Process owner in asterisk server

Hi Can anybody tell me which of the following processes are owned by root ans which are owned by the operating system I am using Centos 5.5 for the same

init [3]
[migration/0]
[ksoftirqd/0]
[watchdog/0]
[events/0]
[khelper]
[kthread]
[kblockd/0]
[kacpid]
[cqueue/0]
[khubd]
[kseriod]
[pdflush]
[kswapd0]
[aio/0]
[kpsmoused]
[scsi_eh_0]
[ata/0]
[ata_aux]
[kstriped]
[xfslogd/0]
[xfsdatad/0]
[kjournald]
[kauditd]
/sbin/udevd -d
[kmpathd/0]
[kmpath_handlerd]
/sbin/dhclient -1 -q -lf /var/lib/dhclient/dhclient-usb0.leases -pf
/var/run/dhclient-usb0.pid usb0

syslogd -m 0
klogd -x
irqbalance
rpc.statd
pcscd
automount
/usr/sbin/acpid
/usr/sbin/sshd
xinetd -stayalive -pidfile /var/run/xinetd.pid
/usr/sbin/vsftpd /etc/vsftpd/vsftpd.conf
/usr/sbin/httpd
/bin/sh /usr/sbin/safe_asterisk
/usr/sbin/asterisk -f -vvvg -c
crond
/usr/bin/mono /usr/lib/mono/2.0/mono-service.exe
/usr/bin/noble/SLPolicyServer.exe

/usr/bin/mono /usr/lib/mono/2.0/mono-service.exe
/usr/bin/noble/PBXMonitorService.exe

/sbin/mingetty tty1
/usr/bin/perl /usr/local/guardian/nscmaild
/usr/bin/perl /usr/local/guardian/gdn_cpu.pl
sshd: root@notty

Any help would be appriciated

Thanks in advance
Abhi

I don’t understand the difference between owned by root and owned by the OS.

To see which users owns the processes, use ps -el.

With the exception of process 1, the lowest numbered processes will be running code purely within the kernel, and have been started by the kernel. Process 1 is started by the kernel (and was the only such one on early Unixes). All processes started by the kernel are owned by root.

On my Linux 2.4 kernel, processes 1 to 6 were started by the kernel:

F S UID PID PPID C PRI NI ADDR SZ WCHAN TTY TIME CMD 4 S 0 1 0 0 68 0 - 157 select ? 00:00:03 init 1 S 0 2 1 0 69 0 - 0 contex ? 00:00:00 keventd 1 S 0 3 1 0 79 19 - 0 ksofti ? 00:00:00 ksoftirqd_CPU0 1 S 0 4 1 0 69 0 - 0 kswapd ? 00:00:00 kswapd 1 S 0 5 1 0 69 0 - 0 bdflus ? 00:00:00 bdflush 1 S 0 6 1 0 69 0 - 0 kupdat ? 00:00:00 kupdated 1 S 0 10 1 0 59 -20 - 0 md_thr ? 00:00:00 mdrecoveryd 5 S 0 70 1 0 69 0 - 380 select ? 00:00:00 syslogd

What problem are you trying to solve?

The SiZe = 0 is the giveaway that they are running in the kernel.

Those in square brackets (generally) are kernel processes. For the process owner you could use the “u” flag of ps.