_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24728    14968    ?    Ss    Jan08    0:02    23:55:31    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:31    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:55:31    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [ksoftirqd/1]    <noArgs>
root    25    0.0    0.0    0    0    ?    I    Jan08    0:05    23:55:31    [kworker/1:0-events_freezable]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:31    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:31    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:31    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:55:31    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:31    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:31    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/R-ipv6_addrconf]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/0:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:30    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/u25:0]    <noArgs>
root    200    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/3:1H-kblockd]    <noArgs>
root    205    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/1:1H-kblockd]    <noArgs>
root    232    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:30    [kworker/3:2-mm_percpu_wq]    <noArgs>
root    245    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/R-ata_sff]    <noArgs>
root    247    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:30    [scsi_eh_0]    <noArgs>
root    248    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/R-scsi_tmf_0]    <noArgs>
root    252    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:30    [scsi_eh_1]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/R-scsi_tmf_1]    <noArgs>
root    268    0.0    0.0    0    0    ?    I    Jan08    0:05    23:55:29    [kworker/0:2-events]    <noArgs>
root    302    0.0    0.0    0    0    ?    S    Jan08    0:01    23:55:29    [jbd2/vda1-8]    <noArgs>
root    303    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:29    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    327    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:28    [hwrng]    <noArgs>
root    382    0.0    0.2    41984    20736    ?    Ss    Jan08    0:00    23:55:27    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    412    0.0    0.0    90112    7404    ?    Ssl    Jan08    0:00    23:55:27    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    416    0.0    0.1    37452    12084    ?    Ss    Jan08    0:00    23:55:27    /usr/lib/systemd/systemd-udevd    <noArgs>
root    425    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:27    [psimon]    <noArgs>
root    554    0.0    0.0    8388    5296    ?    Ss    Jan08    0:01    23:55:26    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    605    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:55:26    dhcpcd:    eth0_[ip4]_[ip6]
root    606    0.0    0.0    10532    2512    ?    S    Jan08    0:00    23:55:26    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:55:26    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:55:26    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:26    [kworker/R-rpciod]    <noArgs>
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:26    [kworker/R-xprtiod]    <noArgs>
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:26    [kworker/R-cfg80211]    <noArgs>
dhcpcd    625    0.0    0.0    10532    2376    ?    S    Jan08    0:00    23:55:24    dhcpcd:    [DHCP6_proxy]_fe80::6b7b:4717:faf8:abbb
dhcpcd    627    0.0    0.0    10532    2248    ?    S    Jan08    0:00    23:55:24    dhcpcd:    [BPF_ARP]_eth0_10.0.254.206
dhcpcd    646    0.0    0.0    10532    2312    ?    S    Jan08    0:00    23:55:20    dhcpcd:    [BOOTP_proxy]_10.0.254.206
root    739    0.0    0.0    309036    7240    ?    Ssl    Jan08    0:00    23:55:19    /usr/libexec/accounts-daemon    <noArgs>
root    741    0.0    0.0    6876    2740    ?    Ss    Jan08    0:00    23:55:19    /usr/sbin/cron    -f
messagebus    742    0.0    0.0    9204    5572    ?    Ss    Jan08    0:00    23:55:19    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382300    9808    ?    Ssl    Jan08    0:01    23:55:19    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3920    ?    Ssl    Jan08    0:00    23:55:19    /usr/sbin/qemu-ga    <noArgs>
root    749    0.0    0.1    18352    8820    ?    Ss    Jan08    0:00    23:55:19    /usr/lib/systemd/systemd-logind    <noArgs>
root    772    0.0    0.2    336460    18956    ?    Ssl    Jan08    0:00    23:55:19    /usr/sbin/NetworkManager    --no-daemon
root    809    0.0    0.1    317328    12476    ?    Ssl    Jan08    0:00    23:55:19    /usr/sbin/ModemManager    <noArgs>
root    831    0.0    0.0    381356    7752    ?    Ssl    Jan08    0:00    23:55:19    /usr/sbin/lightdm    <noArgs>
root    839    0.0    0.0    16356    2260    ?    S    Jan08    0:00    23:55:19    /usr/sbin/xrdp-sesman    <noArgs>
root    847    0.0    0.2    1978552    20676    ?    Ssl    Jan08    0:20    23:55:19    /laforge.bin    <noArgs>
xrdp    873    0.0    0.0    15652    2452    ?    S    Jan08    0:00    23:55:19    /usr/sbin/xrdp    <noArgs>
root    876    0.0    0.0    8124    2520    tty1    Ss+    Jan08    0:00    23:55:19    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    877    0.0    1.3    915132    105840    tty7    Ssl+    Jan08    0:02    23:55:19    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    898    0.0    0.1    169620    8276    ?    Sl    Jan08    0:00    23:55:18    lightdm    --session-child_17_20
lightdm    904    0.0    0.1    22624    13044    ?    Ss    Jan08    0:00    23:55:18    /usr/lib/systemd/systemd    --user
root    906    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:18    [psimon]    <noArgs>
lightdm    909    0.0    0.0    22712    3852    ?    S    Jan08    0:00    23:55:18    (sd-pam)    <noArgs>
lightdm    932    0.0    0.0    8348    4712    ?    Ss    Jan08    0:00    23:55:17    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    933    0.0    0.1    101224    10700    ?    S<sl    Jan08    0:00    23:55:17    /usr/bin/pipewire    <noArgs>
lightdm    937    0.0    0.1    479272    15864    ?    S<sl    Jan08    0:00    23:55:17    /usr/bin/wireplumber    <noArgs>
lightdm    938    0.0    0.0    84704    5300    ?    Ssl    Jan08    0:00    23:55:17    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    939    0.0    0.0    21492    3144    ?    SNsl    Jan08    0:00    23:55:17    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    940    0.0    0.1    98776    8148    ?    S<sl    Jan08    0:00    23:55:17    /usr/bin/pipewire-pulse    <noArgs>
lightdm    943    0.0    1.2    666648    105620    ?    Ssl    Jan08    0:17    23:55:17    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    972    0.0    0.0    381080    7088    ?    Ssl    Jan08    0:00    23:55:17    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    981    0.0    0.0    8208    4412    ?    S    Jan08    0:00    23:55:17    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    986    0.0    0.0    312816    7984    ?    Ssl    Jan08    0:00    23:55:17    /usr/libexec/gvfsd    <noArgs>
lightdm    993    0.0    0.0    398408    7312    ?    Sl    Jan08    0:00    23:55:17    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1029    0.0    0.0    14372    5736    ?    S    Jan08    0:00    23:55:17    lightdm    --session-child_13_20
lightdm    1031    0.0    0.0    168772    7196    ?    Sl    Jan08    0:00    23:55:17    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1059    0.2    1.8    377776    149768    ?    Sl    Jan08    3:50    23:55:16    splunkd    -p_8089_start
root    1062    0.0    0.2    135648    18044    ?    Ss    Jan08    0:04    23:55:16    [splunkd    pid=1059]_splunkd_-p_8089_start_[process-runner]
root    1897    0.0    0.0    2688    1760    ?    S    Jan08    0:00    23:54:43    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1898    0.1    10.2    1414160    837236    ?    Sl    Jan08    2:07    23:54:43    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    11822    0.0    0.0    0    0    ?    I    Jan08    0:00    22:51:32    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    49040    0.0    0.0    0    0    ?    I    Jan08    0:00    18:55:38    [kworker/u19:0-ext4-rsv-conversion]    <noArgs>
root    129341    0.0    0.0    0    0    ?    I    Jan08    0:00    10:34:34    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    143687    0.0    0.0    0    0    ?    I    00:53    0:00    09:03:44    [kworker/u20:2-flush-254:0]    <noArgs>
root    166244    0.0    0.0    0    0    ?    I    03:16    0:01    06:40:57    [kworker/2:0-mm_percpu_wq]    <noArgs>
root    206912    0.0    0.0    0    0    ?    I    07:30    0:00    02:26:44    [kworker/u18:0-events_unbound]    <noArgs>
root    207613    0.0    0.0    0    0    ?    I    07:32    0:00    02:24:29    [kworker/u20:0-flush-254:0]    <noArgs>
root    220523    0.0    0.0    0    0    ?    I    08:55    0:00    01:01:38    [kworker/u17:0-flush-254:0]    <noArgs>
root    225083    0.0    0.0    0    0    ?    I    09:22    0:00    34:44    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    226813    0.0    0.0    0    0    ?    I    09:33    0:00    23:58    [kworker/u19:1]    <noArgs>
root    228794    0.0    0.0    0    0    ?    I    09:47    0:00    10:01    [kworker/3:0-ata_sff]    <noArgs>
root    228887    0.0    0.0    0    0    ?    I    09:47    0:00    09:53    [kworker/2:1-ata_sff]    <noArgs>
root    229065    0.0    0.0    0    0    ?    I    09:47    0:00    09:41    [kworker/u17:2-kvfree_rcu_reclaim]    <noArgs>
root    229144    0.0    0.0    0    0    ?    I    09:47    0:00    09:22    [kworker/1:1-ata_sff]    <noArgs>
root    229326    0.0    0.0    0    0    ?    I    09:49    0:00    07:23    [kworker/0:0-ata_sff]    <noArgs>
root    229756    0.0    0.0    0    0    ?    I    09:52    0:00    04:46    [kworker/3:1-ata_sff]    <noArgs>
root    229846    0.0    0.0    0    0    ?    I    09:53    0:00    04:02    [kworker/1:2-ata_sff]    <noArgs>
root    229937    0.0    0.0    0    0    ?    I    09:54    0:00    03:03    [kworker/2:2-ata_sff]    <noArgs>
root    229998    0.0    0.0    0    0    ?    I    09:54    0:00    02:19    [kworker/0:1-ata_sff]    <noArgs>
root    230138    0.0    0.0    0    0    ?    I    09:56    0:00    00:54    [kworker/u18:1-flush-254:0]    <noArgs>
root    230296    0.0    0.0    2688    1696    ?    S    09:57    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    230297    0.0    0.0    2688    1820    ?    S    09:57    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    230318    0.0    0.0    9372    4260    ?    R    09:57    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    230319    0.0    0.0    5592    1984    ?    S    09:57    0:00    00:00    tee    /dev/null
root    230320    0.0    0.0    9472    4004    ?    S    09:57    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    25208    15504    ?    Ss    Jan08    0:03    23:50:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:34    [kworker/0:1-ata_sff]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:50:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/2]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:50:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/1:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [kworker/u16:1-netns]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u25:0]    <noArgs>
root    221    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/3:1H-kblockd]    <noArgs>
root    234    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/0:1H-kblockd]    <noArgs>
root    259    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-ata_sff]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [scsi_eh_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    263    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [scsi_eh_1]    <noArgs>
root    264    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    270    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:32    [kworker/3:2-ata_sff]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:50:32    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [hwrng]    <noArgs>
root    385    0.0    0.3    58716    25252    ?    Ss    Jan08    0:00    23:50:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7472    ?    Ssl    Jan08    0:00    23:50:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    419    0.0    0.1    38032    12564    ?    Ss    Jan08    0:00    23:50:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:30    [psimon]    <noArgs>
root    559    0.0    0.0    8388    6716    ?    Ss    Jan08    0:01    23:50:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    608    0.0    0.0    10664    4532    ?    S    Jan08    0:00    23:50:29    dhcpcd:    eth0_[ip4]_[ip6]
root    609    0.0    0.0    10536    2516    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-rpciod]    <noArgs>
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-xprtiod]    <noArgs>
root    619    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    629    0.0    0.0    10536    2248    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [BPF_ARP]_eth0_10.0.254.204
dhcpcd    630    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [DHCP6_proxy]_fe80::c2e5:7713:80ac:9cc3
dhcpcd    649    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:50:23    dhcpcd:    [BOOTP_proxy]_10.0.254.204
root    742    0.0    0.0    309036    7256    ?    Ssl    Jan08    0:00    23:50:23    /usr/libexec/accounts-daemon    <noArgs>
root    744    0.0    0.0    6876    2724    ?    Ss    Jan08    0:00    23:50:23    /usr/sbin/cron    -f
messagebus    745    0.0    0.0    10068    6672    ?    Ss    Jan08    0:00    23:50:23    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    747    0.0    0.1    382352    10116    ?    Ssl    Jan08    0:01    23:50:23    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    749    0.0    0.0    80876    3888    ?    Ssl    Jan08    0:00    23:50:23    /usr/sbin/qemu-ga    <noArgs>
root    752    0.0    0.1    18484    9152    ?    Ss    Jan08    0:00    23:50:23    /usr/lib/systemd/systemd-logind    <noArgs>
root    775    0.0    0.2    336596    19236    ?    Ssl    Jan08    0:00    23:50:23    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    391060    12368    ?    Ssl    Jan08    0:00    23:50:23    /usr/sbin/ModemManager    <noArgs>
root    831    0.0    0.0    381356    7620    ?    Ssl    Jan08    0:00    23:50:23    /usr/sbin/lightdm    <noArgs>
root    842    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:23    [kworker/2:2H-kblockd]    <noArgs>
root    847    0.0    0.0    18320    4292    ?    S    Jan08    0:00    23:50:23    /usr/sbin/xrdp-sesman    <noArgs>
root    849    0.0    0.2    1905076    19868    ?    Ssl    Jan08    0:20    23:50:23    /laforge.bin    <noArgs>
xrdp    875    0.0    0.0    15652    2344    ?    S    Jan08    0:00    23:50:23    /usr/sbin/xrdp    <noArgs>
root    881    0.0    1.3    915128    105868    tty7    Ssl+    Jan08    0:02    23:50:23    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    885    0.0    0.0    8124    2496    tty1    Ss+    Jan08    0:00    23:50:23    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    903    0.0    0.1    169620    8320    ?    Sl    Jan08    0:00    23:50:22    lightdm    --session-child_17_20
lightdm    910    0.0    0.1    22628    13068    ?    Ss    Jan08    0:00    23:50:22    /usr/lib/systemd/systemd    --user
lightdm    912    0.0    0.0    22712    3852    ?    S    Jan08    0:00    23:50:22    (sd-pam)    <noArgs>
lightdm    940    0.0    0.0    8348    4664    ?    Ss    Jan08    0:00    23:50:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    941    0.0    0.1    101208    10784    ?    S<sl    Jan08    0:00    23:50:21    /usr/bin/pipewire    <noArgs>
lightdm    944    0.0    1.2    666648    105260    ?    Ssl    Jan08    0:16    23:50:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    946    0.0    0.1    479280    15968    ?    S<sl    Jan08    0:00    23:50:21    /usr/bin/wireplumber    <noArgs>
lightdm    947    0.0    0.0    84704    5232    ?    Ssl    Jan08    0:00    23:50:21    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    948    0.0    0.0    21492    3128    ?    SNsl    Jan08    0:00    23:50:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    949    0.0    0.1    98776    8292    ?    S<sl    Jan08    0:00    23:50:21    /usr/bin/pipewire-pulse    <noArgs>
lightdm    975    0.0    0.0    381080    7196    ?    Ssl    Jan08    0:00    23:50:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    983    0.0    0.0    8208    4444    ?    S    Jan08    0:00    23:50:21    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    988    0.0    0.0    312816    8096    ?    Ssl    Jan08    0:00    23:50:21    /usr/libexec/gvfsd    <noArgs>
lightdm    1003    0.0    0.0    398408    7368    ?    Sl    Jan08    0:00    23:50:21    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1034    0.0    0.0    14372    5792    ?    S    Jan08    0:00    23:50:21    lightdm    --session-child_13_20
lightdm    1036    0.0    0.0    168772    7204    ?    Sl    Jan08    0:00    23:50:21    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1063    0.2    1.8    381872    150992    ?    Sl    Jan08    3:30    23:50:20    splunkd    -p_8089_start
root    1066    0.0    0.2    135648    18036    ?    Ss    Jan08    0:04    23:50:20    [splunkd    pid=1063]_splunkd_-p_8089_start_[process-runner]
root    1901    0.0    0.0    2688    1828    ?    S    Jan08    0:00    23:49:47    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1902    0.1    13.4    1610768    1091520    ?    Sl    Jan08    1:52    23:49:47    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    21105    0.0    0.0    0    0    ?    I    Jan08    0:04    21:49:30    [kworker/2:0-ata_sff]    <noArgs>
root    50745    0.0    0.0    0    0    ?    I    Jan08    0:00    18:41:39    [kworker/u20:2-flush-254:0]    <noArgs>
root    72015    0.0    0.0    0    0    ?    I    Jan08    0:00    16:28:47    [kworker/u17:3-ext4-rsv-conversion]    <noArgs>
root    116803    0.0    0.0    0    0    ?    I    Jan08    0:00    11:48:58    [kworker/u19:2-ext4-rsv-conversion]    <noArgs>
root    155313    0.0    0.0    0    0    ?    I    02:10    0:00    07:46:17    [kworker/u17:1-flush-254:0]    <noArgs>
root    157632    0.0    0.0    0    0    ?    I    02:25    0:00    07:31:30    [kworker/u17:0-flush-254:0]    <noArgs>
root    176526    0.0    0.0    0    0    ?    I    04:22    0:00    05:34:07    [kworker/u18:0-ext4-rsv-conversion]    <noArgs>
root    194852    0.0    0.0    0    0    ?    I    06:20    0:00    03:36:59    [kworker/u20:3-events_unbound]    <noArgs>
root    217076    0.0    0.0    0    0    ?    I    08:37    0:00    01:19:35    [kworker/u19:1-writeback]    <noArgs>
root    219745    0.0    0.0    0    0    ?    I    08:55    0:00    01:01:34    [kworker/u18:1-ext4-rsv-conversion]    <noArgs>
root    225116    0.0    0.0    0    0    ?    I    09:28    0:00    28:17    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
xrdp    227127    2.4    0.4    62572    38320    ?    S    09:41    0:21    15:10    /usr/sbin/xrdp    <noArgs>
root    227451    0.0    0.0    18320    4364    ?    S    09:43    0:00    13:51    /usr/sbin/xrdp-sesman    <noArgs>
pentester    227454    0.0    0.1    22904    13244    ?    Ss    09:43    0:00    13:50    /usr/lib/systemd/systemd    --user
pentester    227456    0.0    0.0    22592    3848    ?    S    09:43    0:00    13:50    (sd-pam)    <noArgs>
pentester    227476    0.0    0.0    8896    5684    ?    Ss    09:43    0:00    13:50    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    227477    0.0    0.0    97360    8112    ?    Ssl    09:43    0:00    13:50    /usr/bin/pipewire    <noArgs>
pentester    227478    0.0    1.2    630548    98060    ?    Sl    09:43    0:00    13:50    xfce4-session    <noArgs>
pentester    227479    0.9    2.2    435448    183348    ?    Sl    09:43    0:08    13:50    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    227482    0.0    0.0    7212    3476    ?    Ss    09:43    0:00    13:50    /usr/bin/mpris-proxy    <noArgs>
pentester    227483    0.0    0.1    399584    14372    ?    Ssl    09:43    0:00    13:50    /usr/bin/wireplumber    <noArgs>
pentester    227484    0.0    0.0    84704    5236    ?    Ssl    09:43    0:00    13:50    /usr/bin/pipewire    -c_filter-chain.conf
pentester    227485    0.0    0.1    99176    8896    ?    Ssl    09:43    0:00    13:50    /usr/bin/pipewire-pulse    <noArgs>
pentester    227508    0.0    0.0    95084    6212    ?    Sl    09:43    0:00    13:50    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    227585    0.0    0.0    10688    1860    ?    Ss    09:43    0:00    13:50    /usr/bin/ssh-agent    x-session-manager
pentester    227596    0.0    0.0    381172    7808    ?    Ssl    09:43    0:00    13:50    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    227603    0.0    0.0    8344    4820    ?    S    09:43    0:00    13:50    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    227614    0.0    0.0    168784    7576    ?    Sl    09:43    0:00    13:50    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    227627    0.0    0.0    155488    3668    ?    SLsl    09:43    0:00    13:50    /usr/bin/gpg-agent    --supervised
pentester    227630    0.2    0.5    297312    48516    ?    Sl    09:43    0:01    13:49    xfwm4    <noArgs>
pentester    227635    0.0    0.0    312816    8096    ?    Ssl    09:43    0:00    13:49    /usr/libexec/gvfsd    <noArgs>
pentester    227641    0.0    0.0    398408    7556    ?    Sl    09:43    0:00    13:49    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    227650    0.0    0.3    348408    27480    ?    Sl    09:43    0:00    13:49    xfsettingsd    <noArgs>
pentester    227656    0.0    0.0    165276    5824    ?    Ssl    09:43    0:00    13:49    /usr/libexec/dconf-service    <noArgs>
pentester    227658    0.1    0.5    506320    43880    ?    Sl    09:43    0:01    13:49    xfce4-panel    <noArgs>
pentester    227667    0.0    0.3    485800    26328    ?    Sl    09:43    0:00    13:49    Thunar    --daemon
pentester    227680    0.1    0.8    663300    69656    ?    Sl    09:43    0:00    13:49    xfdesktop    <noArgs>
pentester    227685    0.0    0.5    502032    42788    ?    Sl    09:43    0:00    13:48    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    227690    0.0    0.0    7180    3472    ?    S    09:43    0:00    13:48    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    227695    0.0    0.2    405608    19312    ?    Sl    09:43    0:00    13:48    xfce4-power-manager    <noArgs>
pentester    227696    0.0    0.4    281548    35456    ?    Sl    09:43    0:00    13:48    xfce4-screensaver    <noArgs>
pentester    227702    0.0    0.4    606504    37852    ?    Sl    09:43    0:00    13:48    diodon    <noArgs>
pentester    227703    0.0    0.0    12432    1908    ?    Ssl    09:43    0:00    13:48    xcape    -e_Super_L_Control_L_Escape
pentester    227707    0.0    0.7    604464    61848    ?    Sl    09:43    0:00    13:48    /usr/bin/python3    /usr/bin/blueman-applet
pentester    227711    0.0    0.2    416260    21680    ?    Ssl    09:43    0:00    13:48    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    227712    0.0    0.5    66232    41100    ?    S    09:43    0:00    13:48    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    227720    0.0    0.2    265304    18284    ?    Sl    09:43    0:00    13:48    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    227745    0.0    0.0    308560    6760    ?    Sl    09:43    0:00    13:48    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    227754    0.0    0.1    922480    8960    ?    Sl    09:43    0:00    13:48    xiccd    <noArgs>
pentester    227779    0.0    0.5    586936    43324    ?    Sl    09:43    0:00    13:48    nm-applet    <noArgs>
colord    227780    0.0    0.1    317060    15124    ?    Ssl    09:43    0:00    13:48    /usr/libexec/colord    <noArgs>
root    227812    0.0    0.1    318516    10076    ?    Ssl    09:43    0:00    13:48    /usr/libexec/upowerd    <noArgs>
pentester    227823    0.0    0.0    95896    7708    ?    Sl    09:43    0:00    13:48    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
pentester    227830    0.0    0.1    458444    9948    ?    Ssl    09:43    0:00    13:48    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    227887    0.0    0.2    352688    20316    ?    Ssl    09:43    0:00    13:48    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    227897    0.2    0.7    310940    63376    ?    Sl    09:43    0:02    13:48    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    227898    0.0    0.4    499532    38344    ?    Sl    09:43    0:00    13:48    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    227903    0.2    0.3    272796    29196    ?    Sl    09:43    0:02    13:48    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    227907    0.0    0.4    359160    39328    ?    Sl    09:43    0:00    13:48    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    227908    0.0    0.4    425196    37656    ?    Sl    09:43    0:00    13:48    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    227909    0.0    0.4    286016    37540    ?    Sl    09:43    0:00    13:48    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    227914    0.0    0.4    425472    37592    ?    Sl    09:43    0:00    13:48    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    227994    0.0    0.1    538328    11788    ?    Ssl    09:43    0:00    13:47    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    227998    0.0    0.1    478372    14032    ?    Ssl    09:43    0:00    13:47    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    228010    0.0    0.0    307864    6832    ?    Ssl    09:43    0:00    13:47    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    228015    0.0    0.0    308884    7048    ?    Ssl    09:43    0:00    13:47    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    228020    0.0    0.0    307916    6896    ?    Ssl    09:43    0:00    13:47    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    228025    0.0    0.1    389944    8736    ?    Ssl    09:43    0:00    13:47    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    228039    0.0    0.0    168868    6700    ?    Ssl    09:43    0:00    13:46    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    228043    0.0    0.1    534256    9308    ?    Sl    09:43    0:00    13:46    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
root    228752    0.0    0.0    0    0    ?    I    09:44    0:00    12:36    [kworker/1:2-mm_percpu_wq]    <noArgs>
pentester    229894    0.7    0.9    821912    73932    ?    Sl    09:46    0:05    10:41    /usr/bin/qterminal    <noArgs>
pentester    229897    0.0    0.2    557240    20192    ?    Ssl    09:46    0:00    10:41    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    229914    0.0    0.0    308740    6688    ?    Ssl    09:46    0:00    10:41    /usr/libexec/xdg-permission-store    <noArgs>
pentester    229919    0.0    0.0    539704    7092    ?    Ssl    09:46    0:00    10:41    /usr/libexec/xdg-document-portal    <noArgs>
root    229925    0.0    0.0    2592    2036    ?    Ss    09:46    0:00    10:41    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    229928    0.0    0.2    479576    19940    ?    Ssl    09:46    0:00    10:41    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    231139    0.1    0.0    13940    7760    pts/2    Ss    09:47    0:00    09:18    /usr/bin/zsh    <noArgs>
root    231492    0.0    0.0    0    0    ?    I    09:48    0:00    08:48    [kworker/2:1-events]    <noArgs>
root    231667    0.0    0.0    0    0    ?    I    09:48    0:00    08:36    [kworker/0:2-events]    <noArgs>
root    231805    0.0    0.0    0    0    ?    I    09:48    0:00    08:25    [kworker/u19:0-ext4-rsv-conversion]    <noArgs>
root    232553    0.0    0.0    0    0    ?    I    09:49    0:00    07:43    [kworker/u18:3-writeback]    <noArgs>
root    232947    0.1    0.6    1949056    49124    ?    Ssl    09:49    0:00    07:41    /usr/bin/containerd    <noArgs>
root    232960    3.8    1.1    2581024    92556    ?    Ssl    09:49    0:17    07:41    /usr/sbin/dockerd    -H_fd://_--containerd=/run/containerd/containerd.sock
root    232985    0.0    0.0    0    0    ?    I    09:49    0:00    07:41    [kworker/u18:4-flush-254:0]    <noArgs>
root    232986    0.0    0.0    0    0    ?    I    09:49    0:00    07:41    [kworker/u18:5-ext4-rsv-conversion]    <noArgs>
pentester    233380    0.3    0.1    15856    9604    pts/3    Ss    09:49    0:01    07:24    /usr/bin/zsh    <noArgs>
root    233494    0.0    0.0    0    0    ?    I    09:49    0:00    07:20    [kworker/u20:1-events_unbound]    <noArgs>
root    233615    0.0    0.0    0    0    ?    I    09:49    0:00    07:14    [kworker/3:3-ata_sff]    <noArgs>
pentester    234247    0.1    0.0    13772    7484    pts/4    Ss+    09:50    0:00    07:01    /usr/bin/zsh    <noArgs>
root    234315    0.0    0.0    1671432    6168    ?    Sl    09:50    0:00    06:58    /usr/sbin/docker-proxy    -proto_tcp_-host-ip_0.0.0.0_-host-port_8000_-container-ip_172.18.0.3_-container-port_8000
root    234321    0.0    0.0    1597700    6132    ?    Sl    09:50    0:00    06:58    /usr/sbin/docker-proxy    -proto_tcp_-host-ip_::_-host-port_8000_-container-ip_172.18.0.3_-container-port_8000
root    234349    0.0    0.2    2059844    21972    ?    Sl    09:50    0:00    06:58    /usr/bin/containerd-shim-runc-v2    -namespace_moby_-id_930fe0d8d4aee7d136b52ce8ac6941d706951d780fc82875830a4530bd947921_-address_/run/containerd/containerd.sock
root    234372    0.0    0.0    2688    1864    ?    Ss    09:50    0:00    06:58    /bin/sh    -c_gunicorn_--workers_4_--bind_0.0.0.0:8000_--log-level_debug_app:app
root    234408    0.0    0.2    28888    21316    ?    S    09:50    0:00    06:58    /usr/local/bin/python3.10    /usr/local/bin/gunicorn_--workers_4_--bind_0.0.0.0:8000_--log-level_debug_app:app
root    234410    0.0    0.7    70068    61320    ?    S    09:50    0:00    06:58    /usr/local/bin/python3.10    /usr/local/bin/gunicorn_--workers_4_--bind_0.0.0.0:8000_--log-level_debug_app:app
root    234411    0.0    0.7    71088    61356    ?    S    09:50    0:00    06:58    /usr/local/bin/python3.10    /usr/local/bin/gunicorn_--workers_4_--bind_0.0.0.0:8000_--log-level_debug_app:app
root    234412    0.0    0.7    69904    60744    ?    S    09:50    0:00    06:58    /usr/local/bin/python3.10    /usr/local/bin/gunicorn_--workers_4_--bind_0.0.0.0:8000_--log-level_debug_app:app
root    234413    0.0    0.7    70928    61440    ?    S    09:50    0:00    06:57    /usr/local/bin/python3.10    /usr/local/bin/gunicorn_--workers_4_--bind_0.0.0.0:8000_--log-level_debug_app:app
root    234437    0.0    0.0    0    0    ?    I    09:50    0:00    06:55    [kworker/1:1-ata_sff]    <noArgs>
pentester    234677    4.8    5.7    3135804    468640    ?    Sl    09:50    0:19    06:34    /usr/lib/firefox-esr/firefox-esr    <noArgs>
pentester    234682    0.0    0.0    20868    3140    ?    Sl    09:50    0:00    06:34    /usr/lib/firefox-esr/crashhelper    234677_9_/tmp/_11
pentester    234756    0.0    0.5    235288    43992    ?    Sl    09:50    0:00    06:33    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:26899_-prefMapHandle_1:268749_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{74391b56-beae-413a-a384-76edf0f7afa1}_-parentPid_234677_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_1_socket
pentester    234788    0.1    1.2    2465680    102436    ?    Sl    09:50    0:00    06:33    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:27829_-prefMapHandle_1:268749_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{4958825c-c1a3-4811-89d8-0a3cfd63c337}_-parentPid_234677_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_2_tab
pentester    234793    0.0    0.6    373380    51496    ?    Sl    09:50    0:00    06:33    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:27874_-prefMapHandle_1:268749_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{a168bb03-9e74-419c-a95b-7df133385df5}_-parentPid_234677_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_3_rdd
pentester    234824    0.1    1.4    2465796    116240    ?    Sl    09:50    0:00    06:33    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:28055_-prefMapHandle_1:268749_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{8977c468-d385-4740-bd58-634682a70a9c}_-parentPid_234677_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_4_tab
pentester    234906    0.0    0.5    232684    41824    ?    Sl    09:50    0:00    06:31    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-sandboxingKind_0_-prefsHandle_0:39185_-prefMapHandle_1:268749_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{c673b362-b30f-4255-bf54-8cacef89b4a9}_-parentPid_234677_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_5_utility
pentester    234914    0.2    1.6    2506836    133936    ?    Sl    09:50    0:01    06:31    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37509_-prefMapHandle_1:268749_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{ccddd064-3e1c-45f1-b53f-85f5923db70f}_-parentPid_234677_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_6_tab
pentester    234983    0.2    1.6    2501680    138176    ?    Sl    09:50    0:00    06:31    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:39588_-prefMapHandle_1:268749_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{65fab911-2191-483f-9f9a-8e506df9efab}_-parentPid_234677_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_9_tab
root    237234    0.0    0.0    0    0    ?    I    09:52    0:00    04:25    [kworker/u17:2-events_unbound]    <noArgs>
pentester    237515    0.0    0.0    7180    3472    pts/2    S+    09:52    0:00    04:17    /bin/bash    ./cleanup.sh
root    237961    0.0    0.0    0    0    ?    I    09:52    0:00    04:06    [kworker/u18:6]    <noArgs>
root    237962    0.0    0.0    0    0    ?    I    09:52    0:00    04:06    [kworker/u18:7]    <noArgs>
root    237967    0.0    0.0    20160    7504    pts/2    S+    09:52    0:00    04:05    /usr/bin/sudo    /usr/bin/docker_container_prune
root    237969    0.0    0.0    20160    2512    pts/0    Ss    09:52    0:00    04:05    /usr/bin/sudo    /usr/bin/docker_container_prune
root    237970    0.0    0.3    1774800    32212    pts/0    Sl+    09:52    0:00    04:05    /usr/bin/docker    container_prune
root    238748    0.0    0.0    0    0    ?    I    09:53    0:00    03:26    [kworker/0:0-ata_sff]    <noArgs>
root    238948    0.0    0.0    0    0    ?    I    09:53    0:00    03:16    [kworker/2:2-ata_sff]    <noArgs>
root    239401    0.0    0.0    0    0    ?    S    09:53    0:00    03:07    [psimon]    <noArgs>
root    240417    0.0    0.0    0    0    ?    I    09:54    0:00    02:07    [kworker/3:0-events]    <noArgs>
root    240734    0.0    0.0    0    0    ?    I    09:55    0:00    01:35    [kworker/1:0-ata_sff]    <noArgs>
pentester    240795    0.1    0.9    2430540    80540    ?    Sl    09:55    0:00    01:30    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:42015_-prefMapHandle_1:268749_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{a6fa0f31-2f9e-4f51-b571-809dec10e073}_-parentPid_234677_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_11_tab
pentester    240796    0.1    0.9    2430540    80728    ?    Sl    09:55    0:00    01:30    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:42015_-prefMapHandle_1:268749_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{d3e1de75-2676-46df-99b9-c72ff377e21a}_-parentPid_234677_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_12_tab
pentester    240864    0.1    0.9    2430540    80464    ?    Sl    09:55    0:00    01:27    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:42015_-prefMapHandle_1:268749_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{161e34ff-1cb5-47cc-88a1-8065f520c491}_-parentPid_234677_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_13_tab
pentester    241471    0.0    0.0    8200    5212    pts/3    S+    09:56    0:00    00:33    nano    users
pentester    241787    0.0    0.0    5588    2108    ?    S    09:56    0:00    00:08    sleep    10
root    241957    0.0    0.0    2688    1760    ?    S    09:57    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    241958    0.0    0.0    2688    1876    ?    S    09:57    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    241979    100    0.0    9636    4396    ?    R    09:57    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    241980    0.0    0.0    5592    1940    ?    S    09:57    0:00    00:00    tee    /dev/null
root    241981    0.0    0.0    9472    4228    ?    S    09:57    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24644    15304    ?    Ss    Jan08    0:02    23:50:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    R    Jan08    0:01    23:50:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/2]    <noArgs>
root    31    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:34    [kworker/2:0-events]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/3:0H-kblockd]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:50:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:34    [kworker/1:1-events]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/1:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/2:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u25:0]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/0:1H-kblockd]    <noArgs>
root    248    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:33    [kworker/0:2-events]    <noArgs>
root    259    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-ata_sff]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [scsi_eh_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    263    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [scsi_eh_1]    <noArgs>
root    264    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    303    0.0    0.0    0    0    ?    S    Jan08    0:01    23:50:32    [jbd2/vda1-8]    <noArgs>
root    304    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [hwrng]    <noArgs>
root    384    0.0    0.2    41984    20692    ?    Ss    Jan08    0:00    23:50:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7408    ?    Ssl    Jan08    0:00    23:50:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    421    0.0    0.1    37452    12144    ?    Ss    Jan08    0:00    23:50:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:30    [psimon]    <noArgs>
root    563    0.0    0.0    8388    7732    ?    Ss    Jan08    0:01    23:50:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:50:29    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10536    2504    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [DHCP6_proxy]_fe80::bf05:4271:85f4:474a
dhcpcd    629    0.0    0.0    10536    2248    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.202
dhcpcd    648    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:50:22    dhcpcd:    [BOOTP_proxy]_10.0.254.202
root    741    0.0    0.0    309036    7232    ?    Ssl    Jan08    0:00    23:50:22    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2716    ?    Ss    Jan08    0:00    23:50:22    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9204    5628    ?    Ss    Jan08    0:00    23:50:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382300    9788    ?    Ssl    Jan08    0:01    23:50:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3972    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/qemu-ga    <noArgs>
root    751    0.0    0.1    18260    8816    ?    Ss    Jan08    0:00    23:50:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    774    0.0    0.2    336448    18992    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    391064    12424    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/ModemManager    <noArgs>
root    818    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:22    [kworker/3:2H-kblockd]    <noArgs>
root    839    0.0    0.0    381364    7764    ?    Ssl    Jan08    0:00    23:50:21    /usr/sbin/lightdm    <noArgs>
root    843    0.0    0.0    16356    2244    ?    S    Jan08    0:00    23:50:21    /usr/sbin/xrdp-sesman    <noArgs>
root    853    0.0    0.2    1978808    20312    ?    Ssl    Jan08    0:19    23:50:21    /laforge.bin    <noArgs>
xrdp    876    0.0    0.0    15652    2380    ?    S    Jan08    0:00    23:50:21    /usr/sbin/xrdp    <noArgs>
root    878    0.0    1.3    915128    105856    tty7    Ssl+    Jan08    0:02    23:50:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    880    0.0    0.0    8124    2504    tty1    Ss+    Jan08    0:00    23:50:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    902    0.0    0.0    169620    8040    ?    Sl    Jan08    0:00    23:50:20    lightdm    --session-child_17_20
lightdm    908    0.0    0.1    22464    12912    ?    Ss    Jan08    0:00    23:50:20    /usr/lib/systemd/systemd    --user
root    910    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:20    [psimon]    <noArgs>
lightdm    913    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:50:20    (sd-pam)    <noArgs>
lightdm    934    0.0    0.0    8348    4688    ?    Ss    Jan08    0:00    23:50:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    935    0.0    0.1    101256    10760    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/pipewire    <noArgs>
lightdm    936    0.0    1.2    666648    105364    ?    Ssl    Jan08    0:16    23:50:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    938    0.0    0.0    21492    3144    ?    SNsl    Jan08    0:00    23:50:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    939    0.0    0.1    479288    16116    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/wireplumber    <noArgs>
lightdm    940    0.0    0.0    84704    5128    ?    Ssl    Jan08    0:00    23:50:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    941    0.0    0.1    98776    8320    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    966    0.0    0.0    381080    7356    ?    Ssl    Jan08    0:00    23:50:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    976    0.0    0.0    8208    4480    ?    S    Jan08    0:00    23:50:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_13_--address=unix:path=/run/user/123/at-spi/bus
lightdm    983    0.0    0.1    312816    8176    ?    Ssl    Jan08    0:00    23:50:20    /usr/libexec/gvfsd    <noArgs>
lightdm    994    0.0    0.0    398408    7440    ?    Sl    Jan08    0:00    23:50:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1030    0.0    0.0    14372    5756    ?    S    Jan08    0:00    23:50:19    lightdm    --session-child_13_20
lightdm    1032    0.0    0.0    168772    7044    ?    Sl    Jan08    0:00    23:50:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1063    0.2    1.8    379824    150992    ?    Sl    Jan08    3:29    23:50:18    splunkd    -p_8089_start
root    1066    0.0    0.2    135648    18040    ?    Ss    Jan08    0:04    23:50:18    [splunkd    pid=1063]_splunkd_-p_8089_start_[process-runner]
root    1899    0.0    0.0    2688    1808    ?    S    Jan08    0:00    23:49:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1900    0.1    10.2    1414160    835804    ?    Sl    Jan08    1:47    23:49:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    96837    0.0    0.0    0    0    ?    I    Jan08    0:00    13:50:22    [kworker/u20:1-events_unbound]    <noArgs>
root    176491    0.0    0.0    0    0    ?    I    04:22    0:00    05:34:36    [kworker/3:1-events]    <noArgs>
root    187413    0.0    0.0    0    0    ?    I    05:32    0:00    04:24:46    [kworker/u19:0-writeback]    <noArgs>
root    195746    0.0    0.0    0    0    ?    I    06:23    0:00    03:33:56    [kworker/u18:1-flush-254:0]    <noArgs>
root    199034    0.0    0.0    0    0    ?    I    06:45    0:00    03:11:30    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    210315    0.0    0.0    0    0    ?    I    07:56    0:00    02:00:36    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    214859    0.0    0.0    0    0    ?    I    08:23    0:00    01:33:53    [kworker/u18:2]    <noArgs>
root    220538    0.0    0.0    0    0    ?    I    09:01    0:00    55:32    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    223385    0.0    0.0    0    0    ?    I    09:17    0:00    39:29    [kworker/u20:0-flush-254:0]    <noArgs>
root    226610    0.0    0.0    0    0    ?    I    09:37    0:00    19:46    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    227031    0.0    0.0    0    0    ?    I    09:40    0:00    16:30    [kworker/u19:2-flush-254:0]    <noArgs>
root    228209    0.0    0.0    0    0    ?    I    09:48    0:00    08:21    [kworker/1:0-ata_sff]    <noArgs>
root    228210    0.0    0.0    0    0    ?    I    09:48    0:00    08:19    [kworker/0:1-ata_sff]    <noArgs>
root    228241    0.0    0.0    0    0    ?    I    09:49    0:00    08:01    [kworker/3:0-ata_sff]    <noArgs>
root    228408    0.0    0.0    0    0    ?    I    09:50    0:00    06:10    [kworker/2:1-ata_sff]    <noArgs>
root    229203    0.0    0.0    0    0    ?    I    09:53    0:00    03:09    [kworker/0:0-ata_sff]    <noArgs>
root    229204    0.0    0.0    0    0    ?    I    09:53    0:00    03:05    [kworker/1:2-ata_sff]    <noArgs>
root    229250    0.0    0.0    0    0    ?    I    09:54    0:00    02:40    [kworker/3:2-ata_sff]    <noArgs>
root    229405    0.0    0.0    0    0    ?    I    09:56    0:00    00:57    [kworker/2:2-ata_sff]    <noArgs>
root    229605    0.0    0.0    2688    1736    ?    S    09:57    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229606    0.0    0.0    2688    1836    ?    S    09:57    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229627    0.0    0.0    9372    4148    ?    R    09:57    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    229628    0.0    0.0    5592    1960    ?    S    09:57    0:00    00:00    tee    /dev/null
root    229629    0.0    0.0    9472    3992    ?    S    09:57    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}