TMS zl Module Planning and Implementation Guide 2009-08
Table Of Contents
- Contents
- Glossary of Acronyms and Abbreviations
- 1.0 Purpose
- 2.0 Intended Audience
- 3.0 Objectives
- 4.0 Prerequisites
- 5.0 Skills
- 6.0 The HP ProCurve Threat Management Services zl Module
- 7.0 Common TMS Security Control Points
- 8.0 Deployment Considerations
- 9.0 Installation and Preparation of the TMS zl Module
- 10.0 Configuration of the TMS zl Module
- 11.0 Using multiple HP ProCurve Threat Management Services zl Modules
- Appendix A – Additional References
- Appendix B – Sample Company Information Assets Spreadsheet
- Sample “Information Assets” tab (See Embedded “Company Information Assets” Microsoft Excel 2003 spreadsheet)
- “Server Network Details” tab (See Embedded “Company Information Assets” Microsoft Excel 2003 spreadsheet)
- “TMS Zones” tab (See Embedded “Company Information Assets” Microsoft Excel 2003 spreadsheet)
- “Firewall Rules” tab (See Embedded “Company Information Assets” Microsoft Excel 2003 spreadsheet)
- /Sample “Company Information Assets” Microsoft Excel 2003 spreadsheet
- Appendix C – Information Gathering Tools
- Appendix D - Updating Switch Software
- Appendix E – Emergency Recovery Process
Page 4
ps
ps is a utility included in Unix and Unix-like operating systems that is used for listing the
processes executing on the system.
The following screenshot shows the utility invoked with both the -e (display every process) and -
f (full-format listing) options being “piped” through the more utility, which is used to display a
single page worth of output and then interactively prompt the user when they want to display
more.
The columns of interest for the purposes of this document are:
UID – Shows the User ID that the process is executing as. Processes executing as the
root user are of particular interest as they are executing with unlimited, “super-user”
privileges.
PID – Displays the Process ID of the process
PPID – Lists the Parent Process ID of this process. For example, we see in the below
example that process IDs 2, 3 and 4 all have process ID 1 as their PPID indicating
that they were all started by the same parent process
CMD – Shows the command line argument equivalent used to invoke the process
Screen shot of ps -ef | more showing processes and their user ownership,
process IDs, parent processes, and executable names.