[RndTbl] Weird code showing up in bash history

[Adam Thompson]

I am not personally familiar with it, but it seems very clear that it's 
something being executed by BMC ADDM 
(http://www.bmc.com/it-solutions/atrium-discovery-dependency-mapping.html).
-Adam


On 16-01-29 08:46 AM, Kevin McGregor wrote:
> Has anyone seen this happen? On several Ubuntu server systems (10.04, 
> 14.04, 15.10), I'll be scrolling through the bash history with the 
> up-arrow, and suddenly there will be a ton a code with the word 
> "tideway" used in it very often. I'll check the dot-bash_history file, 
> and sure enough there are large sections of script/code in there which 
> I obviously did not type.
>
> Where did it come from? How do I stop it?
>
> Here's a short sample:
>
> tw_command() { cpuspeed=`egrep '^(cpu MHz|cpu clock|clock)' 
> /proc/cpuinfo | cut -f2 -d: | sed -e 's/\.[0-9]*//' -e 's/Mhz//i' -e 
> 's/ //g' | head -n 1`;  cputype=`egrep '^cpu[^a-z]*:' /proc/cpuinfo | 
> sort -u | cut -f2 -d: | sed -e 's/^ //' |  head -n 1`; if [ 
> "${cputype}" = "" ]; then     cputype=`egrep '^model name' 
> /proc/cpuinfo | sort -u | cut -f2 -d: | sed -e 's/^ //' |  head -n 1`; 
> fi; if [ "${cputype}" = "" ]; then     cputype=`egrep '^arch' 
> /proc/cpuinfo | sort -u | cut -f2 -d: | sed -e 's/^ //' |  head -n 1`; 
> fi; if [ "${cputype}" = "" ]; then cputype=`egrep '^(cpu 
> model|family|vendor_id|machine|Processor)' /proc/cpuinfo | sort -u | 
> cut -f2 -d: | sed -e 's/^ //' |  head -n 1`; fi;  logical=`egrep 
> '^[pP]rocessor' /proc/cpuinfo | sort -u | wc -l`;  physical=0; 
> cores=0; threads_per_core=0;  if [ "`echo $cputype | cut -c-2`" = "PA" 
> ]; then     cpufamily=`egrep '^(cpu family)' /proc/cpuinfo | sort -u | 
> cut -f2 -d: | sed -e 's/^ //' |  head -n 1`;     if [ "`echo 
> $cpufamily | cut -c-7`" = "PA-RISC" ]; then 
> cputype="${cp(tideway_i=__TIDEWAY; echo ${tideway_i}_CMD_START__; 
> tw_command; echo ${tideway_i}_CMD_END__)  tw_command() { 
> cpuspeed=`egrep '^(cpu MHz|cpu clock|clock)' /proc/cpuinfo | cut -f2 
> -d: | sed -e 's/\.[0-9]*//' -e 's/Mhz//i' -e 's/ //g' | head -n 1`; 
>  cputype=`egrep '^cpu[^a-z]*:' /proc/cpuinfo | sort -u | cut -f2 -d: | 
> sed -e 's/^ //' |  head -n 1`; if [ "${cputype}" = "" ]; then   
> cputype=`egrep '^model name' /proc/cpuinfo | sort -u | cut -f2 -d: | 
> sed -e 's/^ //' |  head -n 1`; fi; if [ "${cputype}" = "" ]; then     
> cputype=`egrep '^arch' /proc/cpuinfo | sort -u | cut -f2 -d: | sed -e 
> 's/^ //' |  head -n 1`; fi; if [ "${cputype}" = "" ]; then 
> cputype=`egrep '^(cpu model|family|vendor_id|machine|Processor)' 
> /proc/cpuinfo | sort -u | cut -f2 -d: | sed -e 's/^ //' |  head -n 1`; 
> fi;  logical=`egrep '^[pP]rocessor' /proc/cpuinfo | sort -u | wc -l`; 
>  physical=0; cores=0; threads_per_core=0;  if [ "`echo $cputype | cut 
> -c-2`" = "PA" ]; then     cpufamily=`egrep '^(cpu family)' 
> /proc/cpuinfo | sort -u | cut -f2 -d: | sed -e 's/^ //' |  head -n 1`; 
>     if [ "`echo $cpufamily | cut -c-7`" = "PA-RISC" ]; then 
> cputype="${cpprintf("hostid: ");
>
>
>
> _______________________________________________
> Roundtable mailing list
> Roundtable at muug.mb.ca
> http://www.muug.mb.ca/mailman/listinfo/roundtable

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.muug.mb.ca/pipermail/roundtable/attachments/20160129/294de80f/attachment.html>