top 指令顯示 login user 人數異常 - Linux

資訊如下:


#w

10:49:50 up 7 min, 3 users, load average: 0.00, 0.08, 0.07
USER TTY LOGIN@ IDLE JCPU PCPU WHAT
root pts/0 10:43 0.00s 0.12s 0.00s w



顯示三個使用者







# top
top - 10:50:26 up 8 min, 3 users, load average: 0.00, 0.07, 0.06
Tasks: 85 total, 1 running, 84 sleeping, 0 stopped, 0 zombie
Cpu(s): 0.9%us, 1.8%sy, 0.0%ni, 94.0%id, 3.3%wa, 0.0%hi, 0.0%si, 0.0%st
Mem: 1787392k total, 162368k used, 1625024k free, 13696k buffers
Swap: 1048568k total, 0k used, 1048568k free, 97652k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
1 root 20 0 1008 388 332 S 0 0.0 0:01.04 init
2 root 15 -5 0 0 0 S 0 0.0 0:00.00 kthreadd
3 root RT -5 0 0 0 S 0 0.0 0:00.00 migration/0
4 root 15 -5 0 0 0 S 0 0.0 0:00.02 ksoftirqd/0


也是顯示三個使用者












#last
root pts/0 172.16.168.250 Wed Jan 6 10:43 still logged in
reboot system boot 2.6.27.7-9-pae Wed Jan 6 10:42 (00:08)
root pts/0 172.16.168.250 Wed Jan 6 10:21 - crash (00:20)
reboot system boot 2.6.27.7-9-pae Wed Jan 6 10:11 (00:40)
root tty1 Wed Jan 6 10:09 - down (00:00)
root ( :0.0 Wed Jan 6 09:10 - down (01:00)
root ( :0.0 Wed Jan 6 09:09 - 09:10 (00:00)
root tty1 :0 Wed Jan 6 09:05 - 10:09 (01:04)
root tty1 Wed Jan 6 09:04 - 09:05 (00:00)
reboot system boot 2.6.27.7-9-pae Wed Jan 6 09:03 (01:06)
reboot system boot 2.6.27.7-9-pae Wed Jan 6 09:02 (00:01)
root tty1 Wed Jan 6 09:01 - down (00:00)
root pts/0 172.16.168.250 Wed Jan 6 08:50 - 09:00 (00:09)
reboot system boot 2.6.27.7-9-pae Wed Jan 6 08:49 (00:12)
root pts/0 172.16.168.250 Wed Jan 6 08:41 - down (00:07)
reboot system boot 2.6.27.7-9-pae Wed Jan 6 08:08 (00:39)
root tty1 Tue Jan 5 15:41 - 15:43 (00:02)
reboot system boot 2.6.27.7-9-pae Tue Jan 5 15:40 (02:19)
root tty1 Tue Jan 5 15:39 - down (00:00)
root pts/0 172.16.168.250 Tue Jan 5 15:29 - 15:32 (00:03)
reboot system boot 2.6.27.7-9-pae Tue Jan 5 15:28 (00:10)
root pts/0 172.16.168.250 Tue Jan 5 15:22 - down (00:05)
root pts/0 172.16.168.250 Tue Jan 5 15:19 - 15:22 (00:02)
root pts/1 172.16.168.250 Tue Jan 5 15:15 - 15:16 (00:00)
root pts/0 172.16.168.250 Tue Jan 5 15:15 - 15:19 (00:03)
root pts/0 172.16.168.250 Tue Jan 5 13:25 - 14:49 (01:24)
reboot system boot 2.6.27.7-9-pae Tue Jan 5 12:50 (02:37)
root pts/0 172.16.168.250 Tue Jan 5 10:31 - 11:20 (00:49)
root pts/0 172.16.168.250 Tue Jan 5 09:34 - 09:47 (00:12)
root pts/0 172.16.168.250 Tue Jan 5 09:16 - 09:19 (00:03)

wtmp begins Tue Jan 5 09:16:28 2010







看了很久最後發現一個異常狀況



#finger
Login Name Tty Idle Login Time Where
root root * - Sep 22 06:08 :0
root root *( - Wed 09:10 :0.0
root root pts/0 - Wed 10:43 172.16.168.250




請問一下 Tty 顯示 * *(

是系統哪邊有問題?


# man finger

The names of terminals for which write permission is denied (see mesg(1))
are prepended with an asterisk (`*').
Unknown devices as well as nonexistent idle and login times are
displayed as single asterisks.



怎們logout 那兩個 root 帳號?


Thanks



--