http://marc.info/?l=openbsd-misc&m=104862612011751&w=2 ------------------- List: openbsd-misc Subject: Re: Can't disconnect "ghost" SSH session from days ago From: Mathieu Sauve-Frankel <m.sauve () secureops ! com> Date: 2003-03-25 20:59:44
man utmp This "ghost" user is merely a stale entry in /var/run/utmp that has not been removed because your ssh session died uncleanly. Reboot your server cleanly and the "ghost" utmp entry will disappear. On Mon, Aug 06, 2012 at 01:00:15PM +0800, Alan Cheng wrote: > Got nothing from "ps aux|fgrep acheng@ttyp4". No SSHD process to kill > either. > > The problem for me is that no process belongs to ttyp4, but "w" still > reports an idle session. > > FYI: > $ ps aux|fgrep acheng@ttyp4 > > $ w > 9:57PM up 13 days, 1:31, 3 users, load averages: 0.16, 0.18, 0.23 > USER TTY FROM LOGIN@ IDLE WHAT > acheng p0 180.116.63.38 6:00PM 1:50 -ksh > acheng p1 114.227.120.20 8:06PM 0 w > acheng p4 114.227.123.110 27Jul12 9days - > > $ ps aux | grep ksh > acheng 13452 0.0 0.1 548 500 p0 Is 6:00PM 0:00.02 -ksh (ksh) > root 25705 0.0 0.1 632 528 p0 I+ 6:07PM 0:00.07 -ksh (ksh) > acheng 30721 0.0 0.1 480 488 p1 Ss 8:06PM 0:00.02 -ksh (ksh) > acheng 28924 0.0 0.0 480 4 p1 R+ 9:57PM 0:00.00 -ksh (ksh) > > $ ps aux | grep sshd > root 16212 0.0 0.2 656 1208 ?? Is 23Jul12 0:04.01 > /usr/sbin/sshd > root 30292 0.0 0.5 3456 2812 ?? Is 6:00PM 0:00.07 sshd: > acheng [priv] (sshd) > acheng 9594 0.0 0.7 4724 3612 ?? I 6:00PM 0:02.20 sshd: > acheng@ttyp0 (sshd) > root 22538 0.0 0.5 3428 2828 ?? Is 8:06PM 0:00.06 sshd: > acheng [priv] (sshd) > acheng 18141 0.0 0.6 3880 2920 ?? S 8:06PM 0:02.19 sshd: > acheng@ttyp1 (sshd) > > Thanks for the response. > > acheng > > On Mon, Aug 6, 2012 at 11:42 AM, David Diggles <da...@elven.com.au> wrote: > > > On Mon, Aug 06, 2012 at 01:38:27PM +1000, David Diggles wrote: > > > Try this? > > > > > > ps aux|fgrep acheng@ttyp3 > > > > > > ps aux|fgrep acheng@ttyp4 > > > > do you get the sshd process id you can kill? > > > > > > > On Mon, Aug 06, 2012 at 10:56:00AM +0800, Alan Cheng wrote: > > > > Hello all, > > > > > > > > I'd like to kill an stale user session, but could not find a way to do > > > > that. Seems like there is no process attached to that ttyp4 any more. > > It's > > > > an OpenBSD 5.1 on i386, by the way. > > > > > > > > Any advice appreciated. > > > > > > > > some output, more will be provided if necessary. > > > > > > > > #w > > > > 7:44PM up 12 days, 23:19, 2 users, load averages: 0.10, 0.14, 0.18 > > > > USER TTY FROM LOGIN@ IDLE WHAT > > > > acheng p0 180.116.63.38 6:00PM 0 w > > > > acheng p4 114.227.123.110 27Jul12 9days - > > > > <-- the one I'd like to kill > > > > > > > > > > ------------------------------------------------------------------------------------------------------------ > > > > #ps -t p4 > > > > PID TT STAT TIME COMMAND > > > > > > > > > > > > thanks. > > > > acheng
