<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
I am not personally familiar with it, but it seems very clear that
it's something being executed by BMC ADDM
(<a class="moz-txt-link-freetext" href="http://www.bmc.com/it-solutions/atrium-discovery-dependency-mapping.html">http://www.bmc.com/it-solutions/atrium-discovery-dependency-mapping.html</a>).<br>
-Adam<br>
<br>
<br>
<div class="moz-cite-prefix">On 16-01-29 08:46 AM, Kevin McGregor
wrote:<br>
</div>
<blockquote
cite="mid:CACBFUziLj24ihV60Y9X-JYTRsG_Nc9Fj0uq=fSyiJkD1TRAo6g@mail.gmail.com"
type="cite">
<div dir="ltr">Has anyone seen this happen? On several Ubuntu
server systems (10.04, 14.04, 15.10), I'll be scrolling through
the bash history with the up-arrow, and suddenly there will be a
ton a code with the word "tideway" used in it very often. I'll
check the dot-bash_history file, and sure enough there are large
sections of script/code in there which I obviously did not type.
<div><br>
</div>
<div>Where did it come from? How do I stop it?</div>
<div><br>
</div>
<div>Here's a short sample:</div>
<div><br>
</div>
<div>
<div>tw_command() { cpuspeed=`egrep '^(cpu MHz|cpu
clock|clock)' /proc/cpuinfo | cut -f2 -d: | sed -e
's/\.[0-9]*//' -e 's/Mhz//i' -e 's/ //g' | head -n 1`;
cputype=`egrep '^cpu[^a-z]*:' /proc/cpuinfo | sort -u | cut
-f2 -d: | sed -e 's/^ //' | head -n 1`; if [ "${cputype}" =
"" ]; then cputype=`egrep '^model name' /proc/cpuinfo |
sort -u | cut -f2 -d: | sed -e 's/^ //' | head -n 1`; fi;
if [ "${cputype}" = "" ]; then cputype=`egrep '^arch'
/proc/cpuinfo | sort -u | cut -f2 -d: | sed -e 's/^ //' |
head -n 1`; fi; if [ "${cputype}" = "" ]; then
cputype=`egrep '^(cpu
model|family|vendor_id|machine|Processor)' /proc/cpuinfo |
sort -u | cut -f2 -d: | sed -e 's/^ //' | head -n 1`; fi;
logical=`egrep '^[pP]rocessor' /proc/cpuinfo | sort -u | wc
-l`; physical=0; cores=0; threads_per_core=0; if [ "`echo
$cputype | cut -c-2`" = "PA" ]; then cpufamily=`egrep
'^(cpu family)' /proc/cpuinfo | sort -u | cut -f2 -d: | sed
-e 's/^ //' | head -n 1`; if [ "`echo $cpufamily | cut
-c-7`" = "PA-RISC" ]; then
cputype="${cp(tideway_i=__TIDEWAY; echo
${tideway_i}_CMD_START__; tw_command; echo
${tideway_i}_CMD_END__)
tw_command() { cpuspeed=`egrep '^(cpu MHz|cpu clock|clock)'
/proc/cpuinfo | cut -f2 -d: | sed -e 's/\.[0-9]*//' -e
's/Mhz//i' -e 's/ //g' | head -n 1`; cputype=`egrep
'^cpu[^a-z]*:' /proc/cpuinfo | sort -u | cut -f2 -d: | sed
-e 's/^ //' | head -n 1`; if [ "${cputype}" = "" ]; then
cputype=`egrep '^model name' /proc/cpuinfo | sort -u | cut
-f2 -d: | sed -e 's/^ //' | head -n 1`; fi; if [
"${cputype}" = "" ]; then cputype=`egrep '^arch'
/proc/cpuinfo | sort -u | cut -f2 -d: | sed -e 's/^ //' |
head -n 1`; fi; if [ "${cputype}" = "" ]; then
cputype=`egrep '^(cpu
model|family|vendor_id|machine|Processor)' /proc/cpuinfo |
sort -u | cut -f2 -d: | sed -e 's/^ //' | head -n 1`; fi;
logical=`egrep '^[pP]rocessor' /proc/cpuinfo | sort -u | wc
-l`; physical=0; cores=0; threads_per_core=0; if [ "`echo
$cputype | cut -c-2`" = "PA" ]; then cpufamily=`egrep
'^(cpu family)' /proc/cpuinfo | sort -u | cut -f2 -d: | sed
-e 's/^ //' | head -n 1`; if [ "`echo $cpufamily | cut
-c-7`" = "PA-RISC" ]; then
cputype="${cpprintf("hostid: ");</div>
</div>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Roundtable mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Roundtable@muug.mb.ca">Roundtable@muug.mb.ca</a>
<a class="moz-txt-link-freetext" href="http://www.muug.mb.ca/mailman/listinfo/roundtable">http://www.muug.mb.ca/mailman/listinfo/roundtable</a>
</pre>
</blockquote>
<br>
</body>
</html>