_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24696    15316    ?    Ss    Jan08    0:02    23:40:32    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:32    [kworker/0:1-events]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:32    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/2:0H-kblockd]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:32    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:32    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:32    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:32    [kworker/1:1-events]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/3:1H-kblockd]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [kworker/u16:1]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u25:0]    <noArgs>
root    202    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/0:1H-kblockd]    <noArgs>
root    221    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/1:1H-kblockd]    <noArgs>
root    236    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-ata_sff]    <noArgs>
root    250    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [scsi_eh_0]    <noArgs>
root    251    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    252    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [scsi_eh_1]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    268    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:31    [kworker/3:2-ata_sff]    <noArgs>
root    302    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:30    [jbd2/vda1-8]    <noArgs>
root    303    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    328    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [hwrng]    <noArgs>
root    382    0.0    0.3    50356    24816    ?    Ss    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    414    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    419    0.0    0.1    37452    12272    ?    Ss    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:29    [psimon]    <noArgs>
root    560    0.0    0.0    8388    5260    ?    Ss    Jan08    0:01    23:40:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    606    0.0    0.0    10536    4528    ?    S    Jan08    0:00    23:40:28    dhcpcd:    eth0_[ip4]_[ip6]
root    607    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2076    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2140    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-rpciod]    <noArgs>
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-xprtiod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10540    2216    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    628    0.0    0.0    10540    2344    ?    S    Jan08    0:00    23:40:26    dhcpcd:    [DHCP6_proxy]_fe80::dcdc:4cfe:23b0:c82e
dhcpcd    647    0.0    0.0    10540    2344    ?    S    Jan08    0:00    23:40:23    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    740    0.0    0.0    309036    7164    ?    Ssl    Jan08    0:00    23:40:22    /usr/libexec/accounts-daemon    <noArgs>
root    742    0.0    0.0    6876    2796    ?    Ss    Jan08    0:00    23:40:22    /usr/sbin/cron    -f
messagebus    743    0.0    0.0    10128    6564    ?    Ss    Jan08    0:00    23:40:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382480    10140    ?    Ssl    Jan08    0:01    23:40:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3884    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18484    9148    ?    Ss    Jan08    0:00    23:40:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    793    0.0    0.2    336448    18944    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/NetworkManager    --no-daemon
root    810    0.0    0.1    391064    12300    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/ModemManager    <noArgs>
root    837    0.0    0.0    381356    7592    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/lightdm    <noArgs>
root    841    0.0    0.0    18320    4208    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp-sesman    <noArgs>
root    851    0.0    0.2    1978808    20584    ?    Ssl    Jan08    0:19    23:40:22    /laforge.bin    <noArgs>
xrdp    875    0.0    0.0    15652    2500    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp    <noArgs>
root    878    0.0    0.0    8124    2672    tty1    Ss+    Jan08    0:00    23:40:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    879    0.0    1.2    915132    102752    tty7    Ssl+    Jan08    0:02    23:40:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    901    0.0    0.1    169620    8136    ?    Sl    Jan08    0:00    23:40:21    lightdm    --session-child_17_20
root    906    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:21    [psimon]    <noArgs>
lightdm    908    0.0    0.1    22868    13032    ?    Ss    Jan08    0:00    23:40:21    /usr/lib/systemd/systemd    --user
lightdm    910    0.0    0.0    22712    3820    ?    S    Jan08    0:00    23:40:21    (sd-pam)    <noArgs>
lightdm    936    0.0    0.0    8348    4692    ?    Ss    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    937    0.0    0.1    101208    10724    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/pipewire    <noArgs>
lightdm    938    0.0    1.2    666648    105516    ?    Ssl    Jan08    0:15    23:40:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    940    0.0    0.1    479284    16028    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/wireplumber    <noArgs>
lightdm    941    0.0    0.0    84704    5068    ?    Ssl    Jan08    0:00    23:40:21    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    942    0.0    0.0    21492    3072    ?    SNsl    Jan08    0:00    23:40:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    943    0.0    0.1    98776    8140    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/pipewire-pulse    <noArgs>
lightdm    969    0.0    0.0    381080    7108    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    980    0.0    0.0    8208    4416    ?    S    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    986    0.0    0.0    312816    7936    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd    <noArgs>
lightdm    995    0.0    0.0    398408    7404    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1028    0.0    0.0    14372    5744    ?    S    Jan08    0:00    23:40:20    lightdm    --session-child_13_20
lightdm    1031    0.0    0.0    168772    7032    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1061    0.2    1.8    379824    149488    ?    Sl    Jan08    3:25    23:40:19    splunkd    -p_8089_start
root    1064    0.0    0.2    135648    18028    ?    Ss    Jan08    0:04    23:40:19    [splunkd    pid=1061]_splunkd_-p_8089_start_[process-runner]
root    1896    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1897    0.1    11.5    1479696    942620    ?    Sl    Jan08    1:46    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    49718    0.0    0.0    0    0    ?    I    Jan08    0:03    18:39:37    [kworker/2:2-events]    <noArgs>
root    103037    0.0    0.0    0    0    ?    I    Jan08    0:00    13:03:47    [kworker/u19:0-events_unbound]    <noArgs>
root    103253    0.0    0.0    0    0    ?    I    Jan08    0:00    13:01:27    [kworker/u18:0-flush-254:0]    <noArgs>
root    137569    0.0    0.0    0    0    ?    I    00:21    0:00    09:25:37    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    186260    0.0    0.0    0    0    ?    I    05:24    0:00    04:22:10    [kworker/u19:2-flush-254:0]    <noArgs>
root    193687    0.0    0.0    0    0    ?    I    06:11    0:00    03:35:29    [kworker/u20:1-flush-254:0]    <noArgs>
root    194873    0.0    0.0    0    0    ?    I    06:19    0:00    03:27:17    [kworker/u18:1-flush-254:0]    <noArgs>
root    195700    0.0    0.0    0    0    ?    I    06:23    0:00    03:23:58    [kworker/u20:0-events_unbound]    <noArgs>
root    200331    0.0    0.0    0    0    ?    I    06:52    0:00    02:54:35    [kworker/u18:2-events_unbound]    <noArgs>
root    203836    0.0    0.0    0    0    ?    I    07:15    0:00    02:31:27    [kworker/u20:2-flush-254:0]    <noArgs>
root    208541    0.0    0.0    0    0    ?    I    07:45    0:00    02:01:27    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    222019    0.0    0.0    0    0    ?    I    09:08    0:00    38:46    [kworker/u17:1-flush-254:0]    <noArgs>
root    226709    0.0    0.0    0    0    ?    I    09:38    0:00    08:56    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    226785    0.0    0.0    0    0    ?    I    09:38    0:00    08:08    [kworker/3:1-ata_sff]    <noArgs>
root    226998    0.0    0.0    0    0    ?    I    09:40    0:00    06:13    [kworker/2:0-ata_sff]    <noArgs>
root    227029    0.0    0.0    0    0    ?    I    09:41    0:00    05:55    [kworker/0:0-ata_sff]    <noArgs>
root    227045    0.0    0.0    0    0    ?    I    09:41    0:00    05:49    [kworker/1:0-ata_sff]    <noArgs>
xrdp    227459    3.7    0.4    61904    40528    ?    S    09:43    0:08    03:38    /usr/sbin/xrdp    <noArgs>
root    227520    0.0    0.0    0    0    ?    I    09:44    0:00    02:56    [kworker/3:0-events]    <noArgs>
root    227633    0.0    0.0    18320    4260    ?    S    09:45    0:00    01:49    /usr/sbin/xrdp-sesman    <noArgs>
pentester    227636    0.1    0.1    23084    13348    ?    Ss    09:45    0:00    01:49    /usr/lib/systemd/systemd    --user
pentester    227638    0.0    0.0    22592    3824    ?    S    09:45    0:00    01:49    (sd-pam)    <noArgs>
pentester    227658    0.1    0.0    8896    5688    ?    Ss    09:45    0:00    01:49    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    227659    0.0    0.0    97360    8024    ?    Ssl    09:45    0:00    01:49    /usr/bin/pipewire    <noArgs>
pentester    227660    0.2    1.2    630548    98320    ?    Sl    09:45    0:00    01:49    xfce4-session    <noArgs>
pentester    227661    2.5    1.9    408412    157048    ?    Sl    09:45    0:02    01:49    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    227664    0.0    0.0    7212    3592    ?    Ss    09:45    0:00    01:49    /usr/bin/mpris-proxy    <noArgs>
pentester    227665    0.0    0.1    399556    14284    ?    Ssl    09:45    0:00    01:49    /usr/bin/wireplumber    <noArgs>
pentester    227666    0.0    0.0    84704    5208    ?    Ssl    09:45    0:00    01:49    /usr/bin/pipewire    -c_filter-chain.conf
pentester    227667    0.0    0.1    99176    8796    ?    Ssl    09:45    0:00    01:49    /usr/bin/pipewire-pulse    <noArgs>
pentester    227690    0.0    0.0    95084    6164    ?    Sl    09:45    0:00    01:48    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    227767    0.0    0.0    10688    1860    ?    Ss    09:45    0:00    01:48    /usr/bin/ssh-agent    x-session-manager
pentester    227778    0.0    0.0    381172    7780    ?    Ssl    09:45    0:00    01:48    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    227785    0.0    0.0    8472    4764    ?    S    09:45    0:00    01:48    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    227789    0.1    0.0    307776    6704    ?    Ssl    09:45    0:00    01:48    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    227796    0.0    0.0    168784    7716    ?    Sl    09:45    0:00    01:48    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    227809    0.0    0.0    155488    3592    ?    SLsl    09:45    0:00    01:48    /usr/bin/gpg-agent    --supervised
pentester    227812    0.7    0.5    297312    48632    ?    Sl    09:45    0:00    01:48    xfwm4    <noArgs>
pentester    227817    0.0    0.1    312816    8280    ?    Ssl    09:45    0:00    01:48    /usr/libexec/gvfsd    <noArgs>
pentester    227823    0.0    0.0    398408    7508    ?    Sl    09:45    0:00    01:48    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    227832    0.1    0.3    348408    27116    ?    Sl    09:45    0:00    01:47    xfsettingsd    <noArgs>
pentester    227838    0.0    0.0    165276    5880    ?    Ssl    09:45    0:00    01:47    /usr/libexec/dconf-service    <noArgs>
pentester    227839    0.5    0.6    515536    52980    ?    Sl    09:45    0:00    01:47    xfce4-panel    <noArgs>
pentester    227848    0.0    0.3    420256    26456    ?    Sl    09:45    0:00    01:47    Thunar    --daemon
pentester    227861    0.4    0.8    663288    69176    ?    Sl    09:45    0:00    01:47    xfdesktop    <noArgs>
pentester    227866    0.1    0.5    502032    42688    ?    Sl    09:45    0:00    01:47    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    227871    0.0    0.0    7180    3280    ?    S    09:45    0:00    01:47    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    227876    0.0    0.2    405608    19404    ?    Sl    09:45    0:00    01:47    xfce4-power-manager    <noArgs>
pentester    227877    0.1    0.4    281548    35488    ?    Sl    09:45    0:00    01:47    xfce4-screensaver    <noArgs>
pentester    227883    0.0    0.3    527840    26976    ?    Sl    09:45    0:00    01:47    diodon    <noArgs>
pentester    227885    0.0    0.0    12432    2092    ?    Ssl    09:45    0:00    01:47    xcape    -e_Super_L_Control_L_Escape
pentester    227891    0.3    0.7    604468    61916    ?    Sl    09:45    0:00    01:47    /usr/bin/python3    /usr/bin/blueman-applet
pentester    227895    0.1    0.5    66232    41128    ?    S    09:45    0:00    01:47    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    227898    0.0    0.2    481796    21668    ?    Ssl    09:45    0:00    01:47    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    227915    0.0    0.2    265304    18360    ?    Sl    09:45    0:00    01:47    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    227934    0.0    0.0    308560    6672    ?    Sl    09:45    0:00    01:47    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    227935    0.0    0.1    922480    9112    ?    Sl    09:45    0:00    01:47    xiccd    <noArgs>
pentester    227938    0.0    0.3    282396    28100    ?    SNsl    09:45    0:00    01:47    /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd    <noArgs>
pentester    227948    0.0    0.5    586928    43016    ?    Sl    09:45    0:00    01:47    nm-applet    <noArgs>
colord    227953    0.1    0.1    317052    15336    ?    Ssl    09:45    0:00    01:47    /usr/libexec/colord    <noArgs>
root    227986    0.0    0.1    318516    10048    ?    Ssl    09:45    0:00    01:47    /usr/libexec/upowerd    <noArgs>
pentester    228004    0.0    0.0    95896    7564    ?    Sl    09:45    0:00    01:47    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
pentester    228037    0.0    0.1    458424    9784    ?    Ssl    09:45    0:00    01:46    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    228067    0.3    0.7    310936    61612    ?    Sl    09:45    0:00    01:46    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    228069    0.0    0.4    499532    37964    ?    Sl    09:45    0:00    01:46    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    228070    0.2    0.3    272796    28912    ?    Sl    09:45    0:00    01:46    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    228071    0.0    0.4    359164    39336    ?    Sl    09:45    0:00    01:46    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    228073    0.0    0.4    425196    37428    ?    Sl    09:45    0:00    01:46    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    228074    0.0    0.4    286068    37476    ?    Sl    09:45    0:00    01:46    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    228078    0.0    0.4    425472    37580    ?    Sl    09:45    0:00    01:46    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    228112    0.0    0.2    352696    20352    ?    Ssl    09:45    0:00    01:46    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    228175    0.0    0.1    464596    11584    ?    Ssl    09:45    0:00    01:45    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    228179    0.0    0.1    478372    14156    ?    Ssl    09:45    0:00    01:45    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    228190    0.0    0.0    307864    6716    ?    Ssl    09:45    0:00    01:45    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    228195    0.0    0.0    308884    7256    ?    Ssl    09:45    0:00    01:45    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    228200    0.0    0.0    307916    6680    ?    Ssl    09:45    0:00    01:45    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    228205    0.0    0.1    389944    8928    ?    Ssl    09:45    0:00    01:45    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    228219    0.0    0.0    168868    6664    ?    Ssl    09:45    0:00    01:45    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    228223    0.0    0.1    534256    9116    ?    Sl    09:45    0:00    01:45    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    228282    20.9    6.0    3166124    490136    ?    Sl    09:45    0:21    01:41    /usr/lib/firefox-esr/firefox-esr    <noArgs>
pentester    228287    0.0    0.0    20868    3320    ?    Sl    09:45    0:00    01:41    /usr/lib/firefox-esr/crashhelper    228282_9_/tmp/_11
pentester    228334    0.0    0.2    557248    19764    ?    Ssl    09:45    0:00    01:41    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    228340    0.0    0.0    308740    6780    ?    Ssl    09:45    0:00    01:41    /usr/libexec/xdg-permission-store    <noArgs>
pentester    228349    0.0    0.0    539704    7172    ?    Ssl    09:45    0:00    01:41    /usr/libexec/xdg-document-portal    <noArgs>
root    228357    0.0    0.0    2592    1868    ?    Ss    09:45    0:00    01:41    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    228360    0.0    0.2    479576    19800    ?    Ssl    09:45    0:00    01:41    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    228391    0.0    0.5    235304    44068    ?    Sl    09:45    0:00    01:40    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:26899_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{3f50895b-9202-464d-b004-713b6c34062c}_-parentPid_228282_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_1_socket
pentester    228420    0.4    1.2    2468492    102660    ?    Sl    09:45    0:00    01:40    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:27829_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{e4374e52-53c7-4ba5-8694-b32031f08a28}_-parentPid_228282_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_2_tab
pentester    228425    0.0    0.6    373380    51488    ?    Sl    09:45    0:00    01:40    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:27874_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{2b5e0a68-0abd-49da-b6c9-66e80ea698aa}_-parentPid_228282_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_3_rdd
pentester    228457    0.5    1.8    2505868    153988    ?    Sl    09:45    0:00    01:40    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:28089_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{e073f372-be29-4476-9f1d-a5babd140cd4}_-parentPid_228282_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_4_tab
pentester    228525    0.3    0.8    804280    66056    ?    Sl    09:45    0:00    01:39    /usr/bin/qterminal    <noArgs>
pentester    228535    0.9    0.0    13780    7320    pts/0    Ss+    09:45    0:00    01:38    /usr/bin/zsh    <noArgs>
pentester    228557    0.0    0.5    233708    43728    ?    Sl    09:45    0:00    01:38    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-sandboxingKind_0_-prefsHandle_0:39222_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{b971c4a1-6c55-4c59-b229-434167eaf670}_-parentPid_228282_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_5_utility
pentester    228583    6.1    2.4    2612264    198320    ?    Sl    09:45    0:06    01:38    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37783_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{3c5fc411-2823-4eed-979e-ad935e2d5a1e}_-parentPid_228282_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_7_tab
pentester    228586    0.1    0.9    2429912    80588    ?    Sl    09:45    0:00    01:38    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37783_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{8242c040-b268-4151-8a2c-9d4d9541e69b}_-parentPid_228282_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_8_tab
pentester    228640    0.4    1.6    2492924    136368    ?    Sl    09:45    0:00    01:38    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:39660_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{9d02aed6-f39e-46b0-acba-6a5ba0f2510b}_-parentPid_228282_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_9_tab
pentester    229005    0.1    0.9    2430540    80616    ?    Sl    09:45    0:00    01:10    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:39731_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{52d1166b-51ef-48b3-baf1-f09f03d387e6}_-parentPid_228282_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_10_tab
pentester    229057    0.1    0.9    2430540    80728    ?    Sl    09:45    0:00    01:07    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:41968_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{aeaeca72-af45-4c45-9415-afa774a7cd22}_-parentPid_228282_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_11_tab
root    229288    0.0    0.0    0    0    ?    I    09:46    0:00    00:47    [kworker/0:2-ata_sff]    <noArgs>
root    229550    0.0    0.0    0    0    ?    I    09:46    0:00    00:22    [kworker/1:2-ata_sff]    <noArgs>
pentester    229795    0.0    0.0    5588    2076    ?    S    09:46    0:00    00:07    sleep    10
root    229933    0.0    0.0    2688    1780    ?    S    09:46    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229934    0.0    0.0    2688    1852    ?    S    09:46    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229955    100    0.0    9504    4316    ?    R    09:46    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    229956    0.0    0.0    5592    1992    ?    S    09:46    0:00    00:00    tee    /dev/null
root    229957    0.0    0.0    9472    3968    ?    S    09:46    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24716    15336    ?    Ss    Jan08    0:02    23:40:31    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:31    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:31    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:31    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:31    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:31    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:31    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:31    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:31    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [irq/9-acpi]    <noArgs>
root    64    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:31    [kworker/2:1-ata_sff]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:31    [kworker/3:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:31    [kworker/1:1-events]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/3:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:30    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u25:0]    <noArgs>
root    176    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/0:1H-kblockd]    <noArgs>
root    205    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/1:1H-kblockd]    <noArgs>
root    236    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:30    [kworker/0:2-events]    <noArgs>
root    252    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-ata_sff]    <noArgs>
root    255    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [scsi_eh_0]    <noArgs>
root    256    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-scsi_tmf_0]    <noArgs>
root    257    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [scsi_eh_1]    <noArgs>
root    258    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-scsi_tmf_1]    <noArgs>
root    305    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:29    [jbd2/vda1-8]    <noArgs>
root    306    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:29    [hwrng]    <noArgs>
root    385    0.0    0.3    50356    24612    ?    Ss    Jan08    0:00    23:40:28    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7416    ?    Ssl    Jan08    0:00    23:40:28    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    419    0.0    0.1    37452    12076    ?    Ss    Jan08    0:00    23:40:28    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:27    [psimon]    <noArgs>
root    552    0.0    0.0    8388    5412    ?    Ss    Jan08    0:01    23:40:26    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    608    0.0    0.0    10536    4532    ?    S    Jan08    0:00    23:40:26    dhcpcd:    eth0_[ip4]_[ip6]
root    609    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:40:26    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:40:26    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:40:26    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:26    [kworker/R-rpciod]    <noArgs>
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:26    [kworker/R-xprtiod]    <noArgs>
root    619    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:26    [kworker/R-cfg80211]    <noArgs>
dhcpcd    629    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:40:26    dhcpcd:    [BPF_ARP]_eth0_10.0.254.201
dhcpcd    630    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:40:25    dhcpcd:    [DHCP6_proxy]_fe80::bb55:487b:96eb:6a67
dhcpcd    649    0.0    0.0    10540    2316    ?    S    Jan08    0:00    23:40:21    dhcpcd:    [BOOTP_proxy]_10.0.254.201
root    743    0.0    0.0    309036    7224    ?    Ssl    Jan08    0:00    23:40:21    /usr/libexec/accounts-daemon    <noArgs>
root    745    0.0    0.0    6876    2712    ?    Ss    Jan08    0:00    23:40:21    /usr/sbin/cron    -f
messagebus    746    0.0    0.0    9932    6464    ?    Ss    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    747    0.0    0.1    382480    10036    ?    Ssl    Jan08    0:01    23:40:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    751    0.0    0.0    80876    3888    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/qemu-ga    <noArgs>
root    753    0.0    0.1    18360    9180    ?    Ss    Jan08    0:00    23:40:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    780    0.0    0.2    336464    18860    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/NetworkManager    --no-daemon
root    813    0.0    0.1    391060    12328    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/ModemManager    <noArgs>
root    841    0.0    0.0    381356    7840    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/lightdm    <noArgs>
root    845    0.0    0.0    18320    4256    ?    S    Jan08    0:00    23:40:21    /usr/sbin/xrdp-sesman    <noArgs>
root    852    0.0    0.2    1978808    20548    ?    Ssl    Jan08    0:19    23:40:21    /laforge.bin    <noArgs>
xrdp    878    0.0    0.0    15652    2564    ?    S    Jan08    0:00    23:40:21    /usr/sbin/xrdp    <noArgs>
root    881    0.0    1.3    915132    107412    tty7    Ssl+    Jan08    0:02    23:40:20    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    882    0.0    0.0    8124    2528    tty1    Ss+    Jan08    0:00    23:40:20    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    904    0.0    0.0    169620    8100    ?    Sl    Jan08    0:00    23:40:20    lightdm    --session-child_17_20
root    909    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:19    [psimon]    <noArgs>
lightdm    911    0.0    0.1    22628    13052    ?    Ss    Jan08    0:00    23:40:19    /usr/lib/systemd/systemd    --user
lightdm    914    0.0    0.0    22712    3872    ?    S    Jan08    0:00    23:40:19    (sd-pam)    <noArgs>
lightdm    935    0.0    0.0    8348    4688    ?    Ss    Jan08    0:00    23:40:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    936    0.0    0.1    101208    10812    ?    S<sl    Jan08    0:00    23:40:19    /usr/bin/pipewire    <noArgs>
lightdm    937    0.0    1.2    666648    105456    ?    Ssl    Jan08    0:15    23:40:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    939    0.0    0.0    21492    3132    ?    SNsl    Jan08    0:00    23:40:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    940    0.0    0.1    479280    15932    ?    S<sl    Jan08    0:00    23:40:19    /usr/bin/wireplumber    <noArgs>
lightdm    941    0.0    0.0    84704    5184    ?    Ssl    Jan08    0:00    23:40:19    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    942    0.0    0.1    98776    8192    ?    S<sl    Jan08    0:00    23:40:19    /usr/bin/pipewire-pulse    <noArgs>
lightdm    965    0.0    0.0    381080    7092    ?    Ssl    Jan08    0:00    23:40:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    976    0.0    0.0    8208    4448    ?    S    Jan08    0:00    23:40:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    983    0.0    0.1    312816    8144    ?    Ssl    Jan08    0:00    23:40:19    /usr/libexec/gvfsd    <noArgs>
lightdm    992    0.0    0.0    398408    7296    ?    Sl    Jan08    0:00    23:40:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1032    0.0    0.0    14372    5756    ?    S    Jan08    0:00    23:40:18    lightdm    --session-child_13_20
lightdm    1034    0.0    0.0    168772    7096    ?    Sl    Jan08    0:00    23:40:18    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1064    0.2    1.8    381872    150664    ?    Sl    Jan08    3:26    23:40:17    splunkd    -p_8089_start
root    1067    0.0    0.2    135648    18016    ?    Ss    Jan08    0:04    23:40:17    [splunkd    pid=1064]_splunkd_-p_8089_start_[process-runner]
root    1952    0.0    0.0    2688    1744    ?    S    Jan08    0:00    23:39:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1953    0.1    11.9    1414160    971924    ?    Sl    Jan08    1:46    23:39:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    121552    0.0    0.0    0    0    ?    I    Jan08    0:00    11:08:27    [kworker/u19:0-flush-254:0]    <noArgs>
root    126356    0.0    0.0    0    0    ?    I    Jan08    0:00    10:38:54    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    131091    0.0    0.0    0    0    ?    I    Jan08    0:00    10:08:38    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    166961    0.0    0.0    0    0    ?    I    03:23    0:00    06:23:55    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    171580    0.0    0.0    0    0    ?    I    03:52    0:00    05:54:31    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    202458    0.0    0.0    0    0    ?    I    07:06    0:00    02:40:01    [kworker/u18:1-events_unbound]    <noArgs>
root    209145    0.0    0.0    0    0    ?    I    07:49    0:00    01:57:47    [kworker/u18:0-flush-254:0]    <noArgs>
root    210235    0.0    0.0    0    0    ?    I    07:55    0:00    01:51:38    [kworker/u20:2-flush-254:0]    <noArgs>
root    214826    0.0    0.0    0    0    ?    I    08:22    0:00    01:24:35    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    216485    0.0    0.0    0    0    ?    I    08:35    0:00    01:11:31    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    216501    0.0    0.0    0    0    ?    I    08:35    0:00    01:11:27    [kworker/u18:2-events_unbound]    <noArgs>
root    219532    0.0    0.0    0    0    ?    I    08:52    0:00    54:35    [kworker/u17:1-writeback]    <noArgs>
root    226100    0.0    0.0    0    0    ?    I    09:35    0:00    11:06    [kworker/1:2-ata_sff]    <noArgs>
root    227001    0.0    0.0    0    0    ?    I    09:39    0:00    07:22    [kworker/0:1-ata_sff]    <noArgs>
root    227017    0.0    0.0    0    0    ?    I    09:39    0:00    07:14    [kworker/3:0-ata_sff]    <noArgs>
root    227139    0.0    0.0    0    0    ?    I    09:40    0:00    06:00    [kworker/2:2-events_freezable]    <noArgs>
root    227215    0.0    0.0    0    0    ?    I    09:41    0:00    05:07    [kworker/1:0-ata_sff]    <noArgs>
xrdp    227524    0.2    0.4    55996    33452    ?    S    09:42    0:00    04:07    /usr/sbin/xrdp    <noArgs>
root    227605    0.0    0.0    18320    4432    ?    S    09:43    0:00    03:17    /usr/sbin/xrdp-sesman    <noArgs>
pentester    227608    0.0    0.1    23092    13352    ?    Ss    09:43    0:00    03:17    /usr/lib/systemd/systemd    --user
pentester    227610    0.0    0.0    22592    3884    ?    S    09:43    0:00    03:17    (sd-pam)    <noArgs>
pentester    227630    0.0    0.0    8880    5648    ?    Ss    09:43    0:00    03:17    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    227631    0.0    0.1    97360    8136    ?    Ssl    09:43    0:00    03:17    /usr/bin/pipewire    <noArgs>
pentester    227632    0.1    1.0    621256    88684    ?    Sl    09:43    0:00    03:17    xfce4-session    <noArgs>
pentester    227633    0.3    1.5    374224    122704    ?    Sl    09:43    0:00    03:17    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    227637    0.0    0.0    7212    3596    ?    Ss    09:43    0:00    03:17    /usr/bin/mpris-proxy    <noArgs>
pentester    227639    0.0    0.1    399584    14228    ?    Ssl    09:43    0:00    03:17    /usr/bin/wireplumber    <noArgs>
pentester    227640    0.0    0.0    84704    5180    ?    Ssl    09:43    0:00    03:17    /usr/bin/pipewire    -c_filter-chain.conf
pentester    227642    0.0    0.1    99176    8780    ?    Ssl    09:43    0:00    03:17    /usr/bin/pipewire-pulse    <noArgs>
pentester    227662    0.0    0.0    95084    6236    ?    Sl    09:43    0:00    03:17    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    227739    0.0    0.0    10688    1856    ?    Ss    09:43    0:00    03:16    /usr/bin/ssh-agent    x-session-manager
pentester    227750    0.0    0.0    381172    7780    ?    Ssl    09:43    0:00    03:16    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    227757    0.0    0.0    8344    4868    ?    S    09:43    0:00    03:16    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    227761    0.0    0.0    307776    6540    ?    Ssl    09:43    0:00    03:16    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    227768    0.0    0.0    168784    7736    ?    Sl    09:43    0:00    03:16    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    227781    0.0    0.0    155488    3648    ?    SLsl    09:43    0:00    03:16    /usr/bin/gpg-agent    --supervised
pentester    227784    0.2    0.4    287712    38772    ?    Sl    09:43    0:00    03:16    xfwm4    <noArgs>
pentester    227789    0.0    0.0    312816    7888    ?    Ssl    09:43    0:00    03:16    /usr/libexec/gvfsd    <noArgs>
pentester    227795    0.0    0.0    398408    7508    ?    Sl    09:43    0:00    03:16    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    227804    0.0    0.3    348404    27364    ?    Sl    09:43    0:00    03:16    xfsettingsd    <noArgs>
pentester    227810    0.0    0.0    165276    6004    ?    Ssl    09:43    0:00    03:16    /usr/libexec/dconf-service    <noArgs>
pentester    227811    0.2    0.4    502852    40348    ?    Sl    09:43    0:00    03:16    xfce4-panel    <noArgs>
pentester    227820    0.0    0.3    485792    26308    ?    Sl    09:43    0:00    03:15    Thunar    --daemon
pentester    227832    0.2    0.8    663284    69292    ?    Sl    09:43    0:00    03:15    xfdesktop    <noArgs>
pentester    227838    0.0    0.5    428300    42820    ?    Sl    09:43    0:00    03:15    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    227843    0.0    0.0    7180    3252    ?    S    09:43    0:00    03:15    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    227848    0.0    0.2    405608    19416    ?    Sl    09:43    0:00    03:15    xfce4-power-manager    <noArgs>
pentester    227849    0.0    0.3    272284    26288    ?    Sl    09:43    0:00    03:15    xfce4-screensaver    <noArgs>
pentester    227852    0.0    0.4    532768    37628    ?    Sl    09:43    0:00    03:15    diodon    <noArgs>
pentester    227856    0.0    0.0    12432    1968    ?    Ssl    09:43    0:00    03:15    xcape    -e_Super_L_Control_L_Escape
pentester    227862    0.1    0.7    604468    61416    ?    Sl    09:43    0:00    03:15    /usr/bin/python3    /usr/bin/blueman-applet
pentester    227863    0.0    0.2    416260    21664    ?    Ssl    09:43    0:00    03:15    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    227865    0.0    0.5    66232    40992    ?    S    09:43    0:00    03:15    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    227876    0.0    0.2    265304    18364    ?    Sl    09:43    0:00    03:15    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    227903    0.0    0.0    308560    6756    ?    Sl    09:43    0:00    03:15    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    227910    0.0    0.1    922480    8928    ?    Sl    09:43    0:00    03:15    xiccd    <noArgs>
pentester    227915    0.0    0.5    586932    43128    ?    Sl    09:43    0:00    03:15    nm-applet    <noArgs>
pentester    227937    0.0    0.3    282404    27984    ?    SNsl    09:43    0:00    03:15    /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd    <noArgs>
colord    227938    0.0    0.1    317076    15116    ?    Ssl    09:43    0:00    03:15    /usr/libexec/colord    <noArgs>
pentester    227973    0.0    0.0    95896    7728    ?    Sl    09:43    0:00    03:15    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
root    227980    0.0    0.1    318520    10000    ?    Ssl    09:43    0:00    03:15    /usr/libexec/upowerd    <noArgs>
pentester    227987    0.0    0.1    458428    9904    ?    Ssl    09:43    0:00    03:15    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    228040    0.0    0.2    352692    20432    ?    Ssl    09:43    0:00    03:15    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    228055    0.2    0.7    310940    61488    ?    Sl    09:43    0:00    03:15    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    228057    0.0    0.4    499532    37836    ?    Sl    09:43    0:00    03:15    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    228058    0.2    0.3    272796    28936    ?    Sl    09:43    0:00    03:15    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    228059    0.0    0.4    359164    39112    ?    Sl    09:43    0:00    03:15    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    228060    0.0    0.4    425196    37516    ?    Sl    09:43    0:00    03:15    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    228061    0.0    0.4    286068    37440    ?    Sl    09:43    0:00    03:15    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    228071    0.0    0.4    425472    37752    ?    Sl    09:43    0:00    03:14    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    228145    0.0    0.1    538332    11700    ?    Ssl    09:43    0:00    03:14    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    228149    0.0    0.1    478372    13992    ?    Ssl    09:43    0:00    03:14    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    228161    0.0    0.0    307864    6832    ?    Ssl    09:43    0:00    03:14    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    228166    0.0    0.0    308884    7276    ?    Ssl    09:43    0:00    03:13    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    228171    0.0    0.0    307916    6692    ?    Ssl    09:43    0:00    03:13    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    228176    0.0    0.1    389944    8932    ?    Ssl    09:43    0:00    03:13    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    228190    0.0    0.0    168868    6664    ?    Ssl    09:43    0:00    03:13    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    228194    0.0    0.1    534256    9104    ?    Sl    09:43    0:00    03:13    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
root    228713    0.0    0.0    0    0    ?    I    09:44    0:00    02:22    [kworker/0:0-ata_sff]    <noArgs>
root    228897    0.0    0.0    0    0    ?    I    09:44    0:00    02:04    [kworker/3:2-ata_sff]    <noArgs>
root    229937    0.0    0.0    0    0    ?    I    09:46    0:00    00:19    [kworker/2:0]    <noArgs>
pentester    230114    0.0    0.0    5588    2036    ?    S    09:46    0:00    00:05    sleep    10
root    230235    0.0    0.0    2688    1752    ?    S    09:46    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    230236    0.0    0.0    2688    1840    ?    S    09:46    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    230257    0.0    0.0    9504    4228    ?    R    09:46    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    230258    0.0    0.0    5592    1840    ?    S    09:46    0:00    00:00    tee    /dev/null
root    230259    0.0    0.0    9472    3904    ?    S    09:46    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24680    14940    ?    Ss    Jan08    0:02    23:40:35    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:35    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:35    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [ksoftirqd/1]    <noArgs>
root    25    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:35    [kworker/1:0-events]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [ksoftirqd/3]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:35    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:35    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:35    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:35    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:35    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:35    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [irq/9-acpi]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-tpm_dev_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-edac-poller]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/2:1H-kblockd]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [kswapd0]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kthrotld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-acpi_thermal_pm]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-mld]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-ipv6_addrconf]    <noArgs>
root    87    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/3:1H-kblockd]    <noArgs>
root    88    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    93    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kstrp]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u21:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u22:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u23:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u24:0]    <noArgs>
root    103    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u25:0]    <noArgs>
root    175    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/1:1H-kblockd]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/0:1H-kblockd]    <noArgs>
root    258    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ata_sff]    <noArgs>
root    260    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_1]    <noArgs>
root    263    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    266    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:33    [kworker/2:2-events_freezable_pwr_efficient]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:33    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [hwrng]    <noArgs>
root    385    0.0    0.2    41984    20636    ?    Ss    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    417    0.0    0.0    90112    7416    ?    Ssl    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12136    ?    Ss    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    431    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [psimon]    <noArgs>
root    563    0.0    0.0    8388    6648    ?    Ss    Jan08    0:01    23:40:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    608    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:40:30    dhcpcd:    eth0_[ip4]_[ip6]
root    609    0.0    0.0    10532    2500    ?    S    Jan08    0:00    23:40:30    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2104    ?    S    Jan08    0:00    23:40:30    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:40:30    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-rpciod]    <noArgs>
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-xprtiod]    <noArgs>
root    619    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-cfg80211]    <noArgs>
dhcpcd    629    0.0    0.0    10532    2244    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [BPF_ARP]_eth0_10.0.254.204
dhcpcd    630    0.0    0.0    10532    2372    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [DHCP6_proxy]_fe80::5747:84d4:4045:47fb
dhcpcd    649    0.0    0.0    10532    2372    ?    S    Jan08    0:00    23:40:23    dhcpcd:    [BOOTP_proxy]_10.0.254.204
root    742    0.0    0.0    309036    7188    ?    Ssl    Jan08    0:00    23:40:23    /usr/libexec/accounts-daemon    <noArgs>
root    744    0.0    0.0    6876    2760    ?    Ss    Jan08    0:00    23:40:23    /usr/sbin/cron    -f
messagebus    745    0.0    0.0    9080    5584    ?    Ss    Jan08    0:00    23:40:23    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382300    9832    ?    Ssl    Jan08    0:01    23:40:23    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    749    0.0    0.0    80876    3888    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/qemu-ga    <noArgs>
root    752    0.0    0.1    18356    8816    ?    Ss    Jan08    0:00    23:40:23    /usr/lib/systemd/systemd-logind    <noArgs>
root    778    0.0    0.2    336480    19052    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/NetworkManager    --no-daemon
root    812    0.0    0.1    391060    12308    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/ModemManager    <noArgs>
root    827    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:22    [kworker/3:2H-kblockd]    <noArgs>
root    836    0.0    0.0    381488    7648    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/lightdm    <noArgs>
root    845    0.0    0.0    16356    2256    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp-sesman    <noArgs>
root    854    0.0    0.2    1904820    20368    ?    Ssl    Jan08    0:19    23:40:22    /laforge.bin    <noArgs>
xrdp    878    0.0    0.0    15652    2388    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp    <noArgs>
root    880    0.0    1.2    915128    104576    tty7    Ssl+    Jan08    0:02    23:40:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2532    tty1    Ss+    Jan08    0:00    23:40:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    904    0.0    0.1    169620    8240    ?    Sl    Jan08    0:00    23:40:21    lightdm    --session-child_17_20
root    909    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:21    [psimon]    <noArgs>
lightdm    911    0.0    0.1    22812    13304    ?    Ss    Jan08    0:00    23:40:21    /usr/lib/systemd/systemd    --user
lightdm    914    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:40:21    (sd-pam)    <noArgs>
lightdm    937    0.0    0.0    8344    4752    ?    Ss    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    938    0.0    0.1    101224    10592    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/pipewire    <noArgs>
lightdm    939    0.0    1.2    666648    105624    ?    Ssl    Jan08    0:16    23:40:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    941    0.0    0.0    21492    3064    ?    SNsl    Jan08    0:00    23:40:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    942    0.0    0.1    405544    15916    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/wireplumber    <noArgs>
lightdm    946    0.0    0.0    84704    5352    ?    Ssl    Jan08    0:00    23:40:21    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    947    0.0    0.1    98776    8340    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/pipewire-pulse    <noArgs>
lightdm    969    0.0    0.0    381080    7264    ?    Ssl    Jan08    0:00    23:40:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    979    0.0    0.0    8208    4516    ?    S    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    985    0.0    0.0    312816    8068    ?    Ssl    Jan08    0:00    23:40:21    /usr/libexec/gvfsd    <noArgs>
lightdm    996    0.0    0.0    398408    7452    ?    Sl    Jan08    0:00    23:40:21    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1031    0.0    0.0    14372    5748    ?    S    Jan08    0:00    23:40:20    lightdm    --session-child_13_20
lightdm    1033    0.0    0.0    168772    7236    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1063    0.2    1.8    377776    149296    ?    Sl    Jan08    3:28    23:40:19    splunkd    -p_8089_start
root    1066    0.0    0.2    135648    17908    ?    Ss    Jan08    0:04    23:40:19    [splunkd    pid=1063]_splunkd_-p_8089_start_[process-runner]
root    1076    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:19    [kworker/0:3-events]    <noArgs>
root    1900    0.0    0.0    2688    1764    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1901    0.1    10.2    1414160    833204    ?    Sl    Jan08    1:40    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    50110    0.0    0.0    0    0    ?    I    Jan08    0:03    18:36:42    [kworker/3:1-mm_percpu_wq]    <noArgs>
root    97780    0.0    0.0    0    0    ?    I    Jan08    0:00    13:37:33    [kworker/u20:2-writeback]    <noArgs>
root    115693    0.0    0.0    0    0    ?    I    Jan08    0:00    11:43:19    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    119118    0.0    0.0    0    0    ?    I    Jan08    0:00    11:24:32    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    123151    0.0    0.0    0    0    ?    I    Jan08    0:00    10:56:17    [kworker/u17:1-ext4-rsv-conversion]    <noArgs>
root    143799    0.0    0.0    0    0    ?    I    00:58    0:00    08:48:17    [kworker/u17:2-kvfree_rcu_reclaim]    <noArgs>
root    176742    0.0    0.0    0    0    ?    I    04:24    0:00    05:22:32    [kworker/u18:1-ext4-rsv-conversion]    <noArgs>
root    178461    0.0    0.0    0    0    ?    I    04:36    0:00    05:10:09    [kworker/u18:0-flush-254:0]    <noArgs>
root    183638    0.0    0.0    0    0    ?    I    05:06    0:00    04:39:46    [kworker/u19:0-flush-254:0]    <noArgs>
root    188406    0.0    0.0    0    0    ?    I    05:37    0:00    04:09:33    [kworker/u19:1-flush-254:0]    <noArgs>
root    213477    0.0    0.0    0    0    ?    I    08:15    0:00    01:31:11    [kworker/u17:0]    <noArgs>
root    219574    0.0    0.0    0    0    ?    I    08:52    0:00    53:55    [kworker/u20:1]    <noArgs>
root    221182    0.0    0.0    0    0    ?    I    09:05    0:00    41:11    [kworker/u18:2]    <noArgs>
root    226844    0.0    0.0    0    0    ?    I    09:38    0:00    08:04    [kworker/3:0-ata_sff]    <noArgs>
root    226860    0.0    0.0    0    0    ?    I    09:38    0:00    07:52    [kworker/2:0-ata_sff]    <noArgs>
root    226876    0.0    0.0    0    0    ?    I    09:38    0:00    07:44    [kworker/1:1-ata_sff]    <noArgs>
root    226953    0.0    0.0    0    0    ?    I    09:39    0:00    07:32    [kworker/0:1-ata_sff]    <noArgs>
root    227577    0.0    0.0    0    0    ?    I    09:43    0:00    03:00    [kworker/3:2-ata_sff]    <noArgs>
root    227593    0.0    0.0    0    0    ?    I    09:43    0:00    02:44    [kworker/1:2-ata_sff]    <noArgs>
root    227609    0.0    0.0    0    0    ?    I    09:44    0:00    02:34    [kworker/2:1-ata_sff]    <noArgs>
root    227625    0.0    0.0    0    0    ?    I    09:44    0:00    02:28    [kworker/0:0-ata_sff]    <noArgs>
xrdp    227796    0.0    0.1    47584    11796    ?    S    09:46    0:00    00:33    /usr/sbin/xrdp    <noArgs>
root    227966    0.0    0.0    2688    1752    ?    S    09:46    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227967    0.0    0.0    2688    1820    ?    S    09:46    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227988    0.0    0.0    9372    4132    ?    R    09:46    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227989    0.0    0.0    5592    1920    ?    S    09:46    0:00    00:00    tee    /dev/null
root    227990    0.0    0.0    9472    4020    ?    S    09:46    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}