_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24684    14936    ?    Ss    Jan08    0:02    23:50:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-netns]    <noArgs>
root    9    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:34    [kworker/0:0-events]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:50:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/3:0H-events_highpri]    <noArgs>
root    40    0.0    0.0    0    0    ?    I    Jan08    0:01    23:50:34    [kworker/u18:0-ext4-rsv-conversion]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:50:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:34    [kworker/1:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-devfreq_wq]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u25:0]    <noArgs>
root    172    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/3:1H-kblockd]    <noArgs>
root    200    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/1:1H-kblockd]    <noArgs>
root    202    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/0:1H-kblockd]    <noArgs>
root    243    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-ata_sff]    <noArgs>
root    247    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [scsi_eh_0]    <noArgs>
root    248    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    249    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [scsi_eh_1]    <noArgs>
root    250    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    301    0.0    0.0    0    0    ?    S    Jan08    0:01    23:50:32    [jbd2/vda1-8]    <noArgs>
root    302    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    326    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [hwrng]    <noArgs>
root    328    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:31    [kworker/2:3-events_power_efficient]    <noArgs>
root    380    0.0    0.2    41980    20864    ?    Ss    Jan08    0:00    23:50:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    411    0.0    0.0    90112    7408    ?    Ssl    Jan08    0:00    23:50:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    417    0.0    0.1    37452    12100    ?    Ss    Jan08    0:00    23:50:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    426    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:30    [psimon]    <noArgs>
root    472    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:30    [kworker/u18:2-flush-254:0]    <noArgs>
root    557    0.0    0.0    8388    7728    ?    Ss    Jan08    0:01    23:50:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10528    4488    ?    S    Jan08    0:00    23:50:29    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10536    2628    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2288    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2228    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10536    2568    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [DHCP6_proxy]_fe80::d3a5:27d9:580d:dc33
dhcpcd    629    0.0    0.0    10536    2440    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.206
dhcpcd    648    0.0    0.0    10536    2568    ?    S    Jan08    0:00    23:50:22    dhcpcd:    [BOOTP_proxy]_10.0.254.206
root    741    0.0    0.0    309036    7128    ?    Ssl    Jan08    0:00    23:50:22    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2776    ?    Ss    Jan08    0:00    23:50:22    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9076    5484    ?    Ss    Jan08    0:00    23:50:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382300    9820    ?    Ssl    Jan08    0:01    23:50:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    4028    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18260    8816    ?    Ss    Jan08    0:00    23:50:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    772    0.0    0.2    336476    18864    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    391060    12324    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/ModemManager    <noArgs>
root    837    0.0    0.0    381356    7764    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/lightdm    <noArgs>
root    848    0.0    0.2    1904820    20752    ?    Ssl    Jan08    0:19    23:50:22    /laforge.bin    <noArgs>
root    851    0.0    0.0    16356    2268    ?    S    Jan08    0:00    23:50:22    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    876    0.0    0.0    15652    2444    ?    S    Jan08    0:00    23:50:22    /usr/sbin/xrdp    <noArgs>
root    878    0.0    1.3    915132    107764    tty7    Ssl+    Jan08    0:02    23:50:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2676    tty1    Ss+    Jan08    0:00    23:50:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    902    0.0    0.1    169620    8196    ?    Sl    Jan08    0:00    23:50:21    lightdm    --session-child_17_20
root    907    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:21    [psimon]    <noArgs>
lightdm    909    0.0    0.1    22880    13072    ?    Ss    Jan08    0:00    23:50:21    /usr/lib/systemd/systemd    --user
lightdm    911    0.0    0.0    22712    3844    ?    S    Jan08    0:00    23:50:20    (sd-pam)    <noArgs>
lightdm    937    0.0    0.0    8348    4564    ?    Ss    Jan08    0:00    23:50:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    938    0.0    0.1    101208    10704    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/pipewire    <noArgs>
lightdm    939    0.0    1.2    666648    105488    ?    Ssl    Jan08    0:17    23:50:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    943    0.0    0.1    479280    15956    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/wireplumber    <noArgs>
lightdm    944    0.0    0.0    84704    5136    ?    Ssl    Jan08    0:00    23:50:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    945    0.0    0.1    98776    8184    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/pipewire-pulse    <noArgs>
rtkit    946    0.0    0.0    21492    3172    ?    SNsl    Jan08    0:00    23:50:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    969    0.0    0.0    381080    7316    ?    Ssl    Jan08    0:00    23:50:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    983    0.0    0.0    8208    4496    ?    S    Jan08    0:00    23:50:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    989    0.0    0.1    312816    8136    ?    Ssl    Jan08    0:00    23:50:20    /usr/libexec/gvfsd    <noArgs>
lightdm    1001    0.0    0.0    398408    7440    ?    Sl    Jan08    0:00    23:50:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1033    0.0    0.0    14372    5764    ?    S    Jan08    0:00    23:50:20    lightdm    --session-child_13_20
lightdm    1035    0.0    0.0    168772    7072    ?    Sl    Jan08    0:00    23:50:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1062    0.2    1.8    379824    151140    ?    Sl    Jan08    3:41    23:50:19    splunkd    -p_8089_start
root    1065    0.0    0.2    135648    17820    ?    Ss    Jan08    0:04    23:50:19    [splunkd    pid=1062]_splunkd_-p_8089_start_[process-runner]
root    1903    0.0    0.0    2688    1744    ?    S    Jan08    0:00    23:49:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1904    0.1    10.3    1414160    841524    ?    Sl    Jan08    2:05    23:49:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    55863    0.0    0.0    0    0    ?    I    Jan08    0:00    18:09:24    [kworker/u19:3-kvfree_rcu_reclaim]    <noArgs>
root    173112    0.0    0.0    0    0    ?    I    04:02    0:00    05:52:39    [kworker/u17:2-flush-254:0]    <noArgs>
root    190691    0.0    0.0    0    0    ?    I    05:50    0:00    04:04:34    [kworker/u19:0-ext4-rsv-conversion]    <noArgs>
root    203227    0.0    0.0    0    0    ?    I    07:09    0:00    02:45:24    [kworker/u17:0-flush-254:0]    <noArgs>
root    215440    0.0    0.0    0    0    ?    I    08:25    0:00    01:29:14    [kworker/3:2-events]    <noArgs>
root    217041    0.0    0.0    0    0    ?    I    08:35    0:00    01:19:32    [kworker/u17:1]    <noArgs>
root    221906    0.0    0.0    0    0    ?    I    09:05    0:00    49:32    [kworker/u18:1-events_unbound]    <noArgs>
root    222004    0.0    0.0    0    0    ?    I    09:06    0:00    48:46    [kworker/u20:2-flush-254:0]    <noArgs>
root    224365    0.0    0.0    0    0    ?    I    09:20    0:00    34:01    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    227058    0.0    0.0    0    0    ?    I    09:39    0:00    15:23    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    227655    0.0    0.0    0    0    ?    I    09:43    0:00    11:17    [kworker/0:1-ata_sff]    <noArgs>
root    228027    0.0    0.0    0    0    ?    I    09:45    0:00    09:40    [kworker/2:1-ata_sff]    <noArgs>
root    228103    0.0    0.0    0    0    ?    I    09:46    0:00    08:51    [kworker/1:2-ata_sff]    <noArgs>
root    228284    0.0    0.0    0    0    ?    I    09:48    0:00    06:48    [kworker/3:0-ata_sff]    <noArgs>
root    228999    0.0    0.0    0    0    ?    I    09:50    0:00    04:31    [kworker/2:0-ata_sff]    <noArgs>
root    229096    0.0    0.0    0    0    ?    I    09:51    0:00    03:41    [kworker/1:0-ata_sff]    <noArgs>
root    229262    0.0    0.0    0    0    ?    I    09:53    0:00    01:48    [kworker/3:1-ata_sff]    <noArgs>
root    229354    0.0    0.0    0    0    ?    I    09:54    0:00    00:46    [kworker/0:2-ata_sff]    <noArgs>
xrdp    229385    0.0    0.1    47584    11852    ?    S    09:54    0:00    00:28    /usr/sbin/xrdp    <noArgs>
root    229540    0.0    0.0    2688    1740    ?    S    09:54    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229541    0.0    0.0    2688    1852    ?    S    09:54    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229562    0.0    0.0    9372    4128    ?    R    09:54    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    229563    0.0    0.0    5592    1964    ?    S    09:54    0:00    00:00    tee    /dev/null
root    229564    0.0    0.0    9472    3976    ?    S    09:54    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24664    14944    ?    Ss    Jan08    0:02    23:50:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:06    23:50:33    [kworker/0:1-events]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:50:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:03    23:50:33    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [irq/9-acpi]    <noArgs>
root    64    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:33    [kworker/2:1-events]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:33    [kworker/3:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:32    [kworker/1:2-events_power_efficient]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/1:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u25:0]    <noArgs>
root    200    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/3:1H-kblockd]    <noArgs>
root    215    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/0:1H-kblockd]    <noArgs>
root    256    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ata_sff]    <noArgs>
root    258    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [scsi_eh_0]    <noArgs>
root    259    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [scsi_eh_1]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    299    0.0    0.0    0    0    ?    S    Jan08    0:01    23:50:31    [jbd2/vda1-8]    <noArgs>
root    300    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    325    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:30    [hwrng]    <noArgs>
root    380    0.0    0.2    41984    20740    ?    Ss    Jan08    0:00    23:50:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    411    0.0    0.0    90112    7456    ?    Ssl    Jan08    0:00    23:50:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    415    0.0    0.1    37452    12108    ?    Ss    Jan08    0:00    23:50:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    424    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:29    [psimon]    <noArgs>
root    558    0.0    0.0    8388    6444    ?    Ss    Jan08    0:01    23:50:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    604    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:50:28    dhcpcd:    eth0_[ip4]_[ip6]
root    605    0.0    0.0    10536    2444    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    606    0.0    0.0    10516    2048    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    609    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:28    [kworker/R-rpciod]    <noArgs>
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:28    [kworker/R-xprtiod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    625    0.0    0.0    10536    2248    ?    S    Jan08    0:00    23:50:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.202
dhcpcd    626    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:50:26    dhcpcd:    [DHCP6_proxy]_fe80::85e3:a89b:3590:9ab8
dhcpcd    645    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:50:22    dhcpcd:    [BOOTP_proxy]_10.0.254.202
root    738    0.0    0.0    309036    7148    ?    Ssl    Jan08    0:00    23:50:22    /usr/libexec/accounts-daemon    <noArgs>
root    740    0.0    0.0    6876    2792    ?    Ss    Jan08    0:00    23:50:22    /usr/sbin/cron    -f
messagebus    741    0.0    0.0    9072    5536    ?    Ss    Jan08    0:00    23:50:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    743    0.0    0.1    382300    9948    ?    Ssl    Jan08    0:02    23:50:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    744    0.0    0.0    80876    3956    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/qemu-ga    <noArgs>
root    748    0.0    0.1    18260    8820    ?    Ss    Jan08    0:00    23:50:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    780    0.0    0.2    336448    19008    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/NetworkManager    --no-daemon
root    807    0.0    0.1    391064    12356    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/ModemManager    <noArgs>
root    830    0.0    0.0    381364    7656    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/lightdm    <noArgs>
root    837    0.0    0.0    16356    2244    ?    S    Jan08    0:00    23:50:22    /usr/sbin/xrdp-sesman    <noArgs>
root    848    0.0    0.2    1978808    20444    ?    Ssl    Jan08    0:20    23:50:22    /laforge.bin    <noArgs>
xrdp    872    0.0    0.0    15652    2448    ?    S    Jan08    0:00    23:50:22    /usr/sbin/xrdp    <noArgs>
root    874    0.0    1.3    915132    107792    tty7    Ssl+    Jan08    0:02    23:50:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    875    0.0    0.0    8124    2516    tty1    Ss+    Jan08    0:00    23:50:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    897    0.0    0.1    169620    8196    ?    Sl    Jan08    0:00    23:50:21    lightdm    --session-child_17_20
lightdm    904    0.0    0.1    22868    13060    ?    Ss    Jan08    0:00    23:50:21    /usr/lib/systemd/systemd    --user
root    905    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:21    [psimon]    <noArgs>
lightdm    908    0.0    0.0    22712    3820    ?    S    Jan08    0:00    23:50:21    (sd-pam)    <noArgs>
root    928    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:20    [kworker/3:2H]    <noArgs>
lightdm    930    0.0    0.0    8348    4696    ?    Ss    Jan08    0:00    23:50:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    931    0.0    0.1    101224    10668    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/pipewire    <noArgs>
lightdm    932    0.0    1.2    666648    105560    ?    Ssl    Jan08    0:17    23:50:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    935    0.0    0.2    479364    16300    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/wireplumber    <noArgs>
lightdm    936    0.0    0.0    84704    5280    ?    Ssl    Jan08    0:00    23:50:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    937    0.0    0.0    98776    8116    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/pipewire-pulse    <noArgs>
rtkit    940    0.0    0.0    21492    3196    ?    SNsl    Jan08    0:00    23:50:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    962    0.0    0.0    381080    7296    ?    Ssl    Jan08    0:00    23:50:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    973    0.0    0.0    8208    4528    ?    S    Jan08    0:00    23:50:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    978    0.0    0.0    312816    8044    ?    Ssl    Jan08    0:00    23:50:20    /usr/libexec/gvfsd    <noArgs>
lightdm    990    0.0    0.0    398408    7284    ?    Sl    Jan08    0:00    23:50:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1028    0.0    0.0    14372    5712    ?    S    Jan08    0:00    23:50:20    lightdm    --session-child_13_20
lightdm    1031    0.0    0.0    168772    7116    ?    Sl    Jan08    0:00    23:50:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1059    0.2    1.8    375728    147828    ?    Sl    Jan08    4:05    23:50:19    splunkd    -p_8089_start
root    1062    0.0    0.2    135648    17812    ?    Ss    Jan08    0:04    23:50:19    [splunkd    pid=1059]_splunkd_-p_8089_start_[process-runner]
root    1899    0.0    0.0    2688    1804    ?    S    Jan08    0:00    23:49:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1900    0.1    10.2    1414160    831648    ?    Sl    Jan08    2:14    23:49:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    106325    0.0    0.0    0    0    ?    I    Jan08    0:00    12:51:44    [kworker/u20:0-flush-254:0]    <noArgs>
root    126375    0.0    0.0    0    0    ?    I    Jan08    0:00    10:49:13    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    138671    0.0    0.0    0    0    ?    I    00:24    0:00    09:30:23    [kworker/u19:1-flush-254:0]    <noArgs>
root    141031    0.0    0.0    0    0    ?    I    00:39    0:00    09:15:37    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    158463    0.0    0.0    0    0    ?    I    02:29    0:00    07:25:18    [kworker/u18:1-events_unbound]    <noArgs>
root    160148    0.0    0.0    0    0    ?    I    02:39    0:00    07:15:23    [kworker/u20:1-flush-254:0]    <noArgs>
root    166994    0.0    0.0    0    0    ?    I    03:20    0:00    06:34:11    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    171629    0.0    0.0    0    0    ?    I    03:50    0:00    06:04:36    [kworker/u19:2-events_unbound]    <noArgs>
root    198066    0.0    0.0    0    0    ?    I    06:35    0:00    03:19:09    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    200440    0.0    0.0    0    0    ?    I    06:50    0:00    03:04:05    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
root    201176    0.0    0.0    0    0    ?    I    06:56    0:00    02:58:29    [kworker/u18:2-ext4-rsv-conversion]    <noArgs>
root    203297    0.0    0.0    0    0    ?    I    07:09    0:00    02:45:23    [kworker/u18:3-flush-254:0]    <noArgs>
root    228089    0.0    0.0    0    0    ?    I    09:45    0:00    09:38    [kworker/0:2-mm_percpu_wq]    <noArgs>
root    228180    0.0    0.0    0    0    ?    I    09:46    0:00    08:35    [kworker/2:2-ata_sff]    <noArgs>
root    228211    0.0    0.0    0    0    ?    I    09:46    0:00    08:19    [kworker/3:0-ata_sff]    <noArgs>
root    228460    0.0    0.0    0    0    ?    I    09:48    0:00    06:08    [kworker/1:1-ata_sff]    <noArgs>
root    229127    0.0    0.0    0    0    ?    I    09:50    0:00    04:29    [kworker/0:0-ata_sff]    <noArgs>
root    229242    0.0    0.0    0    0    ?    I    09:51    0:00    03:13    [kworker/2:0-ata_sff]    <noArgs>
root    229258    0.0    0.0    0    0    ?    I    09:51    0:00    03:03    [kworker/3:2-ata_sff]    <noArgs>
root    229454    0.0    0.0    0    0    ?    I    09:53    0:00    00:58    [kworker/1:0-ata_sff]    <noArgs>
root    229654    0.0    0.0    2688    1760    ?    S    09:54    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229655    0.0    0.0    2688    1864    ?    S    09:54    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229676    0.0    0.0    9372    4244    ?    R    09:54    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    229677    0.0    0.0    5592    1912    ?    S    09:54    0:00    00:00    tee    /dev/null
root    229678    0.0    0.0    9472    4004    ?    S    09:54    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24704    14948    ?    Ss    Jan08    0:02    23:50:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:33    [kworker/0:1-ata_sff]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:50:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/2]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/3:0H-events_highpri]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:50:33    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:33    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:33    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:03    23:50:33    [kworker/3:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:33    [kworker/2:1-ata_sff]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-edac-poller]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/3:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kswapd0]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kthrotld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-mld]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    87    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/2:1H-kblockd]    <noArgs>
root    88    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:32    [kworker/u16:1-netns]    <noArgs>
root    93    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-kstrp]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u21:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u22:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u23:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u24:0]    <noArgs>
root    103    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u25:0]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/1:1H-kblockd]    <noArgs>
root    224    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/0:1H-kblockd]    <noArgs>
root    236    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:32    [kworker/1:2-ata_sff]    <noArgs>
root    237    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ata_sff]    <noArgs>
root    252    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [scsi_eh_0]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    258    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [scsi_eh_1]    <noArgs>
root    259    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:50:31    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [hwrng]    <noArgs>
root    384    0.0    0.3    50352    24684    ?    Ss    Jan08    0:00    23:50:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    416    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:50:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12272    ?    Ss    Jan08    0:00    23:50:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:29    [psimon]    <noArgs>
root    566    0.0    0.0    8388    5232    ?    Ss    Jan08    0:01    23:50:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    606    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:50:28    dhcpcd:    eth0_[ip4]_[ip6]
root    607    0.0    0.0    10532    2496    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2100    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2104    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:28    [kworker/R-rpciod]    <noArgs>
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:28    [kworker/R-xprtiod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10532    2240    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.205
dhcpcd    628    0.0    0.0    10532    2368    ?    S    Jan08    0:00    23:50:27    dhcpcd:    [DHCP6_proxy]_fe80::d79:ba5e:1844:5bea
dhcpcd    647    0.0    0.0    10532    2368    ?    S    Jan08    0:00    23:50:22    dhcpcd:    [BOOTP_proxy]_10.0.254.205
root    740    0.0    0.0    309036    7292    ?    Ssl    Jan08    0:00    23:50:22    /usr/libexec/accounts-daemon    <noArgs>
root    742    0.0    0.0    6876    2768    ?    Ss    Jan08    0:00    23:50:22    /usr/sbin/cron    -f
messagebus    743    0.0    0.0    10068    6536    ?    Ss    Jan08    0:00    23:50:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382480    9884    ?    Ssl    Jan08    0:01    23:50:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3976    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18488    9160    ?    Ss    Jan08    0:00    23:50:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    775    0.0    0.2    336464    18924    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    317328    12436    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/ModemManager    <noArgs>
root    837    0.0    0.0    381356    7784    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/lightdm    <noArgs>
root    842    0.0    0.0    18320    4216    ?    S    Jan08    0:00    23:50:22    /usr/sbin/xrdp-sesman    <noArgs>
root    844    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:22    [kworker/2:2H-kblockd]    <noArgs>
root    855    0.0    0.2    1905076    20740    ?    Ssl    Jan08    0:19    23:50:22    /laforge.bin    <noArgs>
xrdp    870    0.0    0.0    15652    2420    ?    S    Jan08    0:00    23:50:22    /usr/sbin/xrdp    <noArgs>
root    880    0.0    1.3    915128    106032    tty7    Ssl+    Jan08    0:02    23:50:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    882    0.0    0.0    8124    2712    tty1    Ss+    Jan08    0:00    23:50:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    904    0.0    0.0    169620    8068    ?    Sl    Jan08    0:00    23:50:21    lightdm    --session-child_17_20
root    909    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:21    [psimon]    <noArgs>
lightdm    911    0.0    0.1    22456    13064    ?    Ss    Jan08    0:00    23:50:21    /usr/lib/systemd/systemd    --user
lightdm    913    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:50:21    (sd-pam)    <noArgs>
lightdm    937    0.0    0.0    8216    4672    ?    Ss    Jan08    0:00    23:50:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    938    0.0    0.1    101256    10944    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/pipewire    <noArgs>
lightdm    939    0.0    1.2    666648    105560    ?    Ssl    Jan08    0:16    23:50:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    940    0.0    0.1    479268    16108    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/wireplumber    <noArgs>
lightdm    941    0.0    0.0    84704    5244    ?    Ssl    Jan08    0:00    23:50:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    942    0.0    0.0    98776    8092    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/pipewire-pulse    <noArgs>
rtkit    946    0.0    0.0    21492    3152    ?    SNsl    Jan08    0:00    23:50:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    969    0.0    0.0    381080    7280    ?    Ssl    Jan08    0:00    23:50:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    978    0.0    0.0    8208    4424    ?    S    Jan08    0:00    23:50:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_13_--address=unix:path=/run/user/123/at-spi/bus
lightdm    982    0.0    0.1    312816    8180    ?    Ssl    Jan08    0:00    23:50:20    /usr/libexec/gvfsd    <noArgs>
lightdm    994    0.0    0.0    398408    7328    ?    Sl    Jan08    0:00    23:50:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1034    0.0    0.0    14372    5676    ?    S    Jan08    0:00    23:50:20    lightdm    --session-child_13_20
lightdm    1036    0.0    0.0    168772    7120    ?    Sl    Jan08    0:00    23:50:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1067    0.2    1.8    379824    150944    ?    Sl    Jan08    3:31    23:50:19    splunkd    -p_8089_start
root    1070    0.0    0.2    135648    17896    ?    Ss    Jan08    0:04    23:50:19    [splunkd    pid=1067]_splunkd_-p_8089_start_[process-runner]
root    1909    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:49:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1910    0.1    10.6    1414160    866924    ?    Sl    Jan08    1:47    23:49:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    55134    0.0    0.0    0    0    ?    I    Jan08    0:00    18:14:49    [kworker/u19:0-flush-254:0]    <noArgs>
root    78559    0.0    0.0    0    0    ?    I    Jan08    0:00    15:48:17    [kworker/u20:1-events_unbound]    <noArgs>
root    159696    0.0    0.0    0    0    ?    I    02:35    0:00    07:19:19    [kworker/u20:2-flush-254:0]    <noArgs>
root    164573    0.0    0.0    0    0    ?    I    03:05    0:00    06:48:55    [kworker/u18:2-flush-254:0]    <noArgs>
root    166202    0.0    0.0    0    0    ?    I    03:18    0:00    06:36:27    [kworker/u18:0-flush-254:0]    <noArgs>
root    176461    0.0    0.0    0    0    ?    I    04:20    0:00    05:34:32    [kworker/u19:2-ext4-rsv-conversion]    <noArgs>
root    202855    0.0    0.0    0    0    ?    I    07:05    0:00    02:49:33    [kworker/u18:1-events_unbound]    <noArgs>
root    215507    0.0    0.0    0    0    ?    I    08:25    0:00    01:29:21    [kworker/u19:1-events_unbound]    <noArgs>
root    219562    0.0    0.0    0    0    ?    I    08:50    0:00    01:03:55    [kworker/u17:3-flush-254:0]    <noArgs>
root    224430    0.0    0.0    0    0    ?    I    09:20    0:00    33:58    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    225883    0.0    0.0    0    0    ?    I    09:32    0:00    22:49    [kworker/u17:1-ext4-rsv-conversion]    <noArgs>
root    228228    0.0    0.0    0    0    ?    I    09:46    0:00    08:03    [kworker/3:0-ata_sff]    <noArgs>
root    228364    0.0    0.0    0    0    ?    I    09:48    0:00    06:40    [kworker/2:0-mm_percpu_wq]    <noArgs>
root    228395    0.0    0.0    0    0    ?    I    09:48    0:00    06:18    [kworker/0:2-mm_percpu_wq]    <noArgs>
root    228426    0.0    0.0    0    0    ?    I    09:49    0:00    05:52    [kworker/1:1-events]    <noArgs>
xrdp    229148    2.8    0.4    62196    38568    ?    S    09:51    0:06    03:42    /usr/sbin/xrdp    <noArgs>
root    229239    0.0    0.0    0    0    ?    I    09:52    0:00    02:47    [kworker/3:2-ata_sff]    <noArgs>
root    229258    0.0    0.0    18320    4256    ?    S    09:52    0:00    02:32    /usr/sbin/xrdp-sesman    <noArgs>
pentester    229261    0.0    0.1    22908    13284    ?    Ss    09:52    0:00    02:32    /usr/lib/systemd/systemd    --user
pentester    229263    0.0    0.0    22592    3856    ?    S    09:52    0:00    02:32    (sd-pam)    <noArgs>
pentester    229283    0.1    0.0    8928    5704    ?    Ss    09:52    0:00    02:32    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    229284    0.2    1.2    630548    98036    ?    Sl    09:52    0:00    02:32    xfce4-session    <noArgs>
pentester    229285    1.6    1.8    399284    148052    ?    Sl    09:52    0:02    02:32    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    229286    0.0    0.0    97356    8088    ?    Ssl    09:52    0:00    02:32    /usr/bin/pipewire    <noArgs>
pentester    229289    0.0    0.0    7212    3456    ?    Ss    09:52    0:00    02:32    /usr/bin/mpris-proxy    <noArgs>
pentester    229290    0.0    0.1    399580    14336    ?    Ssl    09:52    0:00    02:32    /usr/bin/wireplumber    <noArgs>
pentester    229291    0.0    0.0    84704    5348    ?    Ssl    09:52    0:00    02:32    /usr/bin/pipewire    -c_filter-chain.conf
pentester    229293    0.0    0.1    99172    9048    ?    Ssl    09:52    0:00    02:32    /usr/bin/pipewire-pulse    <noArgs>
pentester    229315    0.0    0.0    95084    6236    ?    Sl    09:52    0:00    02:32    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    229407    0.0    0.0    10688    1856    ?    Ss    09:52    0:00    02:32    /usr/bin/ssh-agent    x-session-manager
pentester    229418    0.0    0.0    381172    7724    ?    Ssl    09:52    0:00    02:32    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    229425    0.0    0.0    8348    4816    ?    S    09:52    0:00    02:32    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    229429    0.0    0.0    307776    6692    ?    Ssl    09:52    0:00    02:32    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    229436    0.0    0.0    168784    7552    ?    Sl    09:52    0:00    02:31    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    229449    0.0    0.0    155488    3648    ?    SLsl    09:52    0:00    02:31    /usr/bin/gpg-agent    --supervised
pentester    229452    0.5    0.5    297312    48624    ?    Sl    09:52    0:00    02:31    xfwm4    <noArgs>
pentester    229457    0.0    0.1    312816    8168    ?    Ssl    09:52    0:00    02:31    /usr/libexec/gvfsd    <noArgs>
pentester    229463    0.0    0.0    398408    7380    ?    Sl    09:52    0:00    02:31    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    229472    0.0    0.3    348408    27428    ?    Sl    09:52    0:00    02:31    xfsettingsd    <noArgs>
pentester    229478    0.0    0.0    165276    5828    ?    Ssl    09:52    0:00    02:31    /usr/libexec/dconf-service    <noArgs>
pentester    229479    0.3    0.5    505984    43400    ?    Sl    09:52    0:00    02:31    xfce4-panel    <noArgs>
pentester    229488    0.0    0.3    420256    26216    ?    Sl    09:52    0:00    02:31    Thunar    --daemon
pentester    229501    0.3    0.8    663324    69580    ?    Sl    09:52    0:00    02:31    xfdesktop    <noArgs>
pentester    229506    0.1    0.5    428300    42696    ?    Sl    09:52    0:00    02:30    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    229511    0.0    0.0    7180    3404    ?    S    09:52    0:00    02:30    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    229516    0.0    0.2    405608    19468    ?    Sl    09:52    0:00    02:30    xfce4-power-manager    <noArgs>
pentester    229521    0.0    0.4    281552    35416    ?    Sl    09:52    0:00    02:30    xfce4-screensaver    <noArgs>
pentester    229523    0.0    0.4    606500    37820    ?    Sl    09:52    0:00    02:30    diodon    <noArgs>
pentester    229525    0.0    0.0    12432    2032    ?    Ssl    09:52    0:00    02:30    xcape    -e_Super_L_Control_L_Escape
pentester    229531    0.2    0.7    604468    61552    ?    Sl    09:52    0:00    02:30    /usr/bin/python3    /usr/bin/blueman-applet
pentester    229532    0.1    0.5    66232    41112    ?    S    09:52    0:00    02:30    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    229542    0.0    0.2    416260    21660    ?    Ssl    09:52    0:00    02:30    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    229547    0.0    0.2    265304    18488    ?    Sl    09:52    0:00    02:30    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    229572    0.0    0.0    308560    6540    ?    Sl    09:52    0:00    02:30    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    229578    0.0    0.1    922612    8764    ?    Sl    09:52    0:00    02:30    xiccd    <noArgs>
pentester    229594    0.0    0.5    586932    43224    ?    Sl    09:52    0:00    02:30    nm-applet    <noArgs>
colord    229608    0.0    0.1    317052    15192    ?    Ssl    09:52    0:00    02:30    /usr/libexec/colord    <noArgs>
pentester    229618    0.0    0.3    282408    28244    ?    SNsl    09:52    0:00    02:30    /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd    <noArgs>
pentester    229627    0.0    0.0    95896    7600    ?    Sl    09:52    0:00    02:30    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
root    229682    0.0    0.1    318520    10248    ?    Ssl    09:52    0:00    02:30    /usr/libexec/upowerd    <noArgs>
pentester    229690    0.0    0.1    458428    9948    ?    Ssl    09:52    0:00    02:30    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    229710    0.2    0.7    310940    61528    ?    Sl    09:52    0:00    02:30    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    229713    0.0    0.4    499532    38068    ?    Sl    09:52    0:00    02:30    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    229715    0.2    0.3    272796    29156    ?    Sl    09:52    0:00    02:30    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    229716    0.0    0.2    352692    20424    ?    Ssl    09:52    0:00    02:30    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    229717    0.0    0.4    359160    39240    ?    Sl    09:52    0:00    02:30    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    229725    0.0    0.4    425196    37488    ?    Sl    09:52    0:00    02:30    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    229726    0.0    0.4    286068    37604    ?    Sl    09:52    0:00    02:30    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    229747    0.0    0.4    425420    37536    ?    Sl    09:52    0:00    02:30    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    229814    0.0    0.1    538332    11984    ?    Ssl    09:52    0:00    02:29    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    229818    0.0    0.1    478372    13884    ?    Ssl    09:52    0:00    02:28    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    229830    0.0    0.0    307864    6624    ?    Ssl    09:52    0:00    02:28    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    229835    0.0    0.0    308884    7068    ?    Ssl    09:52    0:00    02:28    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    229840    0.0    0.0    307916    6788    ?    Ssl    09:52    0:00    02:28    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    229846    0.0    0.1    389944    8812    ?    Ssl    09:52    0:00    02:28    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    229867    0.0    0.0    168904    6748    ?    Ssl    09:52    0:00    02:28    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    229871    0.0    0.1    534256    9188    ?    Sl    09:52    0:00    02:28    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    229907    13.7    6.1    3217276    499612    ?    Sl    09:52    0:19    02:25    /usr/lib/firefox-esr/firefox-esr    <noArgs>
pentester    229912    0.0    0.0    20868    3136    ?    Sl    09:52    0:00    02:25    /usr/lib/firefox-esr/crashhelper    229907_9_/tmp/_11
pentester    229959    0.0    0.2    557252    19932    ?    Ssl    09:52    0:00    02:24    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    229969    0.0    0.0    308740    6888    ?    Ssl    09:52    0:00    02:24    /usr/libexec/xdg-permission-store    <noArgs>
pentester    229976    0.0    0.0    539704    7172    ?    Ssl    09:52    0:00    02:24    /usr/libexec/xdg-document-portal    <noArgs>
root    229983    0.0    0.0    2592    2012    ?    Ss    09:52    0:00    02:24    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    229986    0.0    0.2    479576    19832    ?    Ssl    09:52    0:00    02:24    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    230016    0.0    0.5    235304    43996    ?    Sl    09:52    0:00    02:24    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:26899_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{0aaff960-9cda-44a9-ba7d-95c21e58cbe2}_-parentPid_229907_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_1_socket
pentester    230056    0.3    1.2    2467728    103200    ?    Sl    09:52    0:00    02:23    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:27829_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{3ab2f66e-6180-40df-a0ad-fe996c1a6d12}_-parentPid_229907_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_2_tab
pentester    230061    0.0    0.6    373120    51448    ?    Sl    09:52    0:00    02:23    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:27874_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{c39b13fe-87cb-4b05-b4eb-0de84ce02b61}_-parentPid_229907_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_3_rdd
pentester    230098    0.4    1.4    2473484    121460    ?    Sl    09:52    0:00    02:23    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:28089_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{626efe2b-5704-41fc-b9fb-a34fd88f18f9}_-parentPid_229907_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_4_tab
pentester    230170    0.0    0.5    232684    41944    ?    Sl    09:52    0:00    02:21    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-sandboxingKind_0_-prefsHandle_0:39302_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{f71b3df3-b7ea-401e-a39d-5cb23b5f554a}_-parentPid_229907_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_5_utility
pentester    230198    0.5    1.4    2470464    116832    ?    Sl    09:52    0:00    02:21    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37829_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{ca31e1b8-b5b3-436d-93d9-3cdfdbaafb0b}_-parentPid_229907_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_7_tab
pentester    230257    0.4    1.6    2491216    135576    ?    Sl    09:52    0:00    02:21    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:39740_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{2fa71eab-1fcf-46b9-9b2e-6607639044ce}_-parentPid_229907_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_9_tab
root    230334    0.0    0.0    0    0    ?    I    09:52    0:00    02:17    [kworker/u17:0-flush-254:0]    <noArgs>
root    230711    0.0    0.0    0    0    ?    I    09:53    0:00    01:46    [kworker/u19:3]    <noArgs>
pentester    230784    0.1    0.9    2430540    80536    ?    Sl    09:53    0:00    01:41    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:42079_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{67d71bf3-2a85-447a-b53b-5f1e42206d9e}_-parentPid_229907_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_12_tab
pentester    230786    0.1    0.9    2430540    80492    ?    Sl    09:53    0:00    01:41    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:42079_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{2400d574-0c77-4d78-af1f-5f28f6ce50b3}_-parentPid_229907_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_13_tab
pentester    230852    0.1    0.9    2430540    80560    ?    Sl    09:53    0:00    01:38    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:42079_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{47b257c8-199c-4de0-ac31-bd46e626bd6b}_-parentPid_229907_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_14_tab
pentester    230894    0.3    0.7    793528    57324    ?    Sl    09:53    0:00    01:37    /usr/bin/qterminal    <noArgs>
pentester    230901    1.2    0.0    13932    7748    pts/0    Ss+    09:53    0:01    01:36    /usr/bin/zsh    <noArgs>
root    231070    0.0    0.0    0    0    ?    I    09:53    0:00    01:26    [kworker/2:2-ata_sff]    <noArgs>
root    231490    0.0    0.0    0    0    ?    I    09:54    0:00    00:48    [kworker/0:0-ata_sff]    <noArgs>
root    231584    0.0    0.0    0    0    ?    I    09:54    0:00    00:39    [kworker/1:0-mm_percpu_wq]    <noArgs>
pentester    232166    0.0    0.0    5588    1980    ?    S    09:54    0:00    00:00    sleep    10
root    232169    0.0    0.0    2688    1732    ?    S    09:54    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    232170    0.0    0.0    2688    1840    ?    S    09:54    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    232191    0.0    0.0    9504    4348    ?    R    09:54    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    232192    0.0    0.0    5592    1952    ?    S    09:54    0:00    00:00    tee    /dev/null
root    232193    0.0    0.0    9472    4116    ?    S    09:54    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}