336    0.2    1.0    621252    88752    ?    Sl    09:44    0:00    02:19    xfce4-session    <noArgs>
pentester    228337    0.4    1.5    374328    122748    ?    Sl    09:44    0:00    02:19    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    228340    0.0    0.0    7212    3756    ?    Ss    09:44    0:00    02:19    /usr/bin/mpris-proxy    <noArgs>
pentester    228341    0.0    0.1    399452    14232    ?    Ssl    09:44    0:00    02:19    /usr/bin/wireplumber    <noArgs>
pentester    228344    0.0    0.0    84704    5336    ?    Ssl    09:44    0:00    02:19    /usr/bin/pipewire    -c_filter-chain.conf
pentester    228346    0.0    0.1    99176    8972    ?    Ssl    09:44    0:00    02:19    /usr/bin/pipewire-pulse    <noArgs>
pentester    228366    0.0    0.0    95084    6172    ?    Sl    09:44    0:00    02:19    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    228443    0.0    0.0    10688    1860    ?    Ss    09:44    0:00    02:18    /usr/bin/ssh-agent    x-session-manager
pentester    228454    0.0    0.0    381172    7816    ?    Ssl    09:44    0:00    02:18    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    228461    0.0    0.0    8344    4792    ?    S    09:44    0:00    02:18    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    228465    0.1    0.0    307776    6656    ?    Ssl    09:44    0:00    02:18    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    228472    0.0    0.0    168784    7600    ?    Sl    09:44    0:00    02:18    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    228485    0.0    0.0    155488    3568    ?    SLsl    09:44    0:00    02:18    /usr/bin/gpg-agent    --supervised
pentester    228488    0.3    0.4    287708    39156    ?    Sl    09:44    0:00    02:18    xfwm4    <noArgs>
pentester    228493    0.0    0.1    312816    8140    ?    Ssl    09:44    0:00    02:18    /usr/libexec/gvfsd    <noArgs>
pentester    228499    0.0    0.0    398408    7524    ?    Sl    09:44    0:00    02:18    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    228508    0.0    0.3    348408    26856    ?    Sl    09:44    0:00    02:18    xfsettingsd    <noArgs>
pentester    228514    0.0    0.0    165276    5824    ?    Ssl    09:44    0:00    02:18    /usr/libexec/dconf-service    <noArgs>
pentester    228515    0.2    0.4    502852    40292    ?    Sl    09:44    0:00    02:18    xfce4-panel    <noArgs>
pentester    228524    0.0    0.3    485740    26116    ?    Sl    09:44    0:00    02:17    Thunar    --daemon
pentester    228537    0.3    0.8    663288    69920    ?    Sl    09:44    0:00    02:17    xfdesktop    <noArgs>
pentester    228542    0.1    0.5    428304    42596    ?    Sl    09:44    0:00    02:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    228547    0.0    0.0    7180    3320    ?    S    09:44    0:00    02:17    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    228552    0.0    0.2    405608    19424    ?    Sl    09:44    0:00    02:17    xfce4-power-manager    <noArgs>
pentester    228554    0.0    0.3    272288    26116    ?    Sl    09:44    0:00    02:17    xfce4-screensaver    <noArgs>
pentester    228559    0.0    0.4    680236    37676    ?    Sl    09:44    0:00    02:17    diodon    <noArgs>
pentester    228563    0.0    0.0    12432    1972    ?    Ssl    09:44    0:00    02:17    xcape    -e_Super_L_Control_L_Escape
pentester    228566    0.2    0.7    604468    61316    ?    Sl    09:44    0:00    02:17    /usr/bin/python3    /usr/bin/blueman-applet
pentester    228569    0.1    0.5    66232    40952    ?    S    09:44    0:00    02:17    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    228582    0.0    0.2    265304    18320    ?    Sl    09:44    0:00    02:17    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    228591    0.0    0.2    481796    21264    ?    Ssl    09:44    0:00    02:17    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    228606    0.0    0.0    308560    6716    ?    Sl    09:44    0:00    02:17    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    228612    0.0    0.1    922612    9064    ?    Sl    09:44    0:00    02:17    xiccd    <noArgs>
pentester    228630    0.0    0.5    586932    43088    ?    Sl    09:44    0:00    02:17    nm-applet    <noArgs>
pentester    228631    0.0    0.3    282400    28084    ?    SNsl    09:44    0:00    02:17    /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd    <noArgs>
colord    228641    0.0    0.1    317052    15100    ?    Ssl    09:44    0:00    02:17    /usr/libexec/colord    <noArgs>
pentester    228677    0.0    0.0    95896    7656    ?    Sl    09:44    0:00    02:17    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
root    228682    0.0    0.1    318516    10048    ?    Ssl    09:44    0:00    02:17    /usr/libexec/upowerd    <noArgs>
pentester    228723    0.0    0.1    457840    8932    ?    Ssl    09:44    0:00    02:17    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    228743    0.1    0.7    310940    61492    ?    Sl    09:44    0:00    02:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    228744    0.0    0.4    499532    38172    ?    Sl    09:44    0:00    02:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    228745    0.2    0.3    272796    28916    ?    Sl    09:44    0:00    02:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    228746    0.0    0.4    359160    39296    ?    Sl    09:44    0:00    02:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    228747    0.0    0.4    425196    37260    ?    Sl    09:44    0:00    02:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    228748    0.0    0.4    286068    37652    ?    Sl    09:44    0:00    02:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    228762    0.0    0.1    349660    12964    ?    Ssl    09:44    0:00    02:17    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    228764    0.0    0.4    425472    37640    ?    Sl    09:44    0:00    02:17    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    228851    0.0    0.1    538332    11780    ?    Ssl    09:44    0:00    02:16    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    228855    0.0    0.1    478376    14212    ?    Ssl    09:44    0:00    02:16    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    228867    0.0    0.0    307864    6496    ?    Ssl    09:44    0:00    02:16    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    228872    0.0    0.0    308884    7240    ?    Ssl    09:44    0:00    02:16    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    228877    0.0    0.0    307916    6736    ?    Ssl    09:44    0:00    02:15    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    228882    0.0    0.1    389944    8796    ?    Ssl    09:44    0:00    02:15    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    228896    0.0    0.0    168868    6728    ?    Ssl    09:44    0:00    02:15    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    228900    0.0    0.1    534256    9188    ?    Sl    09:44    0:00    02:15    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
root    230084    0.0    0.0    0    0    ?    I    09:46    0:00    00:17    [kworker/3:0-ata_sff]    <noArgs>
root    230191    0.0    0.0    0    0    ?    I    09:47    0:00    00:11    [kworker/2:0-ata_sff]    <noArgs>
root    230306    0.0    0.0    2688    1752    ?    S    09:47    0:00    00:07    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    230307    0.0    0.0    2688    1840    ?    S    09:47    0:00    00:07    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    230328    0.0    0.0    5624    2128    ?    S    09:47    0:00    00:07    iostat    -xky_60_1
root    230329    0.0    0.0    5592    1928    ?    S    09:47    0:00    00:07    tee    /dev/null
root    230330    0.0    0.0    9472    3952    ?    S    09:47    0:00    00:07    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
pentester    230341    0.0    0.0    5588    1944    ?    S    09:47    0:00    00:07    sleep    10
root    230507    0.0    0.0    2688    1756    ?    S    09:47    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    230508    0.0    0.0    2688    1840    ?    S    09:47    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    230529    0.0    0.0    9504    4276    ?    R    09:47    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    230530    0.0    0.0    5592    1928    ?    S    09:47    0:00    00:00    tee    /dev/null
root    230531    0.0    0.0    9472    4004    ?    S    09:47    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}