The process tables are from a Gentoo machine (pretty current), a Debian 7 server (Debian is actually at 8 now, but 7 isn't too far out of date), and a Scientific Linux 4 machine, which is well out of date. 1) Note that init is showing its "runlevel" on all three versions, although there is some evidence of systemd on the Gentoo server. 2) Note that udev is apparent on the two newer systems (Gentoo and Debian 7), but not on the older system. 3) Two of the systems, Gentoo and Scientific Linux 4, are running tools to spot brute force logins, but the Debian box is not. 4) All of the systems have syslog and klogd. 5) All of the systems have crond, but where's anacron? 6) System monitoring with nagios is on the Gentoo system, but none of the others. 7) Surprisingly, all of the systems have some amount of RPC daemons related to NFS, although the Debian machine clearly shouldn't Gentoo server: F S UID PID PPID C PRI NI ADDR SZ WCHAN STIME TTY TIME CMD 4 S root 1 0 0 80 0 - 1067 ? May05 ? 00:00:38 init [3] 5 S root 1958 1 0 80 0 - 5959 ? May05 ? 00:00:00 /lib/systemd/systemd-udevd --daemon 1 S root 2486 1 0 80 0 - 2112 ? May05 ? 00:00:55 /usr/sbin/syslogd -m 0 5 S root 2492 1 0 80 0 - 1613 ? May05 ? 00:00:01 /usr/sbin/klogd -c 3 -2 1 S root 2512 1 0 80 0 - 3327 ? May05 ? 00:00:44 /usr/sbin/crond 1 S root 2739 1 0 80 0 - 127238 ? May05 ? 00:48:46 /usr/bin/python2.7 /usr/lib64/python-exec/python2.7/fail2ban-server -s /run/fail2ban/fail2ban.sock -p /run/fail2ban/fail2ban.pid -b 5 S root 2784 1 0 80 0 - 4274 ? May05 ? 00:00:07 /sbin/rpcbind 5 S root 2811 1 0 80 0 - 5437 ? May05 ? 00:00:00 /sbin/rpc.statd --no-notify 1 S root 2856 1 0 80 0 - 4275 ? May05 ? 00:00:00 /usr/sbin/rpc.idmapd 5 S nagios 2979 1 0 80 0 - 5372 ? May05 ? 00:00:14 /usr/libexec/nrpe -c /etc/nagios/nrpe.cfg --daemon 0 S root 3007 1 0 80 0 - 215692 ? May05 ? 00:06:58 /usr/sbin/nscd --foreground 5 S nslcd 3037 1 0 80 0 - 99248 ? May05 ? 00:06:03 /usr/sbin/nslcd 5 S ntp 3060 1 0 80 0 - 26322 ? May05 ? 00:02:45 /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u ntp:ntp 5 S root 3151 1 0 80 0 - 8941 ? May05 ? 00:02:22 sendmail: accepting connections 1 S smmsp 3154 1 0 80 0 - 7860 ? May05 ? 00:00:02 sendmail: Queue runner@00:30:00 for /var/spool/clientmqueue 4 S root 3200 1 0 80 0 - 1522 ? May05 tty2 00:00:00 /sbin/agetty 38400 tty2 linux 4 S root 3201 1 0 80 0 - 1522 ? May05 tty3 00:00:00 /sbin/agetty 38400 tty3 linux 4 S root 3202 1 0 80 0 - 1522 ? May05 tty4 00:00:00 /sbin/agetty 38400 tty4 linux 4 S root 3203 1 0 80 0 - 1522 ? May05 tty5 00:00:00 /sbin/agetty 38400 tty5 linux 4 S root 3204 1 0 80 0 - 1522 ? May05 tty6 00:00:00 /sbin/agetty 38400 tty6 linux 4 S root 6253 1 0 80 0 - 65090 ? May05 ? 00:10:59 /usr/bin/docker -d -p /run/docker.pid 4 S root 6302 1 0 80 0 - 10702 ? May05 ? 00:00:00 /usr/sbin/cupsd -C /etc/cups/cupsd.conf -s /etc/cups/cups-files.conf 4 S root 7662 1 0 80 0 - 1522 ? Sep10 tty1 00:00:00 /sbin/agetty 38400 tty1 linux 5 S root 8193 1 0 80 0 - 7808 ? Jun18 ? 00:00:04 /usr/sbin/sshd Debian 7 server: F S UID PID PPID C PRI NI ADDR SZ WCHAN STIME TTY TIME CMD 4 S root 1 0 0 80 0 - 2665 - Jun11 ? 00:02:20 init [2] 5 S root 1033 1 0 80 0 - 5310 - Jun11 ? 00:00:00 udevd --daemon 5 S root 1115 1033 0 80 0 - 5309 - Jun11 ? 00:00:00 udevd --daemon 5 S root 1120 1033 0 80 0 - 5309 - Jun11 ? 00:00:00 udevd --daemon 1 S root 2347 1 0 80 0 - 2491 - Jun11 ? 00:00:00 dhclient -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases eth0 5 S root 2434 1 0 80 0 - 4746 - Jun11 ? 00:00:18 /sbin/rpcbind -w 5 S statd 2465 1 0 80 0 - 5839 - Jun11 ? 00:00:00 /sbin/rpc.statd 1 S root 2477 1 0 80 0 - 7379 - Jun11 ? 00:00:00 /usr/sbin/rpc.idmapd 5 S root 2796 1 0 80 0 - 15270 - Jun11 ? 00:04:58 /usr/sbin/rsyslogd -c5 1 S daemon 2946 1 0 80 0 - 4171 - Jun11 ? 00:00:00 /usr/sbin/atd 1 S root 2964 1 0 80 0 - 5105 - Jun11 ? 00:00:24 /usr/sbin/cron 5 S 101 3257 1 0 80 0 - 11705 - Jun11 ? 00:00:03 /usr/sbin/exim4 -bd -q30m 5 S root 3292 1 0 80 0 - 12486 - Jun11 ? 00:03:45 /usr/sbin/sshd 5 S ntp 3331 1 0 80 0 - 9771 - Jun11 ? 00:12:14 /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 104:103 4 S root 3356 1 0 80 0 - 3647 - Jun11 hvc0 00:00:00 /sbin/agetty hvc0 5 S root 19663 1 0 80 0 - 19005 - Aug24 ? 00:01:49 /usr/sbin/apache2 -k start 5 S www-data 29404 19663 0 80 0 - 19007 - Sep13 ? 00:00:00 /usr/sbin/apache2 -k start 5 S www-data 29407 19663 0 80 0 - 74949 - Sep13 ? 00:00:00 /usr/sbin/apache2 -k start 5 S www-data 29408 19663 0 80 0 - 74949 - Sep13 ? 00:00:00 /usr/sbin/apache2 -k start Scientific Linux 4 server: F S UID PID PPID C PRI NI ADDR SZ WCHAN STIME TTY TIME CMD 4 S root 1 0 0 76 0 - 843 - 2012 ? 00:02:22 init [5] 5 S root 1746 1 0 75 0 - 549 - 2012 ? 00:19:46 syslogd -m 0 5 S root 1752 1 0 76 0 - 737 - 2012 ? 00:00:00 klogd -x 1 S root 1790 1 0 76 0 - 771 - 2012 ? 00:53:40 irqbalance 5 S rpc 1799 1 0 76 0 - 452 - 2012 ? 00:00:07 portmap 5 S rpcuser 1819 1 0 76 0 - 492 - 2012 ? 00:00:19 rpc.statd -p 4000 1 S root 1847 1 0 76 0 - 1342 - 2012 ? 00:01:30 rpc.idmapd 5 S root 1942 1 0 75 0 - 716 - 2012 ? 00:00:16 /usr/sbin/smartd 5 S root 2008 1 0 76 0 - 1386 - 2012 ? 00:02:00 /usr/sbin/sshd -4 1 S daemon 2051 1 0 76 0 - 2105 - 2012 ? 00:00:00 lpd Waiting 5 S root 2077 1 0 76 0 - 2289 - 2012 ? 00:49:07 sendmail: accepting connections 1 S smmsp 2088 1 0 76 0 - 2087 - 2012 ? 00:00:07 sendmail: Queue runner@01:00:00 for /var/spool/clientmqueue 5 S root 2099 1 0 76 0 - 1757 - 2012 ? 00:00:17 crond 1 S daemon 2158 1 0 76 0 - 451 - 2012 ? 00:00:02 /usr/sbin/atd 1 S root 2192 1 0 76 0 - 974 - 2012 ? 00:01:32 cups-config-daemon 4 S root 2219 1 0 77 0 - 863 - 2012 tty1 00:00:00 /sbin/mingetty tty1 4 S root 2220 1 0 78 0 - 663 - 2012 tty2 00:00:00 /sbin/mingetty tty2 4 S root 2221 1 0 79 0 - 721 - 2012 tty3 00:00:00 /sbin/mingetty tty3 4 S root 2226 1 0 78 0 - 553 - 2012 tty4 00:00:00 /sbin/mingetty tty4 4 S root 2254 1 0 79 0 - 689 - 2012 tty6 00:00:00 /sbin/mingetty tty6 5 S ntp 7541 1 0 76 0 - 1270 - 2012 ? 00:03:15 ntpd -u ntp:ntp -p /var/run/ntpd.pid -g 1 S root 30089 1 0 81 0 - 8385 - 2014 ? 1-16:26:03 python /usr/bin/denyhosts.py --daemon --config=/usr/share/denyhosts/denyhosts.cfg