LeakIX - Host 195.201.170.245

Host 195.201.170.245

Germany

Hetzner Online GmbH

CheckMK monitoring endpoint publicly available

An open CheckMK agent is publicly available.

This could leak sensitive information such as :

Process list ( maybe credentials )
Network interfaces
Running services
Firewall rules
Internal OS configuration

https://docs.checkmk.com/latest/en/wato_monitoringagents.html

IP: 195.201.170.245
Port: 6556

First seen 2022-06-17 23:43
Last seen 2024-12-22 00:59
Open for 918 days

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42e491388f

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7032,00:18:59/182-19:22:04,1) /sbin/init
(root,0,0,00:00:10/182-19:22:04,2) [kthreadd]
(root,0,0,00:00:00/182-19:22:04,3) [rcu_gp]
(root,0,0,00:00:00/182-19:22:04,4) [rcu_par_gp]
(root,0,0,00:00:00/182-19:22:04,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/182-19:22:04,9) [mm_percpu_wq]
(root,0,0,00:04:50/182-19:22:04,10) [ksoftirqd/0]
(root,0,0,00:38:42/182-19:22:04,11) [rcu_sched]
(root,0,0,00:00:46/182-19:22:04,12) [migration/0]
(root,0,0,00:00:00/182-19:22:04,13) [idle_inject/0]
(root,0,0,00:00:00/182-19:22:04,14) [cpuhp/0]
(root,0,0,00:00:00/182-19:22:04,15) [cpuhp/1]
(root,0,0,00:00:00/182-19:22:04,16) [idle_inject/1]
(root,0,0,00:00:46/182-19:22:04,17) [migration/1]
(root,0,0,00:03:35/182-19:22:04,18) [ksoftirqd/1]
(root,0,0,00:00:00/182-19:22:04,20) [kworker/1:0H]
(root,0,0,00:00:00/182-19:22:04,21) [cpuhp/2]
(root,0,0,00:00:00/182-19:22:04,22) [idle_inject/2]
(root,0,0,00:00:44/182-19:22:04,23) [migration/2]
(root,0,0,00:02:18/182-19:22:04,24) [ksoftirqd/2]
(root,0,0,00:00:00/182-19:22:04,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/182-19:22:04,27) [cpuhp/3]
(root,0,0,00:00:00/182-19:22:04,28) [idle_inject/3]
(root,0,0,00:00:59/182-19:22:04,29) [migration/3]
(root,0,0,00:01:41/182-19:22:04,30) [ksoftirqd/3]
(root,0,0,00:00:00/182-19:22:04,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/182-19:22:04,33) [cpuhp/4]
(root,0,0,00:00:00/182-19:22:04,34) [idle_inject/4]
(root,0,0,00:00:44/182-19:22:04,35) [migration/4]
(root,0,0,00:01:19/182-19:22:04,36) [ksoftirqd/4]
(root,0,0,00:00:00/182-19:22:04,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/182-19:22:04,39) [cpuhp/5]
(root,0,0,00:00:00/182-19:22:04,40) [idle_inject/5]
(root,0,0,00:00:44/182-19:22:04,41) [migration/5]
(root,0,0,00:01:10/182-19:22:04,42) [ksoftirqd/5]
(root,0,0,00:00:00/182-19:22:04,44) [kworker/5:0H]
(root,0,0,00:00:00/182-19:22:04,45) [cpuhp/6]
(root,0,0,00:00:00/182-19:22:04,46) [idle_inject/6]
(root,0,0,00:00:41/182-19:22:04,47) [migration/6]
(root,0,0,00:11:09/182-19:22:04,48) [ksoftirqd/6]
(root,0,0,00:00:00/182-19:22:04,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/182-19:22:04,51) [cpuhp/7]
(root,0,0,00:00:00/182-19:22:04,52) [idle_inject/7]
(root,0,0,00:00:52/182-19:22:04,53) [migration/7]
(root,0,0,00:29:11/182-19:22:04,54) [ksoftirqd/7]
(root,0,0,00:00:00/182-19:22:04,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/182-19:22:04,57) [kdevtmpfs]
(root,0,0,00:00:00/182-19:22:04,58) [netns]
(root,0,0,00:00:00/182-19:22:04,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/182-19:22:04,60) [kauditd]
(root,0,0,00:00:05/182-19:22:04,62) [khungtaskd]
(root,0,0,00:00:00/182-19:22:04,63) [oom_reaper]
(root,0,0,00:00:00/182-19:22:04,64) [writeback]
(root,0,0,00:00:00/182-19:22:04,65) [kcompactd0]
(root,0,0,00:00:00/182-19:22:04,66) [ksmd]
(root,0,0,00:03:53/182-19:22:04,67) [khugepaged]
(root,0,0,00:00:00/182-19:22:04,113) [kintegrityd]
(root,0,0,00:00:00/182-19:22:04,114) [kblockd]
(root,0,0,00:00:00/182-19:22:04,115) [blkcg_punt_bio]
(root,0,0,00:00:00/182-19:22:04,116) [tpm_dev_wq]
(root,0,0,00:00:00/182-19:22:04,117) [ata_sff]
(root,0,0,00:00:00/182-19:22:04,118) [md]
(root,0,0,00:00:00/182-19:22:04,119) [edac-poller]
(root,0,0,00:00:00/182-19:22:04,120) [devfreq_wq]
(root,0,0,00:00:00/182-19:22:04,121) [watchdogd]
(root,0,0,00:28:24/182-19:22:04,128) [kswapd0]
(root,0,0,00:00:00/182-19:22:04,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/182-19:22:04,131) [kthrotld]
(root,0,0,00:00:00/182-19:22:04,132) [acpi_thermal_pm]
(root,0,0,00:00:00/182-19:22:04,133) [nvme-wq]
(root,0,0,00:00:00/182-19:22:04,134) [nvme-reset-wq]
(root,0,0,00:00:00/182-19:22:04,135) [nvme-delete-wq]
(root,0,0,00:00:00/182-19:22:04,137) [ipv6_addrconf]
(root,0,0,00:00:00/182-19:22:04,146) [kstrp]
(root,0,0,00:00:00/182-19:22:04,147) [kworker/u17:0]
(root,0,0,00:00:00/182-19:22:04,162) [charger_manager]
(root,0,0,00:00:00/182-19:22:03,210) [scsi_eh_0]
(root,0,0,00:00:00/182-19:22:03,211) [scsi_tmf_0]
(root,0,0,00:00:00/182-19:22:03,212) [scsi_eh_1]
(root,0,0,00:00:00/182-19:22:03,213) [scsi_tmf_1]
(root,0,0,00:00:00/182-19:22:03,214) [scsi_eh_2]
(root,0,0,00:00:00/182-19:22:03,215) [scsi_tmf_2]
(root,0,0,00:00:00/182-19:22:03,216) [scsi_eh_3]
(root,0,0,00:00:00/182-19:22:03,217) [scsi_tmf_3]
(root,0,0,00:00:00/182-19:22:03,218) [scsi_eh_4]
(root,0,0,00:00:00/182-19:22:03,219) [scsi_tmf_4]
(root,0,0,00:00:00/182-19:22:03,220) [scsi_eh_5]
(root,0,0,00:00:00/182-19:22:03,221) [scsi_tmf_5]
(root,0,0,00:04:04/182-19:22:03,228) [kworker/3:1H-kblockd]
(root,0,0,00:05:12/182-19:22:03,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:53/182-19:22:03,237) [kworker/1:1H-kblockd]
(root,0,0,00:54:48/182-19:22:03,238) [kworker/6:1H-kblockd]
(root,0,0,00:05:25/182-19:22:03,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:52/182-19:22:03,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:58/182-19:22:03,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:47/182-19:22:03,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:02/182-19:22:03,248) [md1_raid1]
(root,0,0,00:00:42/182-19:22:03,251) [md0_raid1]
(root,0,0,01:23:29/182-19:22:03,253) [md2_raid1]
(root,0,0,00:00:00/182-19:22:02,268) [raid5wq]
(root,0,0,00:08:23/182-19:21:59,291) [jbd2/md2-8]
(root,0,0,00:00:00/182-19:21:59,292) [ext4-rsv-conver]
(root,211768,104104,00:45:42/182-19:21:59,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/182-19:21:59,348) [rpciod]
(root,0,0,00:00:00/182-19:21:59,349) [xprtiod]
(root,0,0,00:00:00/182-19:21:59,353) [spl_system_task]
(root,0,0,00:00:00/182-19:21:59,354) [spl_delay_taskq]
(root,0,0,00:00:00/182-19:21:59,355) [spl_dynamic_tas]
(root,0,0,00:00:00/182-19:21:59,356) [spl_kmem_cache]
(root,0,0,00:00:00/182-19:21:58,361) [zvol]
(root,0,0,00:00:00/182-19:21:58,362) [arc_prune]
(root,0,0,00:04:11/182-19:21:58,363) [arc_evict]
(root,0,0,00:03:54/182-19:21:58,364) [arc_reap]
(root,0,0,00:00:00/182-19:21:58,366) [dbu_evict]
(root,0,0,00:03:46/182-19:21:58,367) [dbuf_evict]
(root,22980,3884,00:20:37/182-19:21:58,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/182-19:21:58,376) [z_vdev_file]
(root,0,0,00:02:06/182-19:21:58,377) [l2arc_feed]
(root,0,0,00:00:00/182-19:21:58,485) [cryptd]
(root,3860,2120,00:00:06/182-19:21:58,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/182-19:21:58,522) [jbd2/md1-8]
(root,0,0,00:00:00/182-19:21:58,523) [ext4-rsv-conver]
(_rpc,7864,4412,00:00:28/182-19:21:56,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3384,00:00:12/182-19:21:56,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:36:38/182-19:21:56,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:57/182-19:21:56,571) /usr/sbin/watchdog-mux
(root,12248,4712,00:00:04/182-19:21:56,573) /usr/sbin/smartd -n
(messagebus,9048,3996,00:15:21/182-19:21:56,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2096,00:00:18/182-19:21:56,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4580,00:01:38/182-19:21:56,578) /lib/systemd/systemd-logind
(root,223768,3756,00:14:12/182-19:21:56,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2724,00:00:00/182-19:21:56,580) /usr/sbin/zed -F
(root,275828,1032,00:00:00/182-19:21:56,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1656,00:00:05/182-19:21:56,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,0,0,00:00:00/02:33,713) [kworker/3:1-cgroup_destroy]
(root,7304,1352,00:00:00/182-19:21:55,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:06:17/182-19:21:55,768) bpfilter_umh
(root,13808,4884,00:13:39/182-19:21:55,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/182-19:21:55,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3260,00:39:58/182-19:21:55,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,729308,52784,03:09:40/182-19:21:55,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:50/182-19:21:55,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3460,00:00:36/182-19:21:55,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5356,00:00:07/182-19:21:55,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:18/182-19:21:54,1061) /usr/sbin/cron -f
(root,303168,37768,16:54:43/182-19:21:53,1068) pvestatd
(root,304364,30764,06:53:08/182-19:21:53,1069) pve-firewall
(root,353760,4072,00:02:10/182-19:21:53,1093) pvedaemon
(root,336416,10860,00:15:28/182-19:21:53,1101) pve-ha-crm
(www-data,355148,144656,00:04:44/182-19:21:52,1102) pveproxy
(www-data,68920,57624,00:03:00/182-19:21:52,1109) spiceproxy
(root,335964,31664,00:25:25/182-19:21:52,1111) pve-ha-lrm
(root,0,0,00:00:00/01:33,1113) [kworker/5:0-events]
(root,0,0,00:00:00/01:33,1114) [kworker/5:1-cgroup_destroy]
(root,6100360,3565180,9-11:31:41/182-19:21:51,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:13/182-19:21:51,1129) [kvm-nx-lpage-re]
(root,0,0,13:52:08/182-19:21:51,1148) [vhost-1125]
(root,0,0,11:43:01/182-19:21:50,1167) [vhost-1125]
(root,0,0,01:14:33/182-19:21:50,1172) [kvm-pit/1125]
(root,14120132,8651616,93-17:53:18/182-19:21:47,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:06:32/182-19:21:47,1188) [kvm-nx-lpage-re]
(root,0,0,00:23:38/182-19:21:47,1207) [vhost-1184]
(root,0,0,01:25:06/182-19:21:47,1212) [kvm-pit/1184]
(root,0,0,00:00:00/182-19:21:44,1214) [dio/md2]
(root,3751792,2383372,44-17:34:25/182-19:21:43,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:52/182-19:21:43,1267) [kvm-nx-lpage-re]
(root,0,0,05:47:19/182-19:21:43,1286) [vhost-1263]
(root,0,0,00:00:00/182-19:21:43,1289) [kvm-pit/1263]
(root,0,0,00:00:00/182-19:21:42,1295) [ib-comp-wq]
(root,0,0,00:00:00/182-19:21:42,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/182-19:21:42,1297) [ib_mcast]
(root,0,0,00:00:00/182-19:21:42,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/182-19:21:42,1299) [rdma_cm]
(root,0,0,00:00:00/182-19:21:42,1300) [cifsiod]
(root,0,0,00:00:00/182-19:21:42,1301) [smb3decryptd]
(root,0,0,00:00:00/182-19:21:42,1302) [cifsfileinfoput]
(root,0,0,00:00:00/182-19:21:42,1303) [cifsoplockd]
(root,0,0,00:15:46/182-19:21:42,1305) [cifsd]
(root,0,0,00:05:55/182-19:21:42,1340) [cifsd]
(root,6146304,4325672,12-02:25:53/182-19:21:39,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:02/182-19:21:39,1358) [kvm-nx-lpage-re]
(root,0,0,02:20:11/182-19:21:39,1377) [vhost-1354]
(root,0,0,00:00:00/182-19:21:39,1382) [kvm-pit/1354]
(root,21174276,17102864,14-07:22:49/182-19:21:35,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:42/182-19:21:35,1398) [kvm-nx-lpage-re]
(root,0,0,01:44:28/182-19:21:34,1417) [vhost-1394]
(root,0,0,00:00:00/182-19:21:34,1422) [kvm-pit/1394]
(root,19449936,6071736,10-06:04:39/182-19:21:31,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:37/182-19:21:31,1468) [kvm-nx-lpage-re]
(root,0,0,00:02:03/182-19:21:30,1487) [vhost-1464]
(root,0,0,00:00:00/182-19:21:30,1492) [kvm-pit/1464]
(root,6166444,4364412,38-11:30:18/182-19:21:27,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:20/182-19:21:27,1511) [kvm-nx-lpage-re]
(root,0,0,01:58:23/182-19:21:26,1531) [vhost-1507]
(root,0,0,00:00:00/182-19:21:26,1534) [kvm-pit/1507]
(root,13808,6504,00:00:00/00:35,1536) sshd: [accepted]
(root,0,0,00:00:00/00:33,1553) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/00:33,1554) [kworker/4:3-events]
(root,14792,7912,00:00:00/00:03,1681) sshd: unknown [priv]
(sshd,13808,4964,00:00:00/00:03,1682) sshd: unknown [net]
(root,14508,7672,00:00:00/00:01,1765) sshd: root [priv]
(sshd,13808,4880,00:00:00/00:01,1766) sshd: root [net]
(root,7188,3256,00:00:00/00:00,1768) /bin/bash /usr/bin/check_mk_agent
(root,58508,50456,00:00:00/00:00,1850) /usr/bin/perl /usr/bin/pvecm nodes
(root,13808,6828,00:00:00/00:00,1851) sshd: [accepted]
(sshd,13808,2468,00:00:00/00:00,1852) sshd: [net]
(root,7188,3136,00:00:00/00:00,1853) /bin/bash /usr/bin/check_mk_agent
(root,7632,2720,00:00:00/00:00,1879) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,996,00:00:00/00:00,1880) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362388,46260,00:00:07/3-18:01:16,7352) pvedaemon worker
(postfix,43844,7604,00:00:00/01:13:36,9969) pickup -l -t unix -u -c
(root,362264,43876,00:00:06/3-17:36:06,14417) pvedaemon worker
(root,362392,44232,00:00:06/3-17:26:15,17232) pvedaemon worker
(root,0,0,00:00:00/44:33,19101) [kworker/3:2-events]
(root,0,0,00:00:00/28:50,23969) [kworker/u16:0-events_unbound]
(root,0,0,00:00:00/25:33,25146) [kworker/0:0-events]
(root,0,0,00:00:00/20:39,26784) [kworker/u16:1-flush-9:2]
(root,0,0,00:00:00/18:33,27518) [kworker/1:0-events]
(www-data,76820,54776,00:00:00/01:59:30,27758) spiceproxy worker
(root,86168,2132,00:00:00/01:59:30,27760) /usr/sbin/pvefw-logger
(www-data,355592,130396,00:00:00/01:59:30,27767) pveproxy worker
(www-data,355592,130396,00:00:00/01:59:30,27768) pveproxy worker
(www-data,355592,130396,00:00:00/01:59:30,27769) pveproxy worker
(root,0,0,00:00:00/17:33,27861) [kworker/0:2-events]
(root,0,0,00:00:00/16:33,28209) [kworker/2:1-cgroup_destroy]
(root,18894648,10640236,6-19:04:47/156-15:55:56,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:45/156-15:55:56,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:37/156-15:55:56,28619) [vhost-28596]
(root,0,0,01:13:29/156-15:55:56,28626) [kvm-pit/28596]
(root,0,0,00:00:00/14:33,28886) [kworker/4:2-cgroup_destroy]
(root,0,0,00:00:00/13:33,29214) [kworker/7:2-events]
(root,0,0,00:00:00/13:33,29215) [kworker/7:3-events]
(root,0,0,00:00:00/11:33,29909) [kworker/6:1-events]
(root,0,0,00:00:00/09:33,30600) [kworker/3:0-events]
(root,0,0,00:00:00/08:33,30943) [kworker/4:1-events]
(root,0,0,00:00:00/07:33,31272) [kworker/5:2-events]
(root,0,0,00:00:00/07:33,31273) [kworker/5:3-events]
(root,0,0,00:00:00/06:33,31636) [kworker/1:1-mm_percpu_wq]
(root,0,0,00:00:00/05:33,32005) [kworker/6:0-events]
(root,0,0,00:00:00/05:33,32006) [kworker/2:2-events]
(root,0,0,00:00:00/03:40,32644) [kworker/u16:2]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-22 00:59

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c428ac62c93

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7080,00:18:44/180-18:57:51,1) /sbin/init
(root,0,0,00:00:10/180-18:57:51,2) [kthreadd]
(root,0,0,00:00:00/180-18:57:51,3) [rcu_gp]
(root,0,0,00:00:00/180-18:57:51,4) [rcu_par_gp]
(root,0,0,00:00:00/180-18:57:51,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/180-18:57:51,9) [mm_percpu_wq]
(root,0,0,00:04:48/180-18:57:51,10) [ksoftirqd/0]
(root,0,0,00:38:14/180-18:57:51,11) [rcu_sched]
(root,0,0,00:00:46/180-18:57:51,12) [migration/0]
(root,0,0,00:00:00/180-18:57:51,13) [idle_inject/0]
(root,0,0,00:00:00/180-18:57:51,14) [cpuhp/0]
(root,0,0,00:00:00/180-18:57:51,15) [cpuhp/1]
(root,0,0,00:00:00/180-18:57:51,16) [idle_inject/1]
(root,0,0,00:00:45/180-18:57:51,17) [migration/1]
(root,0,0,00:03:33/180-18:57:51,18) [ksoftirqd/1]
(root,0,0,00:00:00/180-18:57:51,20) [kworker/1:0H]
(root,0,0,00:00:00/180-18:57:51,21) [cpuhp/2]
(root,0,0,00:00:00/180-18:57:51,22) [idle_inject/2]
(root,0,0,00:00:44/180-18:57:51,23) [migration/2]
(root,0,0,00:02:16/180-18:57:51,24) [ksoftirqd/2]
(root,0,0,00:00:00/180-18:57:51,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/180-18:57:51,27) [cpuhp/3]
(root,0,0,00:00:00/180-18:57:51,28) [idle_inject/3]
(root,0,0,00:00:58/180-18:57:51,29) [migration/3]
(root,0,0,00:01:40/180-18:57:51,30) [ksoftirqd/3]
(root,0,0,00:00:00/180-18:57:51,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/180-18:57:51,33) [cpuhp/4]
(root,0,0,00:00:00/180-18:57:51,34) [idle_inject/4]
(root,0,0,00:00:43/180-18:57:51,35) [migration/4]
(root,0,0,00:01:18/180-18:57:51,36) [ksoftirqd/4]
(root,0,0,00:00:00/180-18:57:51,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/180-18:57:51,39) [cpuhp/5]
(root,0,0,00:00:00/180-18:57:51,40) [idle_inject/5]
(root,0,0,00:00:43/180-18:57:51,41) [migration/5]
(root,0,0,00:01:09/180-18:57:51,42) [ksoftirqd/5]
(root,0,0,00:00:00/180-18:57:51,44) [kworker/5:0H]
(root,0,0,00:00:00/180-18:57:51,45) [cpuhp/6]
(root,0,0,00:00:00/180-18:57:51,46) [idle_inject/6]
(root,0,0,00:00:41/180-18:57:51,47) [migration/6]
(root,0,0,00:11:01/180-18:57:51,48) [ksoftirqd/6]
(root,0,0,00:00:00/180-18:57:51,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/180-18:57:51,51) [cpuhp/7]
(root,0,0,00:00:00/180-18:57:51,52) [idle_inject/7]
(root,0,0,00:00:52/180-18:57:51,53) [migration/7]
(root,0,0,00:28:49/180-18:57:51,54) [ksoftirqd/7]
(root,0,0,00:00:00/180-18:57:51,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/180-18:57:51,57) [kdevtmpfs]
(root,0,0,00:00:00/180-18:57:51,58) [netns]
(root,0,0,00:00:00/180-18:57:51,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/180-18:57:51,60) [kauditd]
(root,0,0,00:00:05/180-18:57:51,62) [khungtaskd]
(root,0,0,00:00:00/180-18:57:51,63) [oom_reaper]
(root,0,0,00:00:00/180-18:57:51,64) [writeback]
(root,0,0,00:00:00/180-18:57:51,65) [kcompactd0]
(root,0,0,00:00:00/180-18:57:51,66) [ksmd]
(root,0,0,00:03:52/180-18:57:51,67) [khugepaged]
(root,0,0,00:00:00/180-18:57:51,113) [kintegrityd]
(root,0,0,00:00:00/180-18:57:51,114) [kblockd]
(root,0,0,00:00:00/180-18:57:51,115) [blkcg_punt_bio]
(root,0,0,00:00:00/180-18:57:51,116) [tpm_dev_wq]
(root,0,0,00:00:00/180-18:57:51,117) [ata_sff]
(root,0,0,00:00:00/180-18:57:51,118) [md]
(root,0,0,00:00:00/180-18:57:51,119) [edac-poller]
(root,0,0,00:00:00/180-18:57:51,120) [devfreq_wq]
(root,0,0,00:00:00/180-18:57:51,121) [watchdogd]
(root,0,0,00:28:01/180-18:57:51,128) [kswapd0]
(root,0,0,00:00:00/180-18:57:51,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/180-18:57:51,131) [kthrotld]
(root,0,0,00:00:00/180-18:57:51,132) [acpi_thermal_pm]
(root,0,0,00:00:00/180-18:57:51,133) [nvme-wq]
(root,0,0,00:00:00/180-18:57:51,134) [nvme-reset-wq]
(root,0,0,00:00:00/180-18:57:51,135) [nvme-delete-wq]
(root,0,0,00:00:00/180-18:57:51,137) [ipv6_addrconf]
(root,0,0,00:00:00/180-18:57:51,146) [kstrp]
(root,0,0,00:00:00/180-18:57:51,147) [kworker/u17:0]
(root,0,0,00:00:00/180-18:57:51,162) [charger_manager]
(root,0,0,00:00:00/180-18:57:50,210) [scsi_eh_0]
(root,0,0,00:00:00/180-18:57:50,211) [scsi_tmf_0]
(root,0,0,00:00:00/180-18:57:50,212) [scsi_eh_1]
(root,0,0,00:00:00/180-18:57:50,213) [scsi_tmf_1]
(root,0,0,00:00:00/180-18:57:50,214) [scsi_eh_2]
(root,0,0,00:00:00/180-18:57:50,215) [scsi_tmf_2]
(root,0,0,00:00:00/180-18:57:50,216) [scsi_eh_3]
(root,0,0,00:00:00/180-18:57:50,217) [scsi_tmf_3]
(root,0,0,00:00:00/180-18:57:50,218) [scsi_eh_4]
(root,0,0,00:00:00/180-18:57:50,219) [scsi_tmf_4]
(root,0,0,00:00:00/180-18:57:50,220) [scsi_eh_5]
(root,0,0,00:00:00/180-18:57:50,221) [scsi_tmf_5]
(root,0,0,00:03:57/180-18:57:50,228) [kworker/3:1H-kblockd]
(root,0,0,00:05:05/180-18:57:50,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:47/180-18:57:50,237) [kworker/1:1H-kblockd]
(root,0,0,00:54:07/180-18:57:50,238) [kworker/6:1H-kblockd]
(root,0,0,00:05:18/180-18:57:50,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:46/180-18:57:50,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:52/180-18:57:50,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:41/180-18:57:50,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/180-18:57:50,248) [md1_raid1]
(root,0,0,00:00:36/180-18:57:50,251) [md0_raid1]
(root,0,0,01:16:45/180-18:57:50,253) [md2_raid1]
(root,0,0,00:00:00/180-18:57:49,268) [raid5wq]
(root,0,0,00:08:18/180-18:57:46,291) [jbd2/md2-8]
(root,0,0,00:00:00/180-18:57:46,292) [ext4-rsv-conver]
(root,198120,93360,00:44:59/180-18:57:46,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/180-18:57:46,348) [rpciod]
(root,0,0,00:00:00/180-18:57:46,349) [xprtiod]
(root,0,0,00:00:00/180-18:57:46,353) [spl_system_task]
(root,0,0,00:00:00/180-18:57:46,354) [spl_delay_taskq]
(root,0,0,00:00:00/180-18:57:46,355) [spl_dynamic_tas]
(root,0,0,00:00:00/180-18:57:46,356) [spl_kmem_cache]
(root,0,0,00:00:00/180-18:57:45,361) [zvol]
(root,0,0,00:00:00/180-18:57:45,362) [arc_prune]
(root,0,0,00:04:08/180-18:57:45,363) [arc_evict]
(root,0,0,00:03:51/180-18:57:45,364) [arc_reap]
(root,0,0,00:00:00/180-18:57:45,366) [dbu_evict]
(root,0,0,00:03:44/180-18:57:45,367) [dbuf_evict]
(root,22980,3884,00:20:23/180-18:57:45,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/180-18:57:45,376) [z_vdev_file]
(root,0,0,00:02:04/180-18:57:45,377) [l2arc_feed]
(root,0,0,00:00:00/180-18:57:45,485) [cryptd]
(root,3860,2120,00:00:06/180-18:57:45,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/180-18:57:45,522) [jbd2/md1-8]
(root,0,0,00:00:00/180-18:57:45,523) [ext4-rsv-conver]
(_rpc,7864,4444,00:00:28/180-18:57:43,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3384,00:00:12/180-18:57:43,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:36:13/180-18:57:43,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:53/180-18:57:43,571) /usr/sbin/watchdog-mux
(root,12248,4712,00:00:04/180-18:57:43,573) /usr/sbin/smartd -n
(messagebus,9048,4032,00:15:07/180-18:57:43,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2096,00:00:18/180-18:57:43,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4580,00:01:37/180-18:57:43,578) /lib/systemd/systemd-logind
(root,223768,3752,00:13:59/180-18:57:43,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2728,00:00:00/180-18:57:43,580) /usr/sbin/zed -F
(root,275828,1036,00:00:00/180-18:57:43,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1656,00:00:05/180-18:57:43,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1356,00:00:00/180-18:57:42,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:06:13/180-18:57:42,768) bpfilter_umh
(root,13808,4920,00:13:25/180-18:57:42,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/180-18:57:42,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3260,00:39:36/180-18:57:42,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,729308,52724,03:07:40/180-18:57:42,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:50/180-18:57:42,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3460,00:00:35/180-18:57:42,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5712,00:00:07/180-18:57:42,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:18/180-18:57:41,1061) /usr/sbin/cron -f
(root,303168,37776,16:43:03/180-18:57:40,1068) pvestatd
(root,304364,30764,06:48:26/180-18:57:40,1069) pve-firewall
(root,353760,4072,00:02:09/180-18:57:40,1093) pvedaemon
(root,336416,10860,00:15:18/180-18:57:40,1101) pve-ha-crm
(www-data,355144,144984,00:04:40/180-18:57:39,1102) pveproxy
(www-data,68852,57624,00:02:58/180-18:57:39,1109) spiceproxy
(root,335964,31664,00:25:08/180-18:57:39,1111) pve-ha-lrm
(root,6091776,3563800,9-09:00:59/180-18:57:38,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:13/180-18:57:38,1129) [kvm-nx-lpage-re]
(root,0,0,13:43:10/180-18:57:38,1148) [vhost-1125]
(root,0,0,11:35:29/180-18:57:37,1167) [vhost-1125]
(root,0,0,01:13:48/180-18:57:37,1172) [kvm-pit/1125]
(root,14111540,8646908,91-14:22:23/180-18:57:34,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:06:28/180-18:57:34,1188) [kvm-nx-lpage-re]
(root,0,0,00:23:31/180-18:57:34,1207) [vhost-1184]
(root,0,0,01:24:12/180-18:57:34,1212) [kvm-pit/1184]
(root,0,0,00:00:00/180-18:57:31,1214) [dio/md2]
(root,3743276,2377392,44-05:20:29/180-18:57:30,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:51/180-18:57:30,1267) [kvm-nx-lpage-re]
(root,0,0,05:43:56/180-18:57:30,1286) [vhost-1263]
(root,0,0,00:00:00/180-18:57:30,1289) [kvm-pit/1263]
(root,0,0,00:00:00/180-18:57:29,1295) [ib-comp-wq]
(root,0,0,00:00:00/180-18:57:29,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/180-18:57:29,1297) [ib_mcast]
(root,0,0,00:00:00/180-18:57:29,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/180-18:57:29,1299) [rdma_cm]
(root,0,0,00:00:00/180-18:57:29,1300) [cifsiod]
(root,0,0,00:00:00/180-18:57:29,1301) [smb3decryptd]
(root,0,0,00:00:00/180-18:57:29,1302) [cifsfileinfoput]
(root,0,0,00:00:00/180-18:57:29,1303) [cifsoplockd]
(root,0,0,00:15:36/180-18:57:29,1305) [cifsd]
(root,0,0,00:05:52/180-18:57:29,1340) [cifsd]
(root,6137720,4320248,11-23:06:28/180-18:57:26,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:01/180-18:57:26,1358) [kvm-nx-lpage-re]
(root,0,0,02:18:42/180-18:57:26,1377) [vhost-1354]
(root,0,0,00:00:00/180-18:57:26,1382) [kvm-pit/1354]
(root,21183112,17099584,14-03:01:19/180-18:57:22,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:40/180-18:57:22,1398) [kvm-nx-lpage-re]
(root,0,0,01:43:08/180-18:57:21,1417) [vhost-1394]
(root,0,0,00:00:00/180-18:57:21,1422) [kvm-pit/1394]
(root,19441344,6064812,10-03:19:51/180-18:57:18,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:36/180-18:57:18,1468) [kvm-nx-lpage-re]
(root,0,0,00:02:02/180-18:57:17,1487) [vhost-1464]
(root,0,0,00:00:00/180-18:57:17,1492) [kvm-pit/1464]
(root,6157856,4358420,38-03:54:54/180-18:57:14,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:18/180-18:57:14,1511) [kvm-nx-lpage-re]
(root,0,0,01:56:46/180-18:57:13,1531) [vhost-1507]
(root,0,0,00:00:00/180-18:57:13,1534) [kvm-pit/1507]
(www-data,76752,54656,00:00:00/01:35:18,4741) spiceproxy worker
(root,86168,2052,00:00:00/01:35:18,4743) /usr/sbin/pvefw-logger
(www-data,355596,130172,00:00:00/01:35:18,4757) pveproxy worker
(www-data,355596,130172,00:00:00/01:35:18,4758) pveproxy worker
(www-data,355596,130172,00:00:00/01:35:18,4759) pveproxy worker
(root,362388,45748,00:00:05/1-17:37:03,7352) pvedaemon worker
(postfix,43844,7708,00:00:00/01:08:01,12251) pickup -l -t unix -u -c
(root,0,0,00:00:00/01:03:20,13593) [kworker/4:3-events]
(root,362264,44372,00:00:04/1-17:11:53,14417) pvedaemon worker
(root,0,0,00:00:00/58:20,15073) [kworker/2:2-events]
(root,362392,43528,00:00:04/1-17:02:02,17232) pvedaemon worker
(root,0,0,00:00:00/36:20,20993) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/31:20,22397) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/31:20,22398) [kworker/3:2-events]
(root,0,0,00:00:00/24:20,24303) [kworker/0:1-events]
(root,0,0,00:00:00/19:29,25614) [kworker/6:3-events]
(root,0,0,00:00:00/19:20,25740) [kworker/1:0-events]
(root,0,0,00:00:00/18:40,25891) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/17:20,26332) [kworker/0:0-events]
(root,0,0,00:00:00/16:20,26604) [kworker/4:2-events]
(root,0,0,00:00:00/14:20,27142) [kworker/7:0-events]
(root,0,0,00:00:00/13:20,27422) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/12:20,27695) [kworker/7:2-events]
(root,0,0,00:00:00/11:45,27803) [kworker/u16:0-flush-9:2]
(root,0,0,00:00:00/09:20,28511) [kworker/5:0-events]
(root,0,0,00:00:00/09:20,28512) [kworker/5:1-cgroup_destroy]
(root,18894292,10636156,6-16:55:54/154-15:31:43,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:44/154-15:31:43,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:36/154-15:31:43,28619) [vhost-28596]
(root,0,0,01:12:35/154-15:31:43,28626) [kvm-pit/28596]
(root,0,0,00:00:00/08:41,28640) [kworker/6:1-dio/md2]
(root,0,0,00:00:00/08:20,28799) [kworker/6:2-dio/md2]
(root,0,0,00:00:00/05:20,29615) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/04:20,29967) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/03:33,30105) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/03:20,30237) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/02:47,30336) [kworker/6:0-dio/md2]
(root,0,0,00:00:00/02:47,30338) [kworker/6:4-dio/md2]
(root,0,0,00:00:00/02:47,30347) [kworker/6:5-dio/md2]
(root,0,0,00:00:00/02:47,30348) [kworker/6:6-dio/md2]
(root,0,0,00:00:00/02:47,30349) [kworker/6:7-dio/md2]
(root,0,0,00:00:00/02:47,30350) [kworker/6:8-dio/md2]
(root,0,0,00:00:00/02:47,30351) [kworker/6:9-dio/md2]
(root,0,0,00:00:00/02:47,30352) [kworker/6:10-dio/md2]
(root,0,0,00:00:00/02:47,30353) [kworker/6:11-dio/md2]
(root,0,0,00:00:00/02:47,30354) [kworker/6:12]
(root,0,0,00:00:00/01:20,30786) [kworker/1:3-mm_percpu_wq]
(root,0,0,00:00:00/00:20,31055) [kworker/7:1-cgroup_destroy]
(root,7188,3216,00:00:00/00:00,31156) /bin/bash /usr/bin/check_mk_agent
(root,7632,2672,00:00:00/00:00,31182) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,928,00:00:00/00:00,31183) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-20 00:35

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c4266922141

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,6716,00:18:32/178-20:11:29,1) /sbin/init
(root,0,0,00:00:10/178-20:11:29,2) [kthreadd]
(root,0,0,00:00:00/178-20:11:29,3) [rcu_gp]
(root,0,0,00:00:00/178-20:11:29,4) [rcu_par_gp]
(root,0,0,00:00:00/178-20:11:29,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/178-20:11:29,9) [mm_percpu_wq]
(root,0,0,00:04:46/178-20:11:29,10) [ksoftirqd/0]
(root,0,0,00:37:48/178-20:11:29,11) [rcu_sched]
(root,0,0,00:00:45/178-20:11:29,12) [migration/0]
(root,0,0,00:00:00/178-20:11:29,13) [idle_inject/0]
(root,0,0,00:00:00/178-20:11:29,14) [cpuhp/0]
(root,0,0,00:00:00/178-20:11:29,15) [cpuhp/1]
(root,0,0,00:00:00/178-20:11:29,16) [idle_inject/1]
(root,0,0,00:00:45/178-20:11:29,17) [migration/1]
(root,0,0,00:03:32/178-20:11:29,18) [ksoftirqd/1]
(root,0,0,00:00:00/178-20:11:29,20) [kworker/1:0H]
(root,0,0,00:00:00/178-20:11:29,21) [cpuhp/2]
(root,0,0,00:00:00/178-20:11:29,22) [idle_inject/2]
(root,0,0,00:00:43/178-20:11:29,23) [migration/2]
(root,0,0,00:02:15/178-20:11:29,24) [ksoftirqd/2]
(root,0,0,00:00:00/178-20:11:29,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/178-20:11:29,27) [cpuhp/3]
(root,0,0,00:00:00/178-20:11:29,28) [idle_inject/3]
(root,0,0,00:00:58/178-20:11:29,29) [migration/3]
(root,0,0,00:01:39/178-20:11:29,30) [ksoftirqd/3]
(root,0,0,00:00:00/178-20:11:29,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/178-20:11:29,33) [cpuhp/4]
(root,0,0,00:00:00/178-20:11:29,34) [idle_inject/4]
(root,0,0,00:00:43/178-20:11:29,35) [migration/4]
(root,0,0,00:01:18/178-20:11:29,36) [ksoftirqd/4]
(root,0,0,00:00:00/178-20:11:29,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/178-20:11:29,39) [cpuhp/5]
(root,0,0,00:00:00/178-20:11:29,40) [idle_inject/5]
(root,0,0,00:00:43/178-20:11:29,41) [migration/5]
(root,0,0,00:01:08/178-20:11:29,42) [ksoftirqd/5]
(root,0,0,00:00:00/178-20:11:29,44) [kworker/5:0H]
(root,0,0,00:00:00/178-20:11:29,45) [cpuhp/6]
(root,0,0,00:00:00/178-20:11:29,46) [idle_inject/6]
(root,0,0,00:00:41/178-20:11:29,47) [migration/6]
(root,0,0,00:10:55/178-20:11:29,48) [ksoftirqd/6]
(root,0,0,00:00:00/178-20:11:29,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/178-20:11:29,51) [cpuhp/7]
(root,0,0,00:00:00/178-20:11:29,52) [idle_inject/7]
(root,0,0,00:00:51/178-20:11:29,53) [migration/7]
(root,0,0,00:28:32/178-20:11:29,54) [ksoftirqd/7]
(root,0,0,00:00:00/178-20:11:29,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/178-20:11:29,57) [kdevtmpfs]
(root,0,0,00:00:00/178-20:11:29,58) [netns]
(root,0,0,00:00:00/178-20:11:29,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/178-20:11:29,60) [kauditd]
(root,0,0,00:00:05/178-20:11:29,62) [khungtaskd]
(root,0,0,00:00:00/178-20:11:29,63) [oom_reaper]
(root,0,0,00:00:00/178-20:11:29,64) [writeback]
(root,0,0,00:00:00/178-20:11:29,65) [kcompactd0]
(root,0,0,00:00:00/178-20:11:29,66) [ksmd]
(root,0,0,00:03:52/178-20:11:29,67) [khugepaged]
(root,0,0,00:00:00/178-20:11:29,113) [kintegrityd]
(root,0,0,00:00:00/178-20:11:29,114) [kblockd]
(root,0,0,00:00:00/178-20:11:29,115) [blkcg_punt_bio]
(root,0,0,00:00:00/178-20:11:29,116) [tpm_dev_wq]
(root,0,0,00:00:00/178-20:11:29,117) [ata_sff]
(root,0,0,00:00:00/178-20:11:29,118) [md]
(root,0,0,00:00:00/178-20:11:29,119) [edac-poller]
(root,0,0,00:00:00/178-20:11:29,120) [devfreq_wq]
(root,0,0,00:00:00/178-20:11:29,121) [watchdogd]
(root,0,0,00:27:49/178-20:11:29,128) [kswapd0]
(root,0,0,00:00:00/178-20:11:29,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/178-20:11:29,131) [kthrotld]
(root,0,0,00:00:00/178-20:11:29,132) [acpi_thermal_pm]
(root,0,0,00:00:00/178-20:11:29,133) [nvme-wq]
(root,0,0,00:00:00/178-20:11:29,134) [nvme-reset-wq]
(root,0,0,00:00:00/178-20:11:29,135) [nvme-delete-wq]
(root,0,0,00:00:00/178-20:11:29,137) [ipv6_addrconf]
(root,0,0,00:00:00/178-20:11:29,146) [kstrp]
(root,0,0,00:00:00/178-20:11:29,147) [kworker/u17:0]
(root,0,0,00:00:00/178-20:11:29,162) [charger_manager]
(root,0,0,00:00:00/178-20:11:28,210) [scsi_eh_0]
(root,0,0,00:00:00/178-20:11:28,211) [scsi_tmf_0]
(root,0,0,00:00:00/178-20:11:28,212) [scsi_eh_1]
(root,0,0,00:00:00/178-20:11:28,213) [scsi_tmf_1]
(root,0,0,00:00:00/178-20:11:28,214) [scsi_eh_2]
(root,0,0,00:00:00/178-20:11:28,215) [scsi_tmf_2]
(root,0,0,00:00:00/178-20:11:28,216) [scsi_eh_3]
(root,0,0,00:00:00/178-20:11:28,217) [scsi_tmf_3]
(root,0,0,00:00:00/178-20:11:28,218) [scsi_eh_4]
(root,0,0,00:00:00/178-20:11:28,219) [scsi_tmf_4]
(root,0,0,00:00:00/178-20:11:28,220) [scsi_eh_5]
(root,0,0,00:00:00/178-20:11:28,221) [scsi_tmf_5]
(root,0,0,00:03:55/178-20:11:28,228) [kworker/3:1H-kblockd]
(root,0,0,00:05:02/178-20:11:28,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:44/178-20:11:28,237) [kworker/1:1H-kblockd]
(root,0,0,00:53:34/178-20:11:28,238) [kworker/6:1H-kblockd]
(root,0,0,00:05:15/178-20:11:28,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:44/178-20:11:28,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:50/178-20:11:28,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:39/178-20:11:28,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/178-20:11:28,248) [md1_raid1]
(root,0,0,00:00:36/178-20:11:28,251) [md0_raid1]
(root,0,0,01:16:15/178-20:11:28,253) [md2_raid1]
(root,0,0,00:00:00/178-20:11:27,268) [raid5wq]
(root,0,0,00:08:13/178-20:11:24,291) [jbd2/md2-8]
(root,0,0,00:00:00/178-20:11:24,292) [ext4-rsv-conver]
(root,287132,150140,00:44:24/178-20:11:24,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/178-20:11:24,348) [rpciod]
(root,0,0,00:00:00/178-20:11:24,349) [xprtiod]
(root,0,0,00:00:00/178-20:11:24,353) [spl_system_task]
(root,0,0,00:00:00/178-20:11:24,354) [spl_delay_taskq]
(root,0,0,00:00:00/178-20:11:24,355) [spl_dynamic_tas]
(root,0,0,00:00:00/178-20:11:24,356) [spl_kmem_cache]
(root,0,0,00:00:00/178-20:11:23,361) [zvol]
(root,0,0,00:00:00/178-20:11:23,362) [arc_prune]
(root,0,0,00:04:06/178-20:11:23,363) [arc_evict]
(root,0,0,00:03:49/178-20:11:23,364) [arc_reap]
(root,0,0,00:00:00/178-20:11:23,366) [dbu_evict]
(root,0,0,00:03:42/178-20:11:23,367) [dbuf_evict]
(root,22980,3884,00:20:09/178-20:11:23,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/178-20:11:23,376) [z_vdev_file]
(root,0,0,00:02:03/178-20:11:23,377) [l2arc_feed]
(root,0,0,00:00:00/178-20:11:23,485) [cryptd]
(root,3860,2120,00:00:05/178-20:11:23,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/178-20:11:23,522) [jbd2/md1-8]
(root,0,0,00:00:00/178-20:11:23,523) [ext4-rsv-conver]
(_rpc,7864,4456,00:00:28/178-20:11:21,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3384,00:00:12/178-20:11:21,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:35:54/178-20:11:21,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:49/178-20:11:21,571) /usr/sbin/watchdog-mux
(root,12248,4712,00:00:04/178-20:11:21,573) /usr/sbin/smartd -n
(messagebus,9048,4044,00:14:55/178-20:11:21,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2096,00:00:18/178-20:11:21,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4580,00:01:36/178-20:11:21,578) /lib/systemd/systemd-logind
(root,223768,3752,00:13:49/178-20:11:21,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2728,00:00:00/178-20:11:21,580) /usr/sbin/zed -F
(root,275828,1048,00:00:00/178-20:11:21,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1656,00:00:05/178-20:11:21,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,362388,47104,00:00:05/57:05,731) pvedaemon worker
(root,0,0,00:00:00/56:58,744) [kworker/5:2-cgroup_destroy]
(root,7304,1356,00:00:00/178-20:11:20,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:06:09/178-20:11:20,768) bpfilter_umh
(root,13808,4924,00:13:16/178-20:11:20,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/178-20:11:20,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3260,00:39:16/178-20:11:20,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,778940,82884,03:05:38/178-20:11:20,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:49/178-20:11:20,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3460,00:00:35/178-20:11:20,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5712,00:00:07/178-20:11:20,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:17/178-20:11:19,1061) /usr/sbin/cron -f
(root,303168,37716,16:31:49/178-20:11:18,1068) pvestatd
(root,304364,30764,06:43:58/178-20:11:18,1069) pve-firewall
(root,353760,4020,00:02:07/178-20:11:18,1093) pvedaemon
(root,336416,10860,00:15:08/178-20:11:18,1101) pve-ha-crm
(www-data,355296,141912,00:04:37/178-20:11:17,1102) pveproxy
(www-data,68856,57144,00:02:56/178-20:11:17,1109) spiceproxy
(root,335964,31664,00:24:52/178-20:11:17,1111) pve-ha-lrm
(root,6083192,3558904,9-06:32:42/178-20:11:16,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:13/178-20:11:16,1129) [kvm-nx-lpage-re]
(root,0,0,13:33:57/178-20:11:16,1148) [vhost-1125]
(root,0,0,11:27:38/178-20:11:15,1167) [vhost-1125]
(root,0,0,01:13:04/178-20:11:15,1172) [kvm-pit/1125]
(root,14107244,8641736,89-12:37:33/178-20:11:12,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:06:23/178-20:11:12,1188) [kvm-nx-lpage-re]
(root,0,0,00:23:23/178-20:11:12,1207) [vhost-1184]
(root,0,0,01:23:20/178-20:11:12,1212) [kvm-pit/1184]
(root,0,0,00:00:00/178-20:11:09,1214) [dio/md2]
(root,3734632,2370260,43-17:29:26/178-20:11:08,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:51/178-20:11:08,1267) [kvm-nx-lpage-re]
(root,0,0,05:40:32/178-20:11:08,1286) [vhost-1263]
(root,0,0,00:00:00/178-20:11:08,1289) [kvm-pit/1263]
(root,0,0,00:00:00/178-20:11:07,1295) [ib-comp-wq]
(root,0,0,00:00:00/178-20:11:07,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/178-20:11:07,1297) [ib_mcast]
(root,0,0,00:00:00/178-20:11:07,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/178-20:11:07,1299) [rdma_cm]
(root,0,0,00:00:00/178-20:11:07,1300) [cifsiod]
(root,0,0,00:00:00/178-20:11:07,1301) [smb3decryptd]
(root,0,0,00:00:00/178-20:11:07,1302) [cifsfileinfoput]
(root,0,0,00:00:00/178-20:11:07,1303) [cifsoplockd]
(root,0,0,00:15:29/178-20:11:07,1305) [cifsd]
(root,0,0,00:05:48/178-20:11:07,1340) [cifsd]
(root,6133424,4316888,11-19:54:00/178-20:11:04,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:00/178-20:11:04,1358) [kvm-nx-lpage-re]
(root,0,0,02:17:13/178-20:11:04,1377) [vhost-1354]
(root,0,0,00:00:00/178-20:11:04,1382) [kvm-pit/1354]
(root,21164820,17088940,13-21:58:25/178-20:11:00,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:38/178-20:11:00,1398) [kvm-nx-lpage-re]
(root,0,0,01:41:35/178-20:10:59,1417) [vhost-1394]
(root,0,0,00:00:00/178-20:10:59,1422) [kvm-pit/1394]
(root,19432752,5966380,10-00:40:38/178-20:10:56,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:36/178-20:10:56,1468) [kvm-nx-lpage-re]
(root,0,0,00:02:00/178-20:10:55,1487) [vhost-1464]
(root,0,0,00:00:00/178-20:10:55,1492) [kvm-pit/1464]
(root,6153564,4355368,37-20:37:23/178-20:10:52,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:16/178-20:10:52,1511) [kvm-nx-lpage-re]
(root,0,0,01:55:00/178-20:10:51,1531) [vhost-1507]
(root,0,0,00:00:00/178-20:10:51,1534) [kvm-pit/1507]
(www-data,76780,54660,00:00:00/02:48:56,1606) spiceproxy worker
(root,86168,1932,00:00:00/02:48:56,1610) /usr/sbin/pvefw-logger
(root,362392,46140,00:00:05/52:59,1958) pvedaemon worker
(root,0,0,00:00:00/52:58,1966) [kworker/4:0-rcu_gp]
(www-data,365160,128700,00:00:04/49:48,2808) pveproxy worker (shutdown)
(root,362392,48608,00:00:06/49:04,3046) pvedaemon worker
(root,9796,2372,00:00:00/48:57,3058) /usr/sbin/CRON -f
(root,2380,696,00:00:00/48:57,3059) /bin/sh -c vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,330248,114884,00:00:01/48:57,3060) /usr/bin/perl -T /usr/bin/vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,338644,102316,00:00:09/48:57,3061) task UPID:node01:00000BF5:5C153B2F:67621E92:vzdump::root@pam:
(root,0,0,00:00:00/40:38,5310) [kworker/6:5-dio/md2]
(root,0,0,00:02:53/38:56,5844) [kworker/u16:3-events_power_efficient]
(root,0,0,00:00:00/36:58,6369) [kworker/1:1-events]
(root,0,0,00:00:00/34:58,6909) [kworker/0:0-events]
(root,0,0,00:02:05/28:18,8671) [kworker/u16:2-flush-9:2]
(root,0,0,00:00:00/23:58,9894) [kworker/3:1-events]
(root,0,0,00:00:00/21:58,10445) [kworker/2:2-events]
(root,0,0,00:00:00/15:57,12090) [kworker/0:2-events]
(root,0,0,00:00:00/14:56,12369) [kworker/4:1-events]
(www-data,363808,133840,00:00:01/13:58,12637) pveproxy worker
(root,5212,1780,00:01:58/11:48,13235) lzop
(root,0,0,00:00:00/10:58,13477) [kworker/2:0-events]
(root,0,0,00:00:00/10:58,13478) [kworker/5:0-events]
(root,0,0,00:00:00/10:58,13479) [kworker/7:1-events]
(root,0,0,00:00:00/10:58,13480) [kworker/6:1-events]
(www-data,363976,133700,00:00:01/10:24,13602) pveproxy worker
(root,0,0,00:00:00/09:15,13911) [kworker/3:2-cgroup_destroy]
(root,0,0,00:00:00/08:22,14157) [kworker/1:2-events]
(root,0,0,00:00:54/07:56,14320) [kworker/u16:0-flush-cifs-1]
(root,0,0,00:00:00/04:58,15150) [kworker/7:0-cifsiod]
(root,0,0,00:00:00/04:58,15151) [kworker/7:2-cgroup_destroy]
(www-data,363888,133456,00:00:00/04:27,15247) pveproxy worker
(root,0,0,00:00:00/04:15,15302) [kworker/6:0-events]
(root,0,0,00:00:00/03:58,15427) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/02:23,15818) [kworker/u16:1]
(root,0,0,00:00:00/01:58,15973) [kworker/1:0-events]
(root,0,0,00:00:00/01:58,15975) [kworker/1:3-cgroup_destroy]
(root,13808,6692,00:00:00/01:02,16233) sshd: [accepted]
(root,13808,6676,00:00:00/00:00,16504) sshd: [accepted]
(sshd,13808,2560,00:00:00/00:00,16505) sshd: [net]
(root,7188,3240,00:00:00/00:00,16544) /bin/bash /usr/bin/check_mk_agent
(root,7632,2636,00:00:00/00:00,16570) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,996,00:00:00/00:00,16571) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362408,33924,00:00:00/01:21:43,26330) task UPID:node01:000066DA:5C123B0F:676216E3:vncproxy:104:root@pam:
(root,327708,114868,00:00:04/01:21:43,26332) /usr/bin/perl /usr/sbin/qm vncproxy 104
(root,18862248,10640468,6-14:53:06/152-16:45:21,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:42/152-16:45:21,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:35/152-16:45:21,28619) [vhost-28596]
(root,0,0,01:11:44/152-16:45:21,28626) [kvm-pit/28596]
(root,0,0,00:00:01/01:07:58,30184) [kworker/7:3-events]
(postfix,43844,7148,00:00:00/01:01:03,32063) pickup -l -t unix -u -c

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-18 01:48

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42d2be314e

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7072,00:18:16/176-18:16:23,1) /sbin/init
(root,0,0,00:00:10/176-18:16:23,2) [kthreadd]
(root,0,0,00:00:00/176-18:16:23,3) [rcu_gp]
(root,0,0,00:00:00/176-18:16:23,4) [rcu_par_gp]
(root,0,0,00:00:00/176-18:16:23,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/176-18:16:23,9) [mm_percpu_wq]
(root,0,0,00:04:44/176-18:16:23,10) [ksoftirqd/0]
(root,0,0,00:37:19/176-18:16:23,11) [rcu_sched]
(root,0,0,00:00:44/176-18:16:23,12) [migration/0]
(root,0,0,00:00:00/176-18:16:23,13) [idle_inject/0]
(root,0,0,00:00:00/176-18:16:23,14) [cpuhp/0]
(root,0,0,00:00:00/176-18:16:23,15) [cpuhp/1]
(root,0,0,00:00:00/176-18:16:23,16) [idle_inject/1]
(root,0,0,00:00:44/176-18:16:23,17) [migration/1]
(root,0,0,00:03:30/176-18:16:23,18) [ksoftirqd/1]
(root,0,0,00:00:00/176-18:16:23,20) [kworker/1:0H]
(root,0,0,00:00:00/176-18:16:23,21) [cpuhp/2]
(root,0,0,00:00:00/176-18:16:23,22) [idle_inject/2]
(root,0,0,00:00:43/176-18:16:23,23) [migration/2]
(root,0,0,00:02:14/176-18:16:23,24) [ksoftirqd/2]
(root,0,0,00:00:00/176-18:16:23,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/176-18:16:23,27) [cpuhp/3]
(root,0,0,00:00:00/176-18:16:23,28) [idle_inject/3]
(root,0,0,00:00:57/176-18:16:23,29) [migration/3]
(root,0,0,00:01:38/176-18:16:23,30) [ksoftirqd/3]
(root,0,0,00:00:00/176-18:16:23,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/176-18:16:23,33) [cpuhp/4]
(root,0,0,00:00:00/176-18:16:23,34) [idle_inject/4]
(root,0,0,00:00:42/176-18:16:23,35) [migration/4]
(root,0,0,00:01:17/176-18:16:23,36) [ksoftirqd/4]
(root,0,0,00:00:00/176-18:16:23,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/176-18:16:23,39) [cpuhp/5]
(root,0,0,00:00:00/176-18:16:23,40) [idle_inject/5]
(root,0,0,00:00:42/176-18:16:23,41) [migration/5]
(root,0,0,00:01:08/176-18:16:23,42) [ksoftirqd/5]
(root,0,0,00:00:00/176-18:16:23,44) [kworker/5:0H]
(root,0,0,00:00:00/176-18:16:23,45) [cpuhp/6]
(root,0,0,00:00:00/176-18:16:23,46) [idle_inject/6]
(root,0,0,00:00:40/176-18:16:23,47) [migration/6]
(root,0,0,00:10:46/176-18:16:23,48) [ksoftirqd/6]
(root,0,0,00:00:00/176-18:16:23,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/176-18:16:23,51) [cpuhp/7]
(root,0,0,00:00:00/176-18:16:23,52) [idle_inject/7]
(root,0,0,00:00:50/176-18:16:23,53) [migration/7]
(root,0,0,00:28:01/176-18:16:23,54) [ksoftirqd/7]
(root,0,0,00:00:00/176-18:16:23,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/176-18:16:23,57) [kdevtmpfs]
(root,0,0,00:00:00/176-18:16:23,58) [netns]
(root,0,0,00:00:00/176-18:16:23,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/176-18:16:23,60) [kauditd]
(root,0,0,00:00:05/176-18:16:23,62) [khungtaskd]
(root,0,0,00:00:00/176-18:16:23,63) [oom_reaper]
(root,0,0,00:00:00/176-18:16:23,64) [writeback]
(root,0,0,00:00:00/176-18:16:23,65) [kcompactd0]
(root,0,0,00:00:00/176-18:16:23,66) [ksmd]
(root,0,0,00:03:51/176-18:16:23,67) [khugepaged]
(root,0,0,00:00:00/176-18:16:23,113) [kintegrityd]
(root,0,0,00:00:00/176-18:16:23,114) [kblockd]
(root,0,0,00:00:00/176-18:16:23,115) [blkcg_punt_bio]
(root,0,0,00:00:00/176-18:16:23,116) [tpm_dev_wq]
(root,0,0,00:00:00/176-18:16:23,117) [ata_sff]
(root,0,0,00:00:00/176-18:16:23,118) [md]
(root,0,0,00:00:00/176-18:16:23,119) [edac-poller]
(root,0,0,00:00:00/176-18:16:23,120) [devfreq_wq]
(root,0,0,00:00:00/176-18:16:23,121) [watchdogd]
(root,0,0,00:27:13/176-18:16:23,128) [kswapd0]
(root,0,0,00:00:00/176-18:16:23,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/176-18:16:23,131) [kthrotld]
(root,0,0,00:00:00/176-18:16:23,132) [acpi_thermal_pm]
(root,0,0,00:00:00/176-18:16:23,133) [nvme-wq]
(root,0,0,00:00:00/176-18:16:23,134) [nvme-reset-wq]
(root,0,0,00:00:00/176-18:16:23,135) [nvme-delete-wq]
(root,0,0,00:00:00/176-18:16:23,137) [ipv6_addrconf]
(root,0,0,00:00:00/176-18:16:23,146) [kstrp]
(root,0,0,00:00:00/176-18:16:23,147) [kworker/u17:0]
(root,0,0,00:00:00/176-18:16:23,162) [charger_manager]
(root,0,0,00:00:00/176-18:16:22,210) [scsi_eh_0]
(root,0,0,00:00:00/176-18:16:22,211) [scsi_tmf_0]
(root,0,0,00:00:00/176-18:16:22,212) [scsi_eh_1]
(root,0,0,00:00:00/176-18:16:22,213) [scsi_tmf_1]
(root,0,0,00:00:00/176-18:16:22,214) [scsi_eh_2]
(root,0,0,00:00:00/176-18:16:22,215) [scsi_tmf_2]
(root,0,0,00:00:00/176-18:16:22,216) [scsi_eh_3]
(root,0,0,00:00:00/176-18:16:22,217) [scsi_tmf_3]
(root,0,0,00:00:00/176-18:16:22,218) [scsi_eh_4]
(root,0,0,00:00:00/176-18:16:22,219) [scsi_tmf_4]
(root,0,0,00:00:00/176-18:16:22,220) [scsi_eh_5]
(root,0,0,00:00:00/176-18:16:22,221) [scsi_tmf_5]
(root,0,0,00:03:53/176-18:16:22,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:59/176-18:16:22,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:41/176-18:16:22,237) [kworker/1:1H-kblockd]
(root,0,0,00:52:56/176-18:16:22,238) [kworker/6:1H-kblockd]
(root,0,0,00:05:11/176-18:16:22,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:42/176-18:16:22,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:47/176-18:16:22,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:37/176-18:16:22,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/176-18:16:22,248) [md1_raid1]
(root,0,0,00:00:36/176-18:16:22,251) [md0_raid1]
(root,0,0,01:15:45/176-18:16:22,253) [md2_raid1]
(root,0,0,00:00:00/176-18:16:21,268) [raid5wq]
(root,0,0,00:08:07/176-18:16:18,291) [jbd2/md2-8]
(root,0,0,00:00:00/176-18:16:18,292) [ext4-rsv-conver]
(root,205220,105568,00:43:35/176-18:16:18,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/176-18:16:18,348) [rpciod]
(root,0,0,00:00:00/176-18:16:18,349) [xprtiod]
(root,0,0,00:00:00/176-18:16:18,353) [spl_system_task]
(root,0,0,00:00:00/176-18:16:18,354) [spl_delay_taskq]
(root,0,0,00:00:00/176-18:16:18,355) [spl_dynamic_tas]
(root,0,0,00:00:00/176-18:16:18,356) [spl_kmem_cache]
(root,0,0,00:00:00/176-18:16:17,361) [zvol]
(root,0,0,00:00:00/176-18:16:17,362) [arc_prune]
(root,0,0,00:04:03/176-18:16:17,363) [arc_evict]
(root,0,0,00:03:47/176-18:16:17,364) [arc_reap]
(root,0,0,00:00:00/176-18:16:17,366) [dbu_evict]
(root,0,0,00:03:39/176-18:16:17,367) [dbuf_evict]
(root,22980,3900,00:19:55/176-18:16:17,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/176-18:16:17,376) [z_vdev_file]
(root,0,0,00:02:02/176-18:16:17,377) [l2arc_feed]
(root,0,0,00:00:00/176-18:16:17,485) [cryptd]
(root,3860,2148,00:00:05/176-18:16:17,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/176-18:16:17,522) [jbd2/md1-8]
(root,0,0,00:00:00/176-18:16:17,523) [ext4-rsv-conver]
(_rpc,7864,4456,00:00:27/176-18:16:15,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3400,00:00:12/176-18:16:15,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:35:27/176-18:16:15,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:45/176-18:16:15,571) /usr/sbin/watchdog-mux
(root,12248,4728,00:00:04/176-18:16:15,573) /usr/sbin/smartd -n
(messagebus,9048,4048,00:14:42/176-18:16:15,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:18/176-18:16:15,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4596,00:01:35/176-18:16:15,578) /lib/systemd/systemd-logind
(root,223768,3756,00:13:34/176-18:16:15,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2728,00:00:00/176-18:16:15,580) /usr/sbin/zed -F
(root,275828,1048,00:00:00/176-18:16:15,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,362160,19868,00:00:58/64-11:12:08,585) pvedaemon worker
(root,4084,1676,00:00:05/176-18:16:15,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1364,00:00:00/176-18:16:14,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:06:05/176-18:16:14,768) bpfilter_umh
(root,13808,4924,00:13:01/176-18:16:14,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/176-18:16:14,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3260,00:38:48/176-18:16:14,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,729308,53864,03:03:32/176-18:16:14,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:49/176-18:16:14,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3460,00:00:35/176-18:16:14,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5132,00:00:07/176-18:16:14,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:17/176-18:16:13,1061) /usr/sbin/cron -f
(root,303168,37768,16:19:50/176-18:16:12,1068) pvestatd
(root,304364,30796,06:39:07/176-18:16:12,1069) pve-firewall
(root,353760,3920,00:02:06/176-18:16:12,1093) pvedaemon
(root,336416,10900,00:14:58/176-18:16:12,1101) pve-ha-crm
(www-data,355172,144500,00:04:34/176-18:16:11,1102) pveproxy
(www-data,68860,57744,00:02:54/176-18:16:11,1109) spiceproxy
(root,335964,31704,00:24:35/176-18:16:11,1111) pve-ha-lrm
(root,6070312,3559708,9-03:49:28/176-18:16:10,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:13/176-18:16:10,1129) [kvm-nx-lpage-re]
(root,0,0,13:23:32/176-18:16:10,1148) [vhost-1125]
(root,0,0,11:19:21/176-18:16:09,1167) [vhost-1125]
(root,0,0,01:12:18/176-18:16:09,1172) [kvm-pit/1125]
(root,14094356,8640764,87-07:32:55/176-18:16:06,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:06:19/176-18:16:06,1188) [kvm-nx-lpage-re]
(root,0,0,00:23:16/176-18:16:06,1207) [vhost-1184]
(root,0,0,01:22:25/176-18:16:06,1212) [kvm-pit/1184]
(root,0,0,00:00:00/176-18:16:03,1214) [dio/md2]
(root,3721956,2369312,43-04:50:28/176-18:16:02,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:50/176-18:16:02,1267) [kvm-nx-lpage-re]
(root,0,0,05:36:58/176-18:16:02,1286) [vhost-1263]
(root,0,0,00:00:00/176-18:16:02,1289) [kvm-pit/1263]
(root,0,0,00:00:00/176-18:16:01,1295) [ib-comp-wq]
(root,0,0,00:00:00/176-18:16:01,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/176-18:16:01,1297) [ib_mcast]
(root,0,0,00:00:00/176-18:16:01,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/176-18:16:01,1299) [rdma_cm]
(root,0,0,00:00:00/176-18:16:01,1300) [cifsiod]
(root,0,0,00:00:00/176-18:16:01,1301) [smb3decryptd]
(root,0,0,00:00:00/176-18:16:01,1302) [cifsfileinfoput]
(root,0,0,00:00:00/176-18:16:01,1303) [cifsoplockd]
(root,0,0,00:15:15/176-18:16:01,1305) [cifsd]
(root,0,0,00:05:44/176-18:16:01,1340) [cifsd]
(root,6120548,4309216,11-16:29:38/176-18:15:58,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:00/176-18:15:58,1358) [kvm-nx-lpage-re]
(root,0,0,02:15:43/176-18:15:58,1377) [vhost-1354]
(root,0,0,00:00:00/176-18:15:58,1382) [kvm-pit/1354]
(root,21142716,16986660,13-16:33:59/176-18:15:54,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:35/176-18:15:54,1398) [kvm-nx-lpage-re]
(root,0,0,01:39:59/176-18:15:53,1417) [vhost-1394]
(root,0,0,00:00:00/176-18:15:53,1422) [kvm-pit/1394]
(root,19419864,5927684,9-21:50:30/176-18:15:50,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:35/176-18:15:50,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:59/176-18:15:49,1487) [vhost-1464]
(root,0,0,00:00:00/176-18:15:49,1492) [kvm-pit/1464]
(root,6140688,4354200,37-12:40:53/176-18:15:46,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:15/176-18:15:46,1511) [kvm-nx-lpage-re]
(root,0,0,01:53:04/176-18:15:45,1531) [vhost-1507]
(root,0,0,00:00:00/176-18:15:45,1534) [kvm-pit/1507]
(root,0,0,00:00:00/22:52,1920) [kworker/7:3-events]
(root,0,0,00:00:00/21:52,2222) [kworker/4:0-events]
(root,0,0,00:00:00/18:52,3154) [kworker/0:3-events]
(root,0,0,00:00:00/16:00,4073) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/14:52,4400) [kworker/6:0-cgroup_destroy]
(root,0,0,00:00:00/13:52,4704) [kworker/1:2-events]
(root,0,0,00:00:00/12:52,5016) [kworker/2:1-events]
(root,0,0,00:00:00/12:52,5017) [kworker/2:3]
(root,0,0,00:00:00/09:52,5946) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/09:52,5947) [kworker/3:3-events]
(root,0,0,00:00:00/08:52,6258) [kworker/7:1-cgroup_destroy]
(root,0,0,00:00:00/07:52,6578) [kworker/5:0-events]
(root,0,0,00:00:00/06:47,6885) [kworker/6:1-events]
(root,0,0,00:00:00/05:52,7165) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/03:52,7804) [kworker/4:1-events]
(root,0,0,00:00:00/02:52,8118) [kworker/7:0-md]
(root,0,0,00:00:00/02:52,8138) [kworker/u16:0-events_power_efficient]
(root,13808,6660,00:00:00/01:36,8486) sshd: [accepted]
(root,0,0,00:00:00/00:52,8720) [kworker/0:2-events]
(root,14508,7664,00:00:00/00:02,8986) sshd: root [priv]
(sshd,13808,4992,00:00:00/00:02,8987) sshd: root [net]
(root,7188,3276,00:00:00/00:00,9090) /bin/bash /usr/bin/check_mk_agent
(root,29284,26328,00:00:00/00:00,9171) /usr/bin/perl /usr/bin/pvecm status
(root,7188,3268,00:00:00/00:00,9172) /bin/bash /usr/bin/check_mk_agent
(root,7632,2724,00:00:00/00:00,9198) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,988,00:00:00/00:00,9199) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362440,22352,00:02:00/123-08:22:40,18556) pvedaemon worker
(root,0,0,00:00:00/01:04:53,20568) [kworker/0:1-cgroup_destroy]
(postfix,43844,7896,00:00:00/01:03:37,20941) pickup -l -t unix -u -c
(root,0,0,00:00:00/54:23,23797) [kworker/u16:2-events_power_efficient]
(www-data,76756,54552,00:00:00/53:50,24050) spiceproxy worker
(root,86168,2228,00:00:00/53:50,24052) /usr/sbin/pvefw-logger
(www-data,355604,130124,00:00:00/53:50,24063) pveproxy worker
(www-data,355604,130124,00:00:00/53:50,24064) pveproxy worker
(www-data,355604,130124,00:00:00/53:50,24065) pveproxy worker
(root,0,0,00:00:00/51:52,24643) [kworker/1:0-events]
(root,0,0,00:00:00/47:52,25871) [kworker/4:2-cgroup_destroy]
(root,362584,16448,00:02:23/150-03:17:49,27309) pvedaemon worker
(root,18914144,10622940,6-12:38:51/150-14:50:15,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:40/150-14:50:15,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:34/150-14:50:15,28619) [vhost-28596]
(root,0,0,01:10:49/150-14:50:15,28626) [kvm-pit/28596]
(root,0,0,00:00:00/30:52,31520) [kworker/5:1-cgroup_destroy]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-15 23:53

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42fecd2512

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7072,00:18:03/174-18:26:25,1) /sbin/init
(root,0,0,00:00:10/174-18:26:25,2) [kthreadd]
(root,0,0,00:00:00/174-18:26:25,3) [rcu_gp]
(root,0,0,00:00:00/174-18:26:25,4) [rcu_par_gp]
(root,0,0,00:00:00/174-18:26:25,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/174-18:26:25,9) [mm_percpu_wq]
(root,0,0,00:04:42/174-18:26:25,10) [ksoftirqd/0]
(root,0,0,00:36:53/174-18:26:25,11) [rcu_sched]
(root,0,0,00:00:44/174-18:26:25,12) [migration/0]
(root,0,0,00:00:00/174-18:26:25,13) [idle_inject/0]
(root,0,0,00:00:00/174-18:26:25,14) [cpuhp/0]
(root,0,0,00:00:00/174-18:26:25,15) [cpuhp/1]
(root,0,0,00:00:00/174-18:26:25,16) [idle_inject/1]
(root,0,0,00:00:44/174-18:26:25,17) [migration/1]
(root,0,0,00:03:28/174-18:26:25,18) [ksoftirqd/1]
(root,0,0,00:00:00/174-18:26:25,20) [kworker/1:0H]
(root,0,0,00:00:00/174-18:26:25,21) [cpuhp/2]
(root,0,0,00:00:00/174-18:26:25,22) [idle_inject/2]
(root,0,0,00:00:42/174-18:26:25,23) [migration/2]
(root,0,0,00:02:13/174-18:26:25,24) [ksoftirqd/2]
(root,0,0,00:00:00/174-18:26:25,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/174-18:26:25,27) [cpuhp/3]
(root,0,0,00:00:00/174-18:26:25,28) [idle_inject/3]
(root,0,0,00:00:56/174-18:26:25,29) [migration/3]
(root,0,0,00:01:37/174-18:26:25,30) [ksoftirqd/3]
(root,0,0,00:00:00/174-18:26:25,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/174-18:26:25,33) [cpuhp/4]
(root,0,0,00:00:00/174-18:26:25,34) [idle_inject/4]
(root,0,0,00:00:42/174-18:26:25,35) [migration/4]
(root,0,0,00:01:16/174-18:26:25,36) [ksoftirqd/4]
(root,0,0,00:00:00/174-18:26:25,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/174-18:26:25,39) [cpuhp/5]
(root,0,0,00:00:00/174-18:26:25,40) [idle_inject/5]
(root,0,0,00:00:42/174-18:26:25,41) [migration/5]
(root,0,0,00:01:07/174-18:26:25,42) [ksoftirqd/5]
(root,0,0,00:00:00/174-18:26:25,44) [kworker/5:0H]
(root,0,0,00:00:00/174-18:26:25,45) [cpuhp/6]
(root,0,0,00:00:00/174-18:26:25,46) [idle_inject/6]
(root,0,0,00:00:40/174-18:26:25,47) [migration/6]
(root,0,0,00:10:39/174-18:26:25,48) [ksoftirqd/6]
(root,0,0,00:00:00/174-18:26:25,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/174-18:26:25,51) [cpuhp/7]
(root,0,0,00:00:00/174-18:26:25,52) [idle_inject/7]
(root,0,0,00:00:50/174-18:26:25,53) [migration/7]
(root,0,0,00:27:40/174-18:26:25,54) [ksoftirqd/7]
(root,0,0,00:00:00/174-18:26:25,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/174-18:26:25,57) [kdevtmpfs]
(root,0,0,00:00:00/174-18:26:25,58) [netns]
(root,0,0,00:00:00/174-18:26:25,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/174-18:26:25,60) [kauditd]
(root,0,0,00:00:05/174-18:26:25,62) [khungtaskd]
(root,0,0,00:00:00/174-18:26:25,63) [oom_reaper]
(root,0,0,00:00:00/174-18:26:25,64) [writeback]
(root,0,0,00:00:00/174-18:26:25,65) [kcompactd0]
(root,0,0,00:00:00/174-18:26:25,66) [ksmd]
(root,0,0,00:03:50/174-18:26:25,67) [khugepaged]
(root,0,0,00:00:00/174-18:26:25,113) [kintegrityd]
(root,0,0,00:00:00/174-18:26:25,114) [kblockd]
(root,0,0,00:00:00/174-18:26:25,115) [blkcg_punt_bio]
(root,0,0,00:00:00/174-18:26:25,116) [tpm_dev_wq]
(root,0,0,00:00:00/174-18:26:25,117) [ata_sff]
(root,0,0,00:00:00/174-18:26:25,118) [md]
(root,0,0,00:00:00/174-18:26:25,119) [edac-poller]
(root,0,0,00:00:00/174-18:26:25,120) [devfreq_wq]
(root,0,0,00:00:00/174-18:26:25,121) [watchdogd]
(root,0,0,00:26:50/174-18:26:25,128) [kswapd0]
(root,0,0,00:00:00/174-18:26:25,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/174-18:26:25,131) [kthrotld]
(root,0,0,00:00:00/174-18:26:25,132) [acpi_thermal_pm]
(root,0,0,00:00:00/174-18:26:25,133) [nvme-wq]
(root,0,0,00:00:00/174-18:26:25,134) [nvme-reset-wq]
(root,0,0,00:00:00/174-18:26:25,135) [nvme-delete-wq]
(root,0,0,00:00:00/174-18:26:25,137) [ipv6_addrconf]
(root,0,0,00:00:00/174-18:26:25,146) [kstrp]
(root,0,0,00:00:00/174-18:26:25,147) [kworker/u17:0]
(root,0,0,00:00:00/174-18:26:25,162) [charger_manager]
(root,0,0,00:00:00/174-18:26:24,210) [scsi_eh_0]
(root,0,0,00:00:00/174-18:26:24,211) [scsi_tmf_0]
(root,0,0,00:00:00/174-18:26:24,212) [scsi_eh_1]
(root,0,0,00:00:00/174-18:26:24,213) [scsi_tmf_1]
(root,0,0,00:00:00/174-18:26:24,214) [scsi_eh_2]
(root,0,0,00:00:00/174-18:26:24,215) [scsi_tmf_2]
(root,0,0,00:00:00/174-18:26:24,216) [scsi_eh_3]
(root,0,0,00:00:00/174-18:26:24,217) [scsi_tmf_3]
(root,0,0,00:00:00/174-18:26:24,218) [scsi_eh_4]
(root,0,0,00:00:00/174-18:26:24,219) [scsi_tmf_4]
(root,0,0,00:00:00/174-18:26:24,220) [scsi_eh_5]
(root,0,0,00:00:00/174-18:26:24,221) [scsi_tmf_5]
(root,0,0,00:03:50/174-18:26:24,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:56/174-18:26:24,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:38/174-18:26:24,237) [kworker/1:1H-kblockd]
(root,0,0,00:52:22/174-18:26:24,238) [kworker/6:1H-kblockd]
(root,0,0,00:05:08/174-18:26:24,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:40/174-18:26:24,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:45/174-18:26:24,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:35/174-18:26:24,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/174-18:26:24,248) [md1_raid1]
(root,0,0,00:00:36/174-18:26:24,251) [md0_raid1]
(root,0,0,01:15:15/174-18:26:24,253) [md2_raid1]
(root,0,0,00:00:00/174-18:26:23,268) [raid5wq]
(root,0,0,00:08:02/174-18:26:20,291) [jbd2/md2-8]
(root,0,0,00:00:00/174-18:26:20,292) [ext4-rsv-conver]
(root,287484,157520,00:42:59/174-18:26:20,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/174-18:26:20,348) [rpciod]
(root,0,0,00:00:00/174-18:26:20,349) [xprtiod]
(root,0,0,00:00:00/174-18:26:20,353) [spl_system_task]
(root,0,0,00:00:00/174-18:26:20,354) [spl_delay_taskq]
(root,0,0,00:00:00/174-18:26:20,355) [spl_dynamic_tas]
(root,0,0,00:00:00/174-18:26:20,356) [spl_kmem_cache]
(root,0,0,00:00:00/174-18:26:19,361) [zvol]
(root,0,0,00:00:00/174-18:26:19,362) [arc_prune]
(root,0,0,00:04:01/174-18:26:19,363) [arc_evict]
(root,0,0,00:03:44/174-18:26:19,364) [arc_reap]
(root,0,0,00:00:00/174-18:26:19,366) [dbu_evict]
(root,0,0,00:03:37/174-18:26:19,367) [dbuf_evict]
(root,22980,3900,00:19:41/174-18:26:19,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/174-18:26:19,376) [z_vdev_file]
(root,0,0,00:02:00/174-18:26:19,377) [l2arc_feed]
(root,0,0,00:00:00/174-18:26:19,485) [cryptd]
(root,3860,2148,00:00:05/174-18:26:19,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/174-18:26:19,522) [jbd2/md1-8]
(root,0,0,00:00:00/174-18:26:19,523) [ext4-rsv-conver]
(_rpc,7776,4404,00:00:27/174-18:26:17,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3400,00:00:12/174-18:26:17,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:35:04/174-18:26:17,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:42/174-18:26:17,571) /usr/sbin/watchdog-mux
(root,12248,4732,00:00:04/174-18:26:17,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:14:31/174-18:26:17,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:17/174-18:26:17,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4596,00:01:34/174-18:26:17,578) /lib/systemd/systemd-logind
(root,223768,3780,00:13:23/174-18:26:17,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2728,00:00:00/174-18:26:17,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/174-18:26:17,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,362160,26128,00:00:56/62-11:22:10,585) pvedaemon worker
(root,4084,1676,00:00:05/174-18:26:17,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1364,00:00:00/174-18:26:16,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:06:01/174-18:26:16,768) bpfilter_umh
(root,13808,4924,00:12:50/174-18:26:16,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/174-18:26:16,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3260,00:38:21/174-18:26:16,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,735512,56936,03:01:32/174-18:26:16,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:48/174-18:26:16,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3460,00:00:34/174-18:26:16,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5480,00:00:07/174-18:26:16,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:17/174-18:26:15,1061) /usr/sbin/cron -f
(root,303168,37768,16:08:12/174-18:26:14,1068) pvestatd
(root,304364,30796,06:34:22/174-18:26:14,1069) pve-firewall
(root,353760,3932,00:02:04/174-18:26:14,1093) pvedaemon
(root,336416,10900,00:14:48/174-18:26:14,1101) pve-ha-crm
(www-data,355152,144264,00:04:31/174-18:26:13,1102) pveproxy
(www-data,68920,57948,00:02:52/174-18:26:13,1109) spiceproxy
(root,335964,31704,00:24:18/174-18:26:13,1111) pve-ha-lrm
(root,6066020,3556468,9-01:15:51/174-18:26:12,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:13/174-18:26:12,1129) [kvm-nx-lpage-re]
(root,0,0,13:13:41/174-18:26:12,1148) [vhost-1125]
(root,0,0,11:11:06/174-18:26:11,1167) [vhost-1125]
(root,0,0,01:11:33/174-18:26:11,1172) [kvm-pit/1125]
(root,14085764,8633212,85-04:31:31/174-18:26:08,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:06:15/174-18:26:08,1188) [kvm-nx-lpage-re]
(root,0,0,00:23:08/174-18:26:08,1207) [vhost-1184]
(root,0,0,01:21:32/174-18:26:08,1212) [kvm-pit/1184]
(root,0,0,00:00:00/174-18:26:05,1214) [dio/md2]
(root,3717476,2368860,42-16:45:55/174-18:26:04,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:49/174-18:26:04,1267) [kvm-nx-lpage-re]
(root,0,0,05:33:35/174-18:26:04,1286) [vhost-1263]
(root,0,0,00:00:00/174-18:26:04,1289) [kvm-pit/1263]
(root,0,0,00:00:00/174-18:26:03,1295) [ib-comp-wq]
(root,0,0,00:00:00/174-18:26:03,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/174-18:26:03,1297) [ib_mcast]
(root,0,0,00:00:00/174-18:26:03,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/174-18:26:03,1299) [rdma_cm]
(root,0,0,00:00:00/174-18:26:03,1300) [cifsiod]
(root,0,0,00:00:00/174-18:26:03,1301) [smb3decryptd]
(root,0,0,00:00:00/174-18:26:03,1302) [cifsfileinfoput]
(root,0,0,00:00:00/174-18:26:03,1303) [cifsoplockd]
(root,0,0,00:15:05/174-18:26:03,1305) [cifsd]
(root,0,0,00:05:40/174-18:26:03,1340) [cifsd]
(root,6111964,4298880,11-13:14:41/174-18:26:00,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:59/174-18:26:00,1358) [kvm-nx-lpage-re]
(root,0,0,02:14:19/174-18:26:00,1377) [vhost-1354]
(root,0,0,00:00:00/174-18:26:00,1382) [kvm-pit/1354]
(root,21134136,16973028,13-12:24:24/174-18:25:56,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:33/174-18:25:56,1398) [kvm-nx-lpage-re]
(root,0,0,01:37:57/174-18:25:55,1417) [vhost-1394]
(root,0,0,00:00:00/174-18:25:55,1422) [kvm-pit/1394]
(root,19415568,5898372,9-19:07:35/174-18:25:52,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:35/174-18:25:52,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:58/174-18:25:51,1487) [vhost-1464]
(root,0,0,00:00:00/174-18:25:51,1492) [kvm-pit/1464]
(root,6132232,4346036,37-05:05:46/174-18:25:48,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:13/174-18:25:48,1511) [kvm-nx-lpage-re]
(root,0,0,01:51:09/174-18:25:47,1531) [vhost-1507]
(root,0,0,00:00:00/174-18:25:47,1534) [kvm-pit/1507]
(postfix,43844,7572,00:00:00/01:32:13,3662) pickup -l -t unix -u -c
(root,86168,2312,00:00:00/01:03:53,12007) /usr/sbin/pvefw-logger
(www-data,69448,53824,00:00:00/01:03:53,12010) spiceproxy worker
(www-data,355448,130196,00:00:00/01:03:53,12019) pveproxy worker
(www-data,355448,130196,00:00:00/01:03:53,12020) pveproxy worker
(www-data,355448,130196,00:00:00/01:03:53,12021) pveproxy worker
(root,0,0,00:00:00/56:54,14148) [kworker/1:3-mm_percpu_wq]
(root,0,0,00:00:00/46:54,17013) [kworker/7:3-events]
(root,0,0,00:00:00/43:54,17872) [kworker/3:1-cgroup_destroy]
(root,362440,28184,00:01:58/121-08:32:42,18556) pvedaemon worker
(root,0,0,00:00:00/36:54,19833) [kworker/5:3-events]
(root,0,0,00:00:00/30:54,21527) [kworker/4:3-cgroup_destroy]
(root,0,0,00:00:28/30:09,21660) [kworker/u16:0+flush-cifs-2]
(root,0,0,00:00:00/27:54,22383) [kworker/6:0-events]
(root,0,0,00:00:00/27:54,22384) [kworker/6:1-cgroup_destroy]
(root,0,0,00:00:00/26:54,22662) [kworker/2:3-cifsiod]
(root,0,0,00:00:00/20:05,24575) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/18:54,24896) [kworker/4:0-events]
(root,0,0,00:00:00/16:54,25469) [kworker/5:1-cgroup_destroy]
(root,0,0,00:00:00/15:54,25755) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:00/11:54,26902) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/11:54,26903) [kworker/0:3-events]
(root,0,0,00:00:00/10:54,27188) [kworker/7:0-cgroup_destroy]
(root,362584,20580,00:02:21/148-03:27:51,27309) pvedaemon worker
(root,0,0,00:00:00/09:54,27481) [kworker/1:0-events]
(root,0,0,00:00:00/07:54,28063) [kworker/3:2-events]
(root,0,0,00:00:09/06:56,28322) [kworker/u16:1-flush-9:2]
(root,0,0,00:00:00/06:54,28347) [kworker/6:2-events]
(root,18888088,10617172,6-10:26:08/148-15:00:17,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:39/148-15:00:17,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:32/148-15:00:17,28619) [vhost-28596]
(root,0,0,01:09:56/148-15:00:17,28626) [kvm-pit/28596]
(root,0,0,00:00:00/04:54,28932) [kworker/5:0-cifsiod]
(root,9796,2388,00:00:00/03:54,29225) /usr/sbin/CRON -f
(root,2380,756,00:00:00/03:54,29227) /bin/sh -c vzdump 100 102 105 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo --storage Backup01 --node node01 --mailnotification always --mode snapshot
(root,330256,116168,00:00:00/03:54,29229) /usr/bin/perl -T /usr/bin/vzdump 100 102 105 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo --storage Backup01 --node node01 --mailnotification always --mode snapshot
(root,0,0,00:00:00/03:54,29230) [kworker/6:3-dio/md2]
(root,338920,102908,00:00:02/03:53,29231) task UPID:node01:0000722F:5A0064BF:675CCA81:vzdump::root@pam:
(root,0,0,00:00:00/02:54,29539) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/01:54,29826) [kworker/4:1]
(root,0,0,00:00:00/01:54,29827) [kworker/7:1-events]
(root,5212,1808,00:00:20/01:37,29877) lzop
(root,13808,6628,00:00:00/00:16,30213) sshd: [accepted]
(sshd,13808,5012,00:00:00/00:16,30214) sshd: [net]
(root,13808,6744,00:00:00/00:08,30236) sshd: [accepted]
(root,13808,6512,00:00:00/00:02,30350) sshd: [accepted]
(sshd,13808,2584,00:00:00/00:02,30351) sshd: [net]
(root,13808,6692,00:00:00/00:01,30352) sshd: [accepted]
(sshd,13808,2552,00:00:00/00:01,30353) sshd: [net]
(root,13808,6536,00:00:00/00:01,30372) sshd: [accepted]
(sshd,13808,2608,00:00:00/00:00,30380) sshd: [net]
(root,7188,3324,00:00:00/00:00,30406) /bin/bash /usr/bin/check_mk_agent
(root,7632,2692,00:00:00/00:00,30432) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,988,00:00:00/00:00,30433) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-14 00:03

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c4288e96897

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7040,00:17:50/172-19:20:36,1) /sbin/init
(root,0,0,00:00:09/172-19:20:36,2) [kthreadd]
(root,0,0,00:00:00/172-19:20:36,3) [rcu_gp]
(root,0,0,00:00:00/172-19:20:36,4) [rcu_par_gp]
(root,0,0,00:00:00/172-19:20:36,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/172-19:20:36,9) [mm_percpu_wq]
(root,0,0,00:04:40/172-19:20:36,10) [ksoftirqd/0]
(root,0,0,00:36:28/172-19:20:36,11) [rcu_sched]
(root,0,0,00:00:43/172-19:20:36,12) [migration/0]
(root,0,0,00:00:00/172-19:20:36,13) [idle_inject/0]
(root,0,0,00:00:00/172-19:20:36,14) [cpuhp/0]
(root,0,0,00:00:00/172-19:20:36,15) [cpuhp/1]
(root,0,0,00:00:00/172-19:20:36,16) [idle_inject/1]
(root,0,0,00:00:43/172-19:20:36,17) [migration/1]
(root,0,0,00:03:26/172-19:20:36,18) [ksoftirqd/1]
(root,0,0,00:00:00/172-19:20:36,20) [kworker/1:0H]
(root,0,0,00:00:00/172-19:20:36,21) [cpuhp/2]
(root,0,0,00:00:00/172-19:20:36,22) [idle_inject/2]
(root,0,0,00:00:42/172-19:20:36,23) [migration/2]
(root,0,0,00:02:12/172-19:20:36,24) [ksoftirqd/2]
(root,0,0,00:00:00/172-19:20:36,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/172-19:20:36,27) [cpuhp/3]
(root,0,0,00:00:00/172-19:20:36,28) [idle_inject/3]
(root,0,0,00:00:56/172-19:20:36,29) [migration/3]
(root,0,0,00:01:36/172-19:20:36,30) [ksoftirqd/3]
(root,0,0,00:00:00/172-19:20:36,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/172-19:20:36,33) [cpuhp/4]
(root,0,0,00:00:00/172-19:20:36,34) [idle_inject/4]
(root,0,0,00:00:41/172-19:20:36,35) [migration/4]
(root,0,0,00:01:15/172-19:20:36,36) [ksoftirqd/4]
(root,0,0,00:00:00/172-19:20:36,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/172-19:20:36,39) [cpuhp/5]
(root,0,0,00:00:00/172-19:20:36,40) [idle_inject/5]
(root,0,0,00:00:41/172-19:20:36,41) [migration/5]
(root,0,0,00:01:06/172-19:20:36,42) [ksoftirqd/5]
(root,0,0,00:00:00/172-19:20:36,44) [kworker/5:0H]
(root,0,0,00:00:00/172-19:20:36,45) [cpuhp/6]
(root,0,0,00:00:00/172-19:20:36,46) [idle_inject/6]
(root,0,0,00:00:39/172-19:20:36,47) [migration/6]
(root,0,0,00:10:31/172-19:20:36,48) [ksoftirqd/6]
(root,0,0,00:00:00/172-19:20:36,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/172-19:20:36,51) [cpuhp/7]
(root,0,0,00:00:00/172-19:20:36,52) [idle_inject/7]
(root,0,0,00:00:49/172-19:20:36,53) [migration/7]
(root,0,0,00:27:19/172-19:20:36,54) [ksoftirqd/7]
(root,0,0,00:00:00/172-19:20:36,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/172-19:20:36,57) [kdevtmpfs]
(root,0,0,00:00:00/172-19:20:36,58) [netns]
(root,0,0,00:00:00/172-19:20:36,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/172-19:20:36,60) [kauditd]
(root,0,0,00:00:05/172-19:20:36,62) [khungtaskd]
(root,0,0,00:00:00/172-19:20:36,63) [oom_reaper]
(root,0,0,00:00:00/172-19:20:36,64) [writeback]
(root,0,0,00:00:00/172-19:20:36,65) [kcompactd0]
(root,0,0,00:00:00/172-19:20:36,66) [ksmd]
(root,0,0,00:03:49/172-19:20:36,67) [khugepaged]
(root,0,0,00:00:00/172-19:20:36,113) [kintegrityd]
(root,0,0,00:00:00/172-19:20:36,114) [kblockd]
(root,0,0,00:00:00/172-19:20:36,115) [blkcg_punt_bio]
(root,0,0,00:00:00/172-19:20:36,116) [tpm_dev_wq]
(root,0,0,00:00:00/172-19:20:36,117) [ata_sff]
(root,0,0,00:00:00/172-19:20:36,118) [md]
(root,0,0,00:00:00/172-19:20:36,119) [edac-poller]
(root,0,0,00:00:00/172-19:20:36,120) [devfreq_wq]
(root,0,0,00:00:00/172-19:20:36,121) [watchdogd]
(root,0,0,00:26:28/172-19:20:36,128) [kswapd0]
(root,0,0,00:00:00/172-19:20:36,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/172-19:20:36,131) [kthrotld]
(root,0,0,00:00:00/172-19:20:36,132) [acpi_thermal_pm]
(root,0,0,00:00:00/172-19:20:36,133) [nvme-wq]
(root,0,0,00:00:00/172-19:20:36,134) [nvme-reset-wq]
(root,0,0,00:00:00/172-19:20:36,135) [nvme-delete-wq]
(root,0,0,00:00:00/172-19:20:36,137) [ipv6_addrconf]
(root,0,0,00:00:00/172-19:20:36,146) [kstrp]
(root,0,0,00:00:00/172-19:20:36,147) [kworker/u17:0]
(root,0,0,00:00:00/172-19:20:36,162) [charger_manager]
(root,0,0,00:00:00/172-19:20:35,210) [scsi_eh_0]
(root,0,0,00:00:00/172-19:20:35,211) [scsi_tmf_0]
(root,0,0,00:00:00/172-19:20:35,212) [scsi_eh_1]
(root,0,0,00:00:00/172-19:20:35,213) [scsi_tmf_1]
(root,0,0,00:00:00/172-19:20:35,214) [scsi_eh_2]
(root,0,0,00:00:00/172-19:20:35,215) [scsi_tmf_2]
(root,0,0,00:00:00/172-19:20:35,216) [scsi_eh_3]
(root,0,0,00:00:00/172-19:20:35,217) [scsi_tmf_3]
(root,0,0,00:00:00/172-19:20:35,218) [scsi_eh_4]
(root,0,0,00:00:00/172-19:20:35,219) [scsi_tmf_4]
(root,0,0,00:00:00/172-19:20:35,220) [scsi_eh_5]
(root,0,0,00:00:00/172-19:20:35,221) [scsi_tmf_5]
(root,0,0,00:03:48/172-19:20:35,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:53/172-19:20:35,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:35/172-19:20:35,237) [kworker/1:1H-kblockd]
(root,0,0,00:51:48/172-19:20:35,238) [kworker/6:1H-kblockd]
(root,0,0,00:05:05/172-19:20:35,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:37/172-19:20:35,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:43/172-19:20:35,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:33/172-19:20:35,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/172-19:20:35,248) [md1_raid1]
(root,0,0,00:00:36/172-19:20:35,251) [md0_raid1]
(root,0,0,01:14:45/172-19:20:35,253) [md2_raid1]
(root,0,0,00:00:00/172-19:20:34,268) [raid5wq]
(root,0,0,00:07:57/172-19:20:31,291) [jbd2/md2-8]
(root,0,0,00:00:00/172-19:20:31,292) [ext4-rsv-conver]
(root,139728,54528,00:42:26/172-19:20:31,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/172-19:20:31,348) [rpciod]
(root,0,0,00:00:00/172-19:20:31,349) [xprtiod]
(root,0,0,00:00:00/172-19:20:31,353) [spl_system_task]
(root,0,0,00:00:00/172-19:20:31,354) [spl_delay_taskq]
(root,0,0,00:00:00/172-19:20:31,355) [spl_dynamic_tas]
(root,0,0,00:00:00/172-19:20:31,356) [spl_kmem_cache]
(root,0,0,00:00:00/172-19:20:30,361) [zvol]
(root,0,0,00:00:00/172-19:20:30,362) [arc_prune]
(root,0,0,00:03:58/172-19:20:30,363) [arc_evict]
(root,0,0,00:03:42/172-19:20:30,364) [arc_reap]
(root,0,0,00:00:00/172-19:20:30,366) [dbu_evict]
(root,0,0,00:03:35/172-19:20:30,367) [dbuf_evict]
(root,22980,3900,00:19:27/172-19:20:30,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/172-19:20:30,376) [z_vdev_file]
(root,0,0,00:01:59/172-19:20:30,377) [l2arc_feed]
(root,0,0,00:00:00/172-19:20:30,485) [cryptd]
(root,3860,2148,00:00:05/172-19:20:30,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/172-19:20:30,522) [jbd2/md1-8]
(root,0,0,00:00:00/172-19:20:30,523) [ext4-rsv-conver]
(_rpc,7776,4404,00:00:27/172-19:20:28,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3400,00:00:11/172-19:20:28,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:34:42/172-19:20:28,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:38/172-19:20:28,571) /usr/sbin/watchdog-mux
(root,12248,4732,00:00:03/172-19:20:28,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:14:15/172-19:20:28,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:17/172-19:20:28,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4596,00:01:33/172-19:20:28,578) /lib/systemd/systemd-logind
(root,223768,3784,00:13:13/172-19:20:28,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2728,00:00:00/172-19:20:28,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/172-19:20:28,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,362160,26140,00:00:55/60-12:16:21,585) pvedaemon worker
(root,4084,1676,00:00:05/172-19:20:28,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1364,00:00:00/172-19:20:27,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:57/172-19:20:27,768) bpfilter_umh
(root,13808,4924,00:12:41/172-19:20:27,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/172-19:20:27,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3260,00:37:54/172-19:20:27,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,735512,56936,02:59:35/172-19:20:27,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:48/172-19:20:27,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3604,00:00:34/172-19:20:27,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5840,00:00:07/172-19:20:27,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:17/172-19:20:26,1061) /usr/sbin/cron -f
(root,303168,37772,15:56:45/172-19:20:25,1068) pvestatd
(root,304364,30800,06:29:48/172-19:20:25,1069) pve-firewall
(root,353760,3956,00:02:03/172-19:20:25,1093) pvedaemon
(root,336416,10904,00:14:38/172-19:20:25,1101) pve-ha-crm
(www-data,355156,144560,00:04:28/172-19:20:24,1102) pveproxy
(www-data,68848,57884,00:02:50/172-19:20:24,1109) spiceproxy
(root,335964,31708,00:24:02/172-19:20:24,1111) pve-ha-lrm
(root,6057436,3549032,8-22:47:21/172-19:20:23,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:12/172-19:20:23,1129) [kvm-nx-lpage-re]
(root,0,0,13:04:33/172-19:20:23,1148) [vhost-1125]
(root,0,0,11:03:22/172-19:20:22,1167) [vhost-1125]
(root,0,0,01:10:49/172-19:20:22,1172) [kvm-pit/1125]
(root,14077172,8623160,83-02:14:38/172-19:20:19,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:06:10/172-19:20:19,1188) [kvm-nx-lpage-re]
(root,0,0,00:23:00/172-19:20:19,1207) [vhost-1184]
(root,0,0,01:20:39/172-19:20:19,1212) [kvm-pit/1184]
(root,0,0,00:00:00/172-19:20:16,1214) [dio/md2]
(root,3708380,2356216,42-04:50:00/172-19:20:15,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:49/172-19:20:15,1267) [kvm-nx-lpage-re]
(root,0,0,05:30:16/172-19:20:15,1286) [vhost-1263]
(root,0,0,00:00:00/172-19:20:15,1289) [kvm-pit/1263]
(root,0,0,00:00:00/172-19:20:14,1295) [ib-comp-wq]
(root,0,0,00:00:00/172-19:20:14,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/172-19:20:14,1297) [ib_mcast]
(root,0,0,00:00:00/172-19:20:14,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/172-19:20:14,1299) [rdma_cm]
(root,0,0,00:00:00/172-19:20:14,1300) [cifsiod]
(root,0,0,00:00:00/172-19:20:14,1301) [smb3decryptd]
(root,0,0,00:00:00/172-19:20:14,1302) [cifsfileinfoput]
(root,0,0,00:00:00/172-19:20:14,1303) [cifsoplockd]
(root,0,0,00:14:54/172-19:20:14,1305) [cifsd]
(root,0,0,00:05:37/172-19:20:14,1340) [cifsd]
(root,6103960,4291268,11-10:02:13/172-19:20:11,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:58/172-19:20:11,1358) [kvm-nx-lpage-re]
(root,0,0,02:12:55/172-19:20:11,1377) [vhost-1354]
(root,0,0,00:00:00/172-19:20:11,1382) [kvm-pit/1354]
(root,21125556,16964916,13-08:22:50/172-19:20:07,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:30/172-19:20:07,1398) [kvm-nx-lpage-re]
(root,0,0,01:36:34/172-19:20:06,1417) [vhost-1394]
(root,0,0,00:00:00/172-19:20:06,1422) [kvm-pit/1394]
(root,19406976,5835448,9-16:27:02/172-19:20:03,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:34/172-19:20:03,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:57/172-19:20:02,1487) [vhost-1464]
(root,0,0,00:00:00/172-19:20:02,1492) [kvm-pit/1464]
(root,6123516,4337484,36-21:42:38/172-19:19:59,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:11/172-19:19:59,1511) [kvm-nx-lpage-re]
(root,0,0,01:49:13/172-19:19:58,1531) [vhost-1507]
(root,0,0,00:00:00/172-19:19:58,1534) [kvm-pit/1507]
(root,0,0,00:00:00/33:05,2647) [kworker/6:2-mm_percpu_wq]
(root,0,0,00:00:00/30:48,3260) [kworker/u16:0-events_power_efficient]
(root,0,0,00:00:00/28:05,4028) [kworker/0:3-events]
(root,0,0,00:00:00/26:05,4572) [kworker/7:3-events]
(root,0,0,00:00:00/20:05,6267) [kworker/4:3-events]
(root,0,0,00:00:00/17:05,7076) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/15:05,7620) [kworker/3:1-events]
(root,0,0,00:00:00/15:05,7621) [kworker/3:3-events]
(root,0,0,00:00:00/14:05,7899) [kworker/7:1-events]
(root,0,0,00:00:00/10:05,8985) [kworker/2:0-events]
(root,0,0,00:00:00/09:05,9266) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/09:05,9267) [kworker/1:2-events]
(root,0,0,00:00:00/09:01,9268) [kworker/6:0-cgroup_destroy]
(root,0,0,00:00:00/08:15,9498) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/06:05,10068) [kworker/5:2-cgroup_destroy]
(root,0,0,00:00:00/05:05,10338) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/04:05,10604) [kworker/7:0-cgroup_destroy]
(root,0,0,00:00:00/03:05,10870) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/03:05,10871) [kworker/0:2-events]
(root,0,0,00:00:00/01:21,11274) [kworker/u16:2-flush-9:2]
(root,0,0,00:00:00/01:05,11422) [kworker/6:1-md]
(root,0,0,00:00:00/01:05,11423) [kworker/3:0-cgroup_destroy]
(www-data,77016,54828,00:00:00/01:58:03,11584) spiceproxy worker
(root,86168,2296,00:00:00/01:58:03,11586) /usr/sbin/pvefw-logger
(www-data,355868,131256,00:00:00/01:58:03,11595) pveproxy worker
(www-data,355604,130544,00:00:00/01:58:03,11596) pveproxy worker
(www-data,367700,137636,00:00:00/01:58:03,11597) pveproxy worker
(root,14508,7724,00:00:00/00:05,11710) sshd: root [priv]
(sshd,13808,4956,00:00:00/00:05,11711) sshd: root [net]
(root,0,0,00:00:00/00:05,11712) [kworker/3:2]
(root,14508,7608,00:00:00/00:03,11714) sshd: root [priv]
(sshd,13808,4956,00:00:00/00:03,11715) sshd: root [net]
(root,13808,6708,00:00:00/00:01,11716) sshd: [accepted]
(sshd,13808,2616,00:00:00/00:01,11717) sshd: [net]
(root,13808,6832,00:00:00/00:01,11718) sshd: [accepted]
(root,7188,3316,00:00:00/00:00,11762) /bin/bash /usr/bin/check_mk_agent
(root,7632,2752,00:00:00/00:00,11788) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,984,00:00:00/00:00,11789) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362440,28196,00:01:56/119-09:26:53,18556) pvedaemon worker
(root,0,0,00:00:00/01:06:05,25733) [kworker/5:0-events]
(postfix,43844,7780,00:00:00/01:04:54,26042) pickup -l -t unix -u -c
(root,362584,20300,00:02:19/146-04:22:02,27309) pvedaemon worker
(root,18882592,10605088,6-08:17:32/146-15:54:28,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:37/146-15:54:28,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:29/146-15:54:28,28619) [vhost-28596]
(root,0,0,01:09:04/146-15:54:28,28626) [kvm-pit/28596]
(root,0,0,00:00:00/46:05,31372) [kworker/2:1-cgroup_destroy]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-12 00:58

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42c7ab1b01

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7032,00:17:34/170-19:27:36,1) /sbin/init
(root,0,0,00:00:09/170-19:27:36,2) [kthreadd]
(root,0,0,00:00:00/170-19:27:36,3) [rcu_gp]
(root,0,0,00:00:00/170-19:27:36,4) [rcu_par_gp]
(root,0,0,00:00:00/170-19:27:36,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/170-19:27:36,9) [mm_percpu_wq]
(root,0,0,00:04:38/170-19:27:36,10) [ksoftirqd/0]
(root,0,0,00:35:58/170-19:27:36,11) [rcu_sched]
(root,0,0,00:00:43/170-19:27:36,12) [migration/0]
(root,0,0,00:00:00/170-19:27:36,13) [idle_inject/0]
(root,0,0,00:00:00/170-19:27:36,14) [cpuhp/0]
(root,0,0,00:00:00/170-19:27:36,15) [cpuhp/1]
(root,0,0,00:00:00/170-19:27:36,16) [idle_inject/1]
(root,0,0,00:00:43/170-19:27:36,17) [migration/1]
(root,0,0,00:03:25/170-19:27:36,18) [ksoftirqd/1]
(root,0,0,00:00:00/170-19:27:36,20) [kworker/1:0H]
(root,0,0,00:00:00/170-19:27:36,21) [cpuhp/2]
(root,0,0,00:00:00/170-19:27:36,22) [idle_inject/2]
(root,0,0,00:00:41/170-19:27:36,23) [migration/2]
(root,0,0,00:02:10/170-19:27:36,24) [ksoftirqd/2]
(root,0,0,00:00:00/170-19:27:36,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/170-19:27:36,27) [cpuhp/3]
(root,0,0,00:00:00/170-19:27:36,28) [idle_inject/3]
(root,0,0,00:00:55/170-19:27:36,29) [migration/3]
(root,0,0,00:01:35/170-19:27:36,30) [ksoftirqd/3]
(root,0,0,00:00:00/170-19:27:36,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/170-19:27:36,33) [cpuhp/4]
(root,0,0,00:00:00/170-19:27:36,34) [idle_inject/4]
(root,0,0,00:00:41/170-19:27:36,35) [migration/4]
(root,0,0,00:01:14/170-19:27:36,36) [ksoftirqd/4]
(root,0,0,00:00:00/170-19:27:36,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/170-19:27:36,39) [cpuhp/5]
(root,0,0,00:00:00/170-19:27:36,40) [idle_inject/5]
(root,0,0,00:00:41/170-19:27:36,41) [migration/5]
(root,0,0,00:01:06/170-19:27:36,42) [ksoftirqd/5]
(root,0,0,00:00:00/170-19:27:36,44) [kworker/5:0H]
(root,0,0,00:00:00/170-19:27:36,45) [cpuhp/6]
(root,0,0,00:00:00/170-19:27:36,46) [idle_inject/6]
(root,0,0,00:00:39/170-19:27:36,47) [migration/6]
(root,0,0,00:10:23/170-19:27:36,48) [ksoftirqd/6]
(root,0,0,00:00:00/170-19:27:36,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/170-19:27:36,51) [cpuhp/7]
(root,0,0,00:00:00/170-19:27:36,52) [idle_inject/7]
(root,0,0,00:00:48/170-19:27:36,53) [migration/7]
(root,0,0,00:26:57/170-19:27:36,54) [ksoftirqd/7]
(root,0,0,00:00:00/170-19:27:36,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/170-19:27:36,57) [kdevtmpfs]
(root,0,0,00:00:00/170-19:27:36,58) [netns]
(root,0,0,00:00:00/170-19:27:36,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/170-19:27:36,60) [kauditd]
(root,0,0,00:00:05/170-19:27:36,62) [khungtaskd]
(root,0,0,00:00:00/170-19:27:36,63) [oom_reaper]
(root,0,0,00:00:00/170-19:27:36,64) [writeback]
(root,0,0,00:00:00/170-19:27:36,65) [kcompactd0]
(root,0,0,00:00:00/170-19:27:36,66) [ksmd]
(root,0,0,00:03:48/170-19:27:36,67) [khugepaged]
(root,0,0,00:00:00/170-19:27:36,113) [kintegrityd]
(root,0,0,00:00:00/170-19:27:36,114) [kblockd]
(root,0,0,00:00:00/170-19:27:36,115) [blkcg_punt_bio]
(root,0,0,00:00:00/170-19:27:36,116) [tpm_dev_wq]
(root,0,0,00:00:00/170-19:27:36,117) [ata_sff]
(root,0,0,00:00:00/170-19:27:36,118) [md]
(root,0,0,00:00:00/170-19:27:36,119) [edac-poller]
(root,0,0,00:00:00/170-19:27:36,120) [devfreq_wq]
(root,0,0,00:00:00/170-19:27:36,121) [watchdogd]
(root,0,0,00:26:07/170-19:27:36,128) [kswapd0]
(root,0,0,00:00:00/170-19:27:36,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/170-19:27:36,131) [kthrotld]
(root,0,0,00:00:00/170-19:27:36,132) [acpi_thermal_pm]
(root,0,0,00:00:00/170-19:27:36,133) [nvme-wq]
(root,0,0,00:00:00/170-19:27:36,134) [nvme-reset-wq]
(root,0,0,00:00:00/170-19:27:36,135) [nvme-delete-wq]
(root,0,0,00:00:00/170-19:27:36,137) [ipv6_addrconf]
(root,0,0,00:00:00/170-19:27:36,146) [kstrp]
(root,0,0,00:00:00/170-19:27:36,147) [kworker/u17:0]
(root,0,0,00:00:00/170-19:27:36,162) [charger_manager]
(root,0,0,00:00:00/170-19:27:35,210) [scsi_eh_0]
(root,0,0,00:00:00/170-19:27:35,211) [scsi_tmf_0]
(root,0,0,00:00:00/170-19:27:35,212) [scsi_eh_1]
(root,0,0,00:00:00/170-19:27:35,213) [scsi_tmf_1]
(root,0,0,00:00:00/170-19:27:35,214) [scsi_eh_2]
(root,0,0,00:00:00/170-19:27:35,215) [scsi_tmf_2]
(root,0,0,00:00:00/170-19:27:35,216) [scsi_eh_3]
(root,0,0,00:00:00/170-19:27:35,217) [scsi_tmf_3]
(root,0,0,00:00:00/170-19:27:35,218) [scsi_eh_4]
(root,0,0,00:00:00/170-19:27:35,219) [scsi_tmf_4]
(root,0,0,00:00:00/170-19:27:35,220) [scsi_eh_5]
(root,0,0,00:00:00/170-19:27:35,221) [scsi_tmf_5]
(root,0,0,00:03:46/170-19:27:35,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:50/170-19:27:35,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:33/170-19:27:35,237) [kworker/1:1H-kblockd]
(root,0,0,00:51:14/170-19:27:35,238) [kworker/6:1H-kblockd]
(root,0,0,00:05:02/170-19:27:35,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:35/170-19:27:35,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:40/170-19:27:35,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:31/170-19:27:35,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/170-19:27:35,248) [md1_raid1]
(root,0,0,00:00:36/170-19:27:35,251) [md0_raid1]
(root,0,0,01:14:15/170-19:27:35,253) [md2_raid1]
(root,0,0,00:00:00/170-19:27:34,268) [raid5wq]
(root,0,0,00:07:52/170-19:27:31,291) [jbd2/md2-8]
(root,0,0,00:00:00/170-19:27:31,292) [ext4-rsv-conver]
(root,245988,138884,00:41:34/170-19:27:31,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/170-19:27:31,348) [rpciod]
(root,0,0,00:00:00/170-19:27:31,349) [xprtiod]
(root,0,0,00:00:00/170-19:27:31,353) [spl_system_task]
(root,0,0,00:00:00/170-19:27:31,354) [spl_delay_taskq]
(root,0,0,00:00:00/170-19:27:31,355) [spl_dynamic_tas]
(root,0,0,00:00:00/170-19:27:31,356) [spl_kmem_cache]
(root,0,0,00:00:00/170-19:27:30,361) [zvol]
(root,0,0,00:00:00/170-19:27:30,362) [arc_prune]
(root,0,0,00:03:56/170-19:27:30,363) [arc_evict]
(root,0,0,00:03:40/170-19:27:30,364) [arc_reap]
(root,0,0,00:00:00/170-19:27:30,366) [dbu_evict]
(root,0,0,00:03:33/170-19:27:30,367) [dbuf_evict]
(root,22980,3900,00:19:13/170-19:27:30,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/170-19:27:30,376) [z_vdev_file]
(root,0,0,00:01:58/170-19:27:30,377) [l2arc_feed]
(root,0,0,00:00:00/06:05,483) [kworker/6:1-dio/md2]
(root,0,0,00:00:00/06:05,484) [kworker/6:3-dio/md2]
(root,0,0,00:00:00/170-19:27:30,485) [cryptd]
(root,3860,2148,00:00:05/170-19:27:30,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/170-19:27:30,522) [jbd2/md1-8]
(root,0,0,00:00:00/170-19:27:30,523) [ext4-rsv-conver]
(_rpc,7776,4404,00:00:26/170-19:27:28,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3400,00:00:11/170-19:27:28,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:34:19/170-19:27:28,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:35/170-19:27:28,571) /usr/sbin/watchdog-mux
(root,12248,4732,00:00:03/170-19:27:28,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:14:00/170-19:27:28,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:17/170-19:27:28,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4596,00:01:32/170-19:27:28,578) /lib/systemd/systemd-logind
(root,223768,3784,00:12:58/170-19:27:28,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2728,00:00:00/170-19:27:28,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/170-19:27:28,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,362160,26140,00:00:53/58-12:23:21,585) pvedaemon worker
(root,4084,1676,00:00:05/170-19:27:28,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1364,00:00:00/170-19:27:27,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:53/170-19:27:27,768) bpfilter_umh
(root,0,0,00:00:00/05:09,772) [kworker/u16:2-events_power_efficient]
(root,13808,4924,00:12:24/170-19:27:27,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/170-19:27:27,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,9796,2388,00:00:00/05:04,803) /usr/sbin/CRON -f
(root,2380,760,00:00:00/05:04,804) /bin/sh -c vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,330176,116272,00:00:00/05:04,805) /usr/bin/perl -T /usr/bin/vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,337444,102440,00:00:00/05:04,807) task UPID:node01:00000327:57F68B2D:67579292:vzdump::root@pam:
(root,5212,1892,00:00:29/05:03,817) lzop
(root,0,0,00:00:00/04:43,875) [kworker/6:4-dio/md2]
(root,0,0,00:00:00/04:43,876) [kworker/6:5-dio/md2]
(root,0,0,00:00:00/04:43,877) [kworker/6:6-dio/md2]
(root,0,0,00:00:00/04:43,878) [kworker/6:7-dio/md2]
(root,0,0,00:00:00/04:43,879) [kworker/6:8-dio/md2]
(root,0,0,00:00:00/04:43,880) [kworker/6:9-dio/md2]
(root,0,0,00:00:00/04:43,881) [kworker/6:10-cgroup_destroy]
(root,0,0,00:00:00/04:43,882) [kworker/6:11-md]
(root,0,0,00:00:00/04:43,883) [kworker/6:12-dio/md2]
(root,0,0,00:00:00/04:43,884) [kworker/6:13]
(root,878176,3260,00:37:27/170-19:27:27,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,741716,60072,02:57:35/170-19:27:27,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:47/170-19:27:27,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3608,00:00:33/170-19:27:27,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5440,00:00:07/170-19:27:27,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:17/170-19:27:26,1061) /usr/sbin/cron -f
(root,303168,37772,15:45:15/170-19:27:25,1068) pvestatd
(root,304364,30800,06:25:10/170-19:27:25,1069) pve-firewall
(root,353760,3960,00:02:01/170-19:27:25,1093) pvedaemon
(root,336416,10904,00:14:28/170-19:27:25,1101) pve-ha-crm
(www-data,355216,144156,00:04:25/170-19:27:24,1102) pveproxy
(www-data,68912,57820,00:02:48/170-19:27:24,1109) spiceproxy
(root,335964,31708,00:23:46/170-19:27:24,1111) pve-ha-lrm
(root,6048852,3541392,8-20:14:51/170-19:27:23,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:12/170-19:27:23,1129) [kvm-nx-lpage-re]
(root,0,0,00:00:00/04:05,1130) [kworker/0:1-cifsiod]
(root,0,0,00:00:00/04:05,1136) [kworker/0:2-cgroup_destroy]
(root,0,0,12:54:53/170-19:27:23,1148) [vhost-1125]
(root,0,0,10:55:05/170-19:27:22,1167) [vhost-1125]
(root,0,0,01:10:04/170-19:27:22,1172) [kvm-pit/1125]
(root,14072876,8619136,80-23:24:33/170-19:27:19,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:06:06/170-19:27:19,1188) [kvm-nx-lpage-re]
(root,0,0,00:22:48/170-19:27:19,1207) [vhost-1184]
(root,0,0,01:19:46/170-19:27:19,1212) [kvm-pit/1184]
(root,0,0,00:00:00/170-19:27:16,1214) [dio/md2]
(root,3700380,2347336,41-16:39:50/170-19:27:15,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:48/170-19:27:15,1267) [kvm-nx-lpage-re]
(root,0,0,05:26:55/170-19:27:15,1286) [vhost-1263]
(root,0,0,00:00:00/170-19:27:15,1289) [kvm-pit/1263]
(root,0,0,00:00:00/170-19:27:14,1295) [ib-comp-wq]
(root,0,0,00:00:00/170-19:27:14,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/170-19:27:14,1297) [ib_mcast]
(root,0,0,00:00:00/170-19:27:14,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/170-19:27:14,1299) [rdma_cm]
(root,0,0,00:00:00/170-19:27:14,1300) [cifsiod]
(root,0,0,00:00:00/170-19:27:14,1301) [smb3decryptd]
(root,0,0,00:00:00/170-19:27:14,1302) [cifsfileinfoput]
(root,0,0,00:00:00/170-19:27:14,1303) [cifsoplockd]
(root,0,0,00:14:45/170-19:27:14,1305) [cifsd]
(root,0,0,00:05:33/170-19:27:14,1340) [cifsd]
(root,6095372,4282728,11-06:46:31/170-19:27:11,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:57/170-19:27:11,1358) [kvm-nx-lpage-re]
(root,0,0,02:11:28/170-19:27:11,1377) [vhost-1354]
(root,0,0,00:00:00/170-19:27:11,1382) [kvm-pit/1354]
(root,21121828,16962584,13-04:40:26/170-19:27:07,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:27/170-19:27:07,1398) [kvm-nx-lpage-re]
(root,0,0,01:35:02/170-19:27:06,1417) [vhost-1394]
(root,0,0,00:00:00/170-19:27:06,1422) [kvm-pit/1394]
(root,19398384,5790860,9-13:43:46/170-19:27:03,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:34/170-19:27:03,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:56/170-19:27:02,1487) [vhost-1464]
(root,0,0,00:00:00/170-19:27:02,1492) [kvm-pit/1464]
(root,6114932,4329044,36-13:57:04/170-19:26:59,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:10/170-19:26:59,1511) [kvm-nx-lpage-re]
(root,0,0,01:46:59/170-19:26:58,1531) [vhost-1507]
(root,0,0,00:00:00/170-19:26:58,1534) [kvm-pit/1507]
(root,0,0,00:00:00/02:05,1784) [kworker/7:2]
(root,0,0,00:00:05/02:00,1799) [kworker/u16:3-events_unbound]
(root,13808,6716,00:00:00/01:26,2001) sshd: [accepted]
(root,0,0,00:00:00/01:05,2075) [kworker/2:0-cgroup_destroy]
(root,14736,7592,00:00:00/00:11,2342) sshd: root [priv]
(sshd,13808,4912,00:00:00/00:11,2343) sshd: root [net]
(root,14508,7640,00:00:00/00:06,2361) sshd: root [priv]
(sshd,13808,4920,00:00:00/00:05,2362) sshd: root [net]
(root,7188,3236,00:00:00/00:00,2445) /bin/bash /usr/bin/check_mk_agent
(root,25480,22460,00:00:00/00:00,2526) /usr/bin/perl /usr/bin/pvecm status
(root,7188,3216,00:00:00/00:00,2527) /bin/bash /usr/bin/check_mk_agent
(root,7632,2604,00:00:00/00:00,2553) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,996,00:00:00/00:00,2554) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(postfix,43844,7568,00:00:00/01:30:28,7288) pickup -l -t unix -u -c
(root,0,0,00:00:29/01:19:40,10631) [kworker/u16:0-events_power_efficient]
(root,362440,28196,00:01:54/117-09:33:53,18556) pvedaemon worker
(root,0,0,00:00:00/49:05,20677) [kworker/4:3-events]
(root,0,0,00:00:00/39:05,23463) [kworker/5:1-cgroup_destroy]
(root,0,0,00:00:00/34:05,24887) [kworker/1:0-events]
(root,0,0,00:00:00/28:05,26588) [kworker/3:3-events]
(root,362584,20304,00:02:17/144-04:29:02,27309) pvedaemon worker
(root,0,0,00:00:00/25:05,27452) [kworker/7:0-events]
(root,0,0,00:00:00/24:05,27741) [kworker/2:2-events]
(root,18881212,10591024,6-06:06:23/144-16:01:28,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:35/144-16:01:28,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:27/144-16:01:28,28619) [vhost-28596]
(root,0,0,01:08:11/144-16:01:28,28626) [kvm-pit/28596]
(root,0,0,00:00:00/19:05,29168) [kworker/6:2-dio/md2]
(www-data,76932,54752,00:00:00/02:05:03,29527) spiceproxy worker
(root,86168,2064,00:00:00/02:05:03,29530) /usr/sbin/pvefw-logger
(www-data,355512,130116,00:00:00/02:05:03,29538) pveproxy worker
(www-data,355512,130112,00:00:00/02:05:03,29539) pveproxy worker
(www-data,355908,131060,00:00:00/02:05:03,29540) pveproxy worker
(root,0,0,00:00:00/17:05,29743) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/16:16,30005) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/16:05,30076) [kworker/7:1-cgroup_destroy]
(root,0,0,00:00:00/14:05,30630) [kworker/2:1-events]
(root,0,0,00:00:00/13:05,30904) [kworker/6:0-dio/md2]
(root,0,0,00:00:00/12:05,31182) [kworker/0:0-events]
(root,0,0,00:00:00/12:05,31183) [kworker/0:3-md]
(root,0,0,00:00:48/12:04,31184) [kworker/u16:1-flush-9:2]
(root,0,0,00:00:00/10:05,31764) [kworker/5:2-events]
(root,0,0,00:00:00/07:05,32656) [kworker/4:1-cgroup_destroy]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-10 01:05

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c423d4975ab

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7044,00:17:21/168-19:16:05,1) /sbin/init
(root,0,0,00:00:09/168-19:16:05,2) [kthreadd]
(root,0,0,00:00:00/168-19:16:05,3) [rcu_gp]
(root,0,0,00:00:00/168-19:16:05,4) [rcu_par_gp]
(root,0,0,00:00:00/168-19:16:05,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/168-19:16:05,9) [mm_percpu_wq]
(root,0,0,00:04:36/168-19:16:05,10) [ksoftirqd/0]
(root,0,0,00:35:32/168-19:16:05,11) [rcu_sched]
(root,0,0,00:00:42/168-19:16:05,12) [migration/0]
(root,0,0,00:00:00/168-19:16:05,13) [idle_inject/0]
(root,0,0,00:00:00/168-19:16:05,14) [cpuhp/0]
(root,0,0,00:00:00/168-19:16:05,15) [cpuhp/1]
(root,0,0,00:00:00/168-19:16:05,16) [idle_inject/1]
(root,0,0,00:00:42/168-19:16:05,17) [migration/1]
(root,0,0,00:03:23/168-19:16:05,18) [ksoftirqd/1]
(root,0,0,00:00:00/168-19:16:05,20) [kworker/1:0H]
(root,0,0,00:00:00/168-19:16:05,21) [cpuhp/2]
(root,0,0,00:00:00/168-19:16:05,22) [idle_inject/2]
(root,0,0,00:00:41/168-19:16:05,23) [migration/2]
(root,0,0,00:02:09/168-19:16:05,24) [ksoftirqd/2]
(root,0,0,00:00:00/168-19:16:05,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/168-19:16:05,27) [cpuhp/3]
(root,0,0,00:00:00/168-19:16:05,28) [idle_inject/3]
(root,0,0,00:00:54/168-19:16:05,29) [migration/3]
(root,0,0,00:01:34/168-19:16:05,30) [ksoftirqd/3]
(root,0,0,00:00:00/168-19:16:05,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/168-19:16:05,33) [cpuhp/4]
(root,0,0,00:00:00/168-19:16:05,34) [idle_inject/4]
(root,0,0,00:00:40/168-19:16:05,35) [migration/4]
(root,0,0,00:01:13/168-19:16:05,36) [ksoftirqd/4]
(root,0,0,00:00:00/168-19:16:05,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/168-19:16:05,39) [cpuhp/5]
(root,0,0,00:00:00/168-19:16:05,40) [idle_inject/5]
(root,0,0,00:00:40/168-19:16:05,41) [migration/5]
(root,0,0,00:01:05/168-19:16:05,42) [ksoftirqd/5]
(root,0,0,00:00:00/168-19:16:05,44) [kworker/5:0H]
(root,0,0,00:00:00/168-19:16:05,45) [cpuhp/6]
(root,0,0,00:00:00/168-19:16:05,46) [idle_inject/6]
(root,0,0,00:00:38/168-19:16:05,47) [migration/6]
(root,0,0,00:10:16/168-19:16:05,48) [ksoftirqd/6]
(root,0,0,00:00:00/168-19:16:05,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/168-19:16:05,51) [cpuhp/7]
(root,0,0,00:00:00/168-19:16:05,52) [idle_inject/7]
(root,0,0,00:00:48/168-19:16:05,53) [migration/7]
(root,0,0,00:26:35/168-19:16:05,54) [ksoftirqd/7]
(root,0,0,00:00:00/168-19:16:05,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/168-19:16:05,57) [kdevtmpfs]
(root,0,0,00:00:00/168-19:16:05,58) [netns]
(root,0,0,00:00:00/168-19:16:05,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/168-19:16:05,60) [kauditd]
(root,0,0,00:00:05/168-19:16:05,62) [khungtaskd]
(root,0,0,00:00:00/168-19:16:05,63) [oom_reaper]
(root,0,0,00:00:00/168-19:16:05,64) [writeback]
(root,0,0,00:00:00/168-19:16:05,65) [kcompactd0]
(root,0,0,00:00:00/168-19:16:05,66) [ksmd]
(root,0,0,00:03:48/168-19:16:05,67) [khugepaged]
(root,0,0,00:00:00/168-19:16:05,113) [kintegrityd]
(root,0,0,00:00:00/168-19:16:05,114) [kblockd]
(root,0,0,00:00:00/168-19:16:05,115) [blkcg_punt_bio]
(root,0,0,00:00:00/168-19:16:05,116) [tpm_dev_wq]
(root,0,0,00:00:00/168-19:16:05,117) [ata_sff]
(root,0,0,00:00:00/168-19:16:05,118) [md]
(root,0,0,00:00:00/168-19:16:05,119) [edac-poller]
(root,0,0,00:00:00/168-19:16:05,120) [devfreq_wq]
(root,0,0,00:00:00/168-19:16:05,121) [watchdogd]
(root,0,0,00:25:45/168-19:16:05,128) [kswapd0]
(root,0,0,00:00:00/168-19:16:05,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/168-19:16:05,131) [kthrotld]
(root,0,0,00:00:00/168-19:16:05,132) [acpi_thermal_pm]
(root,0,0,00:00:00/168-19:16:05,133) [nvme-wq]
(root,0,0,00:00:00/168-19:16:05,134) [nvme-reset-wq]
(root,0,0,00:00:00/168-19:16:05,135) [nvme-delete-wq]
(root,0,0,00:00:00/168-19:16:05,137) [ipv6_addrconf]
(root,0,0,00:00:00/168-19:16:05,146) [kstrp]
(root,0,0,00:00:00/168-19:16:05,147) [kworker/u17:0]
(root,0,0,00:00:00/168-19:16:05,162) [charger_manager]
(root,0,0,00:00:00/168-19:16:04,210) [scsi_eh_0]
(root,0,0,00:00:00/168-19:16:04,211) [scsi_tmf_0]
(root,0,0,00:00:00/168-19:16:04,212) [scsi_eh_1]
(root,0,0,00:00:00/168-19:16:04,213) [scsi_tmf_1]
(root,0,0,00:00:00/168-19:16:04,214) [scsi_eh_2]
(root,0,0,00:00:00/168-19:16:04,215) [scsi_tmf_2]
(root,0,0,00:00:00/168-19:16:04,216) [scsi_eh_3]
(root,0,0,00:00:00/168-19:16:04,217) [scsi_tmf_3]
(root,0,0,00:00:00/168-19:16:04,218) [scsi_eh_4]
(root,0,0,00:00:00/168-19:16:04,219) [scsi_tmf_4]
(root,0,0,00:00:00/168-19:16:04,220) [scsi_eh_5]
(root,0,0,00:00:00/168-19:16:04,221) [scsi_tmf_5]
(root,0,0,00:03:44/168-19:16:04,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:47/168-19:16:04,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:30/168-19:16:04,237) [kworker/1:1H-kblockd]
(root,0,0,00:50:39/168-19:16:04,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:59/168-19:16:04,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:33/168-19:16:04,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:38/168-19:16:04,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:28/168-19:16:04,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/168-19:16:04,248) [md1_raid1]
(root,0,0,00:00:36/168-19:16:04,251) [md0_raid1]
(root,0,0,01:13:45/168-19:16:04,253) [md2_raid1]
(root,0,0,00:00:00/168-19:16:03,268) [raid5wq]
(root,0,0,00:07:46/168-19:16:00,291) [jbd2/md2-8]
(root,0,0,00:00:00/168-19:16:00,292) [ext4-rsv-conver]
(root,97996,19716,00:40:58/168-19:16:00,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/168-19:16:00,348) [rpciod]
(root,0,0,00:00:00/168-19:16:00,349) [xprtiod]
(root,0,0,00:00:00/168-19:16:00,353) [spl_system_task]
(root,0,0,00:00:00/168-19:16:00,354) [spl_delay_taskq]
(root,0,0,00:00:00/168-19:16:00,355) [spl_dynamic_tas]
(root,0,0,00:00:00/168-19:16:00,356) [spl_kmem_cache]
(root,0,0,00:00:00/168-19:15:59,361) [zvol]
(root,0,0,00:00:00/168-19:15:59,362) [arc_prune]
(root,0,0,00:03:53/168-19:15:59,363) [arc_evict]
(root,0,0,00:03:37/168-19:15:59,364) [arc_reap]
(root,0,0,00:00:00/168-19:15:59,366) [dbu_evict]
(root,0,0,00:03:30/168-19:15:59,367) [dbuf_evict]
(root,22980,3900,00:18:59/168-19:15:59,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/168-19:15:59,376) [z_vdev_file]
(root,0,0,00:01:56/168-19:15:59,377) [l2arc_feed]
(root,0,0,00:00:00/168-19:15:59,485) [cryptd]
(root,3860,2148,00:00:05/168-19:15:59,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/168-19:15:59,522) [jbd2/md1-8]
(root,0,0,00:00:00/168-19:15:59,523) [ext4-rsv-conver]
(_rpc,7776,4404,00:00:26/168-19:15:57,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3400,00:00:11/168-19:15:57,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:33:57/168-19:15:57,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:31/168-19:15:57,571) /usr/sbin/watchdog-mux
(root,12248,4732,00:00:03/168-19:15:57,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:13:46/168-19:15:57,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:17/168-19:15:57,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4596,00:01:31/168-19:15:57,578) /lib/systemd/systemd-logind
(root,223768,3796,00:12:47/168-19:15:57,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2728,00:00:00/168-19:15:57,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/168-19:15:57,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,362160,26176,00:00:51/56-12:11:50,585) pvedaemon worker
(root,4084,1676,00:00:05/168-19:15:57,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1364,00:00:00/168-19:15:56,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:49/168-19:15:56,768) bpfilter_umh
(root,13808,4924,00:12:14/168-19:15:56,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/168-19:15:56,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3260,00:37:00/168-19:15:56,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,729308,53868,02:55:36/168-19:15:56,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:46/168-19:15:56,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,0,0,00:00:00/01:08:34,986) [kworker/0:0-rcu_gp]
(root,43484,3608,00:00:33/168-19:15:56,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5520,00:00:07/168-19:15:56,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:16/168-19:15:55,1061) /usr/sbin/cron -f
(root,303168,37788,15:33:42/168-19:15:54,1068) pvestatd
(root,304364,30808,06:20:34/168-19:15:54,1069) pve-firewall
(root,353760,3968,00:02:00/168-19:15:54,1093) pvedaemon
(root,336416,10932,00:14:17/168-19:15:54,1101) pve-ha-crm
(www-data,355288,144792,00:04:22/168-19:15:53,1102) pveproxy
(www-data,68896,57868,00:02:46/168-19:15:53,1109) spiceproxy
(root,335964,31740,00:23:29/168-19:15:53,1111) pve-ha-lrm
(root,6040264,3534308,8-17:43:15/168-19:15:52,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:12/168-19:15:52,1129) [kvm-nx-lpage-re]
(root,0,0,12:45:34/168-19:15:52,1148) [vhost-1125]
(root,0,0,10:47:05/168-19:15:51,1167) [vhost-1125]
(root,0,0,01:09:19/168-19:15:51,1172) [kvm-pit/1125]
(root,14059988,8602480,78-20:16:43/168-19:15:48,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:06:02/168-19:15:48,1188) [kvm-nx-lpage-re]
(root,0,0,00:22:39/168-19:15:48,1207) [vhost-1184]
(root,0,0,01:18:52/168-19:15:48,1212) [kvm-pit/1184]
(root,0,0,00:00:00/168-19:15:45,1214) [dio/md2]
(root,3691868,2339568,41-04:29:51/168-19:15:44,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:47/168-19:15:44,1267) [kvm-nx-lpage-re]
(root,0,0,05:23:34/168-19:15:44,1286) [vhost-1263]
(root,0,0,00:00:00/168-19:15:44,1289) [kvm-pit/1263]
(root,0,0,00:00:00/168-19:15:43,1295) [ib-comp-wq]
(root,0,0,00:00:00/168-19:15:43,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/168-19:15:43,1297) [ib_mcast]
(root,0,0,00:00:00/168-19:15:43,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/168-19:15:43,1299) [rdma_cm]
(root,0,0,00:00:00/168-19:15:43,1300) [cifsiod]
(root,0,0,00:00:00/168-19:15:43,1301) [smb3decryptd]
(root,0,0,00:00:00/168-19:15:43,1302) [cifsfileinfoput]
(root,0,0,00:00:00/168-19:15:43,1303) [cifsoplockd]
(root,0,0,00:14:34/168-19:15:43,1305) [cifsd]
(root,0,0,00:05:29/168-19:15:43,1340) [cifsd]
(root,6086208,4274028,11-03:30:20/168-19:15:40,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:56/168-19:15:40,1358) [kvm-nx-lpage-re]
(root,0,0,02:10:03/168-19:15:40,1377) [vhost-1354]
(root,0,0,00:00:00/168-19:15:40,1382) [kvm-pit/1354]
(root,21108400,16946524,13-00:41:20/168-19:15:36,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:24/168-19:15:36,1398) [kvm-nx-lpage-re]
(root,0,0,01:33:24/168-19:15:35,1417) [vhost-1394]
(root,0,0,00:00:00/168-19:15:35,1422) [kvm-pit/1394]
(root,19389792,5743072,9-10:59:11/168-19:15:32,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:34/168-19:15:32,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:55/168-19:15:31,1487) [vhost-1464]
(root,0,0,00:00:00/168-19:15:31,1492) [kvm-pit/1464]
(root,6106348,4321340,36-06:15:38/168-19:15:28,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:08/168-19:15:28,1511) [kvm-nx-lpage-re]
(root,0,0,01:45:00/168-19:15:27,1531) [vhost-1507]
(root,0,0,00:00:00/168-19:15:27,1534) [kvm-pit/1507]
(root,0,0,00:00:00/49:34,6751) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/35:34,11054) [kworker/2:1-events]
(root,0,0,00:00:00/35:00,11149) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/28:34,13019) [kworker/3:3-cgroup_destroy]
(root,0,0,00:00:00/18:08,15806) [kworker/6:1-events]
(root,0,0,00:00:00/16:34,16266) [kworker/4:2-cgroup_destroy]
(root,0,0,00:00:00/14:34,16801) [kworker/7:1-cgroup_destroy]
(root,0,0,00:00:00/14:34,16802) [kworker/7:2-events]
(root,0,0,00:00:00/12:34,17354) [kworker/0:3-events]
(root,0,0,00:00:00/11:57,17550) [kworker/u16:0-events_power_efficient]
(root,0,0,00:00:00/11:34,17627) [kworker/6:2-events]
(root,0,0,00:00:00/10:34,17897) [kworker/1:2-mm_percpu_wq]
(root,0,0,00:00:00/10:34,17898) [kworker/1:3-events]
(root,0,0,00:00:00/08:34,18465) [kworker/4:0-events]
(root,0,0,00:00:00/08:22,18496) [kworker/3:1-mm_percpu_wq]
(root,362440,28232,00:01:53/115-09:22:22,18556) pvedaemon worker
(root,0,0,00:00:00/06:34,19032) [kworker/5:0-events]
(root,0,0,00:00:00/06:34,19033) [kworker/5:2-cgroup_destroy]
(root,0,0,00:00:00/04:17,19672) [kworker/6:0-cgroup_destroy]
(root,0,0,00:00:00/02:34,20189) [kworker/1:0-cgroup_destroy]
(root,0,0,00:00:00/02:08,20268) [kworker/u16:1-events_power_efficient]
(root,13808,6620,00:00:00/01:49,20421) sshd: [accepted]
(root,0,0,00:00:00/01:34,20467) [kworker/6:3-cgroup_destroy]
(www-data,76924,54948,00:00:00/01:53:32,20557) spiceproxy worker
(root,86168,2308,00:00:00/01:53:32,20559) /usr/sbin/pvefw-logger
(www-data,355584,130172,00:00:00/01:53:32,20571) pveproxy worker
(www-data,355584,130172,00:00:00/01:53:32,20572) pveproxy worker
(www-data,355584,130172,00:00:00/01:53:32,20573) pveproxy worker
(root,0,0,00:00:00/00:34,20765) [kworker/4:1-events]
(root,14508,7708,00:00:00/00:02,20859) sshd: root [priv]
(sshd,13808,4976,00:00:00/00:02,20860) sshd: root [net]
(root,7188,3220,00:00:00/00:01,20861) /bin/bash /usr/bin/check_mk_agent
(root,7188,3228,00:00:00/00:01,20943) /bin/bash /usr/bin/check_mk_agent
(root,46116,40724,00:00:00/00:01,21024) /usr/bin/perl /usr/bin/pvecm status
(root,42484,37040,00:00:00/00:01,21025) /usr/bin/perl /usr/bin/pvecm nodes
(root,7188,3228,00:00:00/00:00,21026) /bin/bash /usr/bin/check_mk_agent
(root,7632,2704,00:00:00/00:00,21052) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,928,00:00:00/00:00,21053) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(postfix,43844,7704,00:00:00/01:37:33,25130) pickup -l -t unix -u -c
(root,362584,20340,00:02:15/142-04:17:31,27309) pvedaemon worker
(root,18904500,10584940,6-03:55:19/142-15:49:57,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:33/142-15:49:57,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:26/142-15:49:57,28619) [vhost-28596]
(root,0,0,01:07:17/142-15:49:57,28626) [kvm-pit/28596]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-08 00:53

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c425358d994

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7064,00:17:07/166-19:19:15,1) /sbin/init
(root,0,0,00:00:09/166-19:19:15,2) [kthreadd]
(root,0,0,00:00:00/166-19:19:15,3) [rcu_gp]
(root,0,0,00:00:00/166-19:19:15,4) [rcu_par_gp]
(root,0,0,00:00:00/166-19:19:15,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/166-19:19:15,9) [mm_percpu_wq]
(root,0,0,00:04:34/166-19:19:15,10) [ksoftirqd/0]
(root,0,0,00:35:06/166-19:19:15,11) [rcu_sched]
(root,0,0,00:00:42/166-19:19:15,12) [migration/0]
(root,0,0,00:00:00/166-19:19:15,13) [idle_inject/0]
(root,0,0,00:00:00/166-19:19:15,14) [cpuhp/0]
(root,0,0,00:00:00/166-19:19:15,15) [cpuhp/1]
(root,0,0,00:00:00/166-19:19:15,16) [idle_inject/1]
(root,0,0,00:00:42/166-19:19:15,17) [migration/1]
(root,0,0,00:03:21/166-19:19:15,18) [ksoftirqd/1]
(root,0,0,00:00:00/166-19:19:15,20) [kworker/1:0H]
(root,0,0,00:00:00/166-19:19:15,21) [cpuhp/2]
(root,0,0,00:00:00/166-19:19:15,22) [idle_inject/2]
(root,0,0,00:00:40/166-19:19:15,23) [migration/2]
(root,0,0,00:02:08/166-19:19:15,24) [ksoftirqd/2]
(root,0,0,00:00:00/166-19:19:15,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/166-19:19:15,27) [cpuhp/3]
(root,0,0,00:00:00/166-19:19:15,28) [idle_inject/3]
(root,0,0,00:00:54/166-19:19:15,29) [migration/3]
(root,0,0,00:01:33/166-19:19:15,30) [ksoftirqd/3]
(root,0,0,00:00:00/166-19:19:15,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/166-19:19:15,33) [cpuhp/4]
(root,0,0,00:00:00/166-19:19:15,34) [idle_inject/4]
(root,0,0,00:00:40/166-19:19:15,35) [migration/4]
(root,0,0,00:01:13/166-19:19:15,36) [ksoftirqd/4]
(root,0,0,00:00:00/166-19:19:15,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/166-19:19:15,39) [cpuhp/5]
(root,0,0,00:00:00/166-19:19:15,40) [idle_inject/5]
(root,0,0,00:00:40/166-19:19:15,41) [migration/5]
(root,0,0,00:01:04/166-19:19:15,42) [ksoftirqd/5]
(root,0,0,00:00:00/166-19:19:15,44) [kworker/5:0H]
(root,0,0,00:00:00/166-19:19:15,45) [cpuhp/6]
(root,0,0,00:00:00/166-19:19:15,46) [idle_inject/6]
(root,0,0,00:00:38/166-19:19:15,47) [migration/6]
(root,0,0,00:10:08/166-19:19:15,48) [ksoftirqd/6]
(root,0,0,00:00:00/166-19:19:15,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/166-19:19:15,51) [cpuhp/7]
(root,0,0,00:00:00/166-19:19:15,52) [idle_inject/7]
(root,0,0,00:00:47/166-19:19:15,53) [migration/7]
(root,0,0,00:26:14/166-19:19:15,54) [ksoftirqd/7]
(root,0,0,00:00:00/166-19:19:15,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/166-19:19:15,57) [kdevtmpfs]
(root,0,0,00:00:00/166-19:19:15,58) [netns]
(root,0,0,00:00:00/166-19:19:15,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/166-19:19:15,60) [kauditd]
(root,0,0,00:00:05/166-19:19:15,62) [khungtaskd]
(root,0,0,00:00:00/166-19:19:15,63) [oom_reaper]
(root,0,0,00:00:00/166-19:19:15,64) [writeback]
(root,0,0,00:00:00/166-19:19:15,65) [kcompactd0]
(root,0,0,00:00:00/166-19:19:15,66) [ksmd]
(root,0,0,00:03:47/166-19:19:15,67) [khugepaged]
(root,0,0,00:00:00/166-19:19:15,113) [kintegrityd]
(root,0,0,00:00:00/166-19:19:15,114) [kblockd]
(root,0,0,00:00:00/166-19:19:15,115) [blkcg_punt_bio]
(root,0,0,00:00:00/166-19:19:15,116) [tpm_dev_wq]
(root,0,0,00:00:00/166-19:19:15,117) [ata_sff]
(root,0,0,00:00:00/166-19:19:15,118) [md]
(root,0,0,00:00:00/166-19:19:15,119) [edac-poller]
(root,0,0,00:00:00/166-19:19:15,120) [devfreq_wq]
(root,0,0,00:00:00/166-19:19:15,121) [watchdogd]
(root,0,0,00:25:24/166-19:19:15,128) [kswapd0]
(root,0,0,00:00:00/166-19:19:15,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/166-19:19:15,131) [kthrotld]
(root,0,0,00:00:00/166-19:19:15,132) [acpi_thermal_pm]
(root,0,0,00:00:00/166-19:19:15,133) [nvme-wq]
(root,0,0,00:00:00/166-19:19:15,134) [nvme-reset-wq]
(root,0,0,00:00:00/166-19:19:15,135) [nvme-delete-wq]
(root,0,0,00:00:00/166-19:19:15,137) [ipv6_addrconf]
(root,0,0,00:00:00/166-19:19:15,146) [kstrp]
(root,0,0,00:00:00/166-19:19:15,147) [kworker/u17:0]
(root,0,0,00:00:00/166-19:19:15,162) [charger_manager]
(root,0,0,00:00:00/166-19:19:14,210) [scsi_eh_0]
(root,0,0,00:00:00/166-19:19:14,211) [scsi_tmf_0]
(root,0,0,00:00:00/166-19:19:14,212) [scsi_eh_1]
(root,0,0,00:00:00/166-19:19:14,213) [scsi_tmf_1]
(root,0,0,00:00:00/166-19:19:14,214) [scsi_eh_2]
(root,0,0,00:00:00/166-19:19:14,215) [scsi_tmf_2]
(root,0,0,00:00:00/166-19:19:14,216) [scsi_eh_3]
(root,0,0,00:00:00/166-19:19:14,217) [scsi_tmf_3]
(root,0,0,00:00:00/166-19:19:14,218) [scsi_eh_4]
(root,0,0,00:00:00/166-19:19:14,219) [scsi_tmf_4]
(root,0,0,00:00:00/166-19:19:14,220) [scsi_eh_5]
(root,0,0,00:00:00/166-19:19:14,221) [scsi_tmf_5]
(root,0,0,00:03:41/166-19:19:14,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:44/166-19:19:14,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:27/166-19:19:14,237) [kworker/1:1H-kblockd]
(root,0,0,00:50:05/166-19:19:14,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:56/166-19:19:14,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:31/166-19:19:14,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:36/166-19:19:14,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:26/166-19:19:14,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/166-19:19:14,248) [md1_raid1]
(root,0,0,00:00:36/166-19:19:14,251) [md0_raid1]
(root,0,0,01:13:15/166-19:19:14,253) [md2_raid1]
(root,0,0,00:00:00/166-19:19:13,268) [raid5wq]
(root,0,0,00:07:41/166-19:19:10,291) [jbd2/md2-8]
(root,0,0,00:00:00/166-19:19:10,292) [ext4-rsv-conver]
(root,167112,67924,00:40:23/166-19:19:10,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/166-19:19:10,348) [rpciod]
(root,0,0,00:00:00/166-19:19:10,349) [xprtiod]
(root,0,0,00:00:00/166-19:19:10,353) [spl_system_task]
(root,0,0,00:00:00/166-19:19:10,354) [spl_delay_taskq]
(root,0,0,00:00:00/166-19:19:10,355) [spl_dynamic_tas]
(root,0,0,00:00:00/166-19:19:10,356) [spl_kmem_cache]
(root,0,0,00:00:00/166-19:19:09,361) [zvol]
(root,0,0,00:00:00/166-19:19:09,362) [arc_prune]
(root,0,0,00:03:51/166-19:19:09,363) [arc_evict]
(root,0,0,00:03:35/166-19:19:09,364) [arc_reap]
(root,0,0,00:00:00/166-19:19:09,366) [dbu_evict]
(root,0,0,00:03:28/166-19:19:09,367) [dbuf_evict]
(root,22980,3920,00:18:45/166-19:19:09,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/166-19:19:09,376) [z_vdev_file]
(root,0,0,00:01:55/166-19:19:09,377) [l2arc_feed]
(root,0,0,00:00:00/166-19:19:09,485) [cryptd]
(root,3860,2148,00:00:05/166-19:19:09,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/166-19:19:09,522) [jbd2/md1-8]
(root,0,0,00:00:00/166-19:19:09,523) [ext4-rsv-conver]
(_rpc,7776,4420,00:00:26/166-19:19:07,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3420,00:00:11/166-19:19:07,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:33:35/166-19:19:07,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:27/166-19:19:07,571) /usr/sbin/watchdog-mux
(root,12248,4732,00:00:03/166-19:19:07,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:13:34/166-19:19:07,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:17/166-19:19:07,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4616,00:01:30/166-19:19:07,578) /lib/systemd/systemd-logind
(root,223768,3796,00:12:37/166-19:19:07,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2728,00:00:00/166-19:19:07,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/166-19:19:07,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,362160,26224,00:00:49/54-12:15:00,585) pvedaemon worker
(root,4084,1676,00:00:05/166-19:19:07,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1384,00:00:00/166-19:19:06,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:45/166-19:19:06,768) bpfilter_umh
(root,13808,4924,00:12:04/166-19:19:06,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/166-19:19:06,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/37:44,868) [kworker/2:3-mm_percpu_wq]
(root,878176,3260,00:36:33/166-19:19:06,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,729308,53956,02:53:37/166-19:19:06,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:46/166-19:19:06,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3608,00:00:33/166-19:19:06,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5616,00:00:07/166-19:19:06,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:16/166-19:19:05,1061) /usr/sbin/cron -f
(root,303168,37844,15:22:05/166-19:19:04,1068) pvestatd
(root,304364,30868,06:16:01/166-19:19:04,1069) pve-firewall
(root,353760,3968,00:01:59/166-19:19:04,1093) pvedaemon
(root,336416,10972,00:14:07/166-19:19:04,1101) pve-ha-crm
(www-data,355152,144508,00:04:18/166-19:19:03,1102) pveproxy
(www-data,68856,57960,00:02:44/166-19:19:03,1109) spiceproxy
(root,335964,31776,00:23:12/166-19:19:03,1111) pve-ha-lrm
(root,6031680,3527732,8-15:13:21/166-19:19:02,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:12/166-19:19:02,1129) [kvm-nx-lpage-re]
(root,0,0,12:36:35/166-19:19:02,1148) [vhost-1125]
(root,0,0,10:39:23/166-19:19:01,1167) [vhost-1125]
(root,0,0,01:08:35/166-19:19:01,1172) [kvm-pit/1125]
(root,14051396,8598284,76-15:44:39/166-19:18:58,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:57/166-19:18:58,1188) [kvm-nx-lpage-re]
(root,0,0,00:22:30/166-19:18:58,1207) [vhost-1184]
(root,0,0,01:17:59/166-19:18:58,1212) [kvm-pit/1184]
(root,0,0,00:00:00/166-19:18:55,1214) [dio/md2]
(root,3683416,2332164,40-16:21:15/166-19:18:54,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:47/166-19:18:54,1267) [kvm-nx-lpage-re]
(root,0,0,05:20:28/166-19:18:54,1286) [vhost-1263]
(root,0,0,00:00:00/166-19:18:54,1289) [kvm-pit/1263]
(root,0,0,00:00:00/166-19:18:53,1295) [ib-comp-wq]
(root,0,0,00:00:00/166-19:18:53,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/166-19:18:53,1297) [ib_mcast]
(root,0,0,00:00:00/166-19:18:53,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/166-19:18:53,1299) [rdma_cm]
(root,0,0,00:00:00/166-19:18:53,1300) [cifsiod]
(root,0,0,00:00:00/166-19:18:53,1301) [smb3decryptd]
(root,0,0,00:00:00/166-19:18:53,1302) [cifsfileinfoput]
(root,0,0,00:00:00/166-19:18:53,1303) [cifsoplockd]
(root,0,0,00:14:24/166-19:18:53,1305) [cifsd]
(root,0,0,00:05:25/166-19:18:53,1340) [cifsd]
(root,6077624,4266360,11-00:17:35/166-19:18:50,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:56/166-19:18:50,1358) [kvm-nx-lpage-re]
(root,0,0,02:08:39/166-19:18:50,1377) [vhost-1354]
(root,0,0,00:00:00/166-19:18:50,1382) [kvm-pit/1354]
(root,21099820,16939300,12-20:27:31/166-19:18:46,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:21/166-19:18:46,1398) [kvm-nx-lpage-re]
(root,0,0,01:31:57/166-19:18:45,1417) [vhost-1394]
(root,0,0,00:00:00/166-19:18:45,1422) [kvm-pit/1394]
(root,19381200,5700980,9-08:15:34/166-19:18:42,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:33/166-19:18:42,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:54/166-19:18:41,1487) [vhost-1464]
(root,0,0,00:00:00/166-19:18:41,1492) [kvm-pit/1464]
(root,6097764,4313368,35-22:40:37/166-19:18:38,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:06/166-19:18:38,1511) [kvm-nx-lpage-re]
(root,0,0,01:42:58/166-19:18:37,1531) [vhost-1507]
(root,0,0,00:00:00/166-19:18:37,1534) [kvm-pit/1507]
(root,0,0,00:00:00/34:04,1998) [kworker/u16:0-flush-9:2]
(root,0,0,00:00:00/33:44,2065) [kworker/0:0-events]
(root,0,0,00:00:00/32:44,2326) [kworker/3:2-events]
(root,0,0,00:00:00/31:23,2653) [kworker/4:0-events]
(root,0,0,00:00:00/24:44,4467) [kworker/1:2-events]
(postfix,43844,7668,00:00:00/20:13,5744) pickup -l -t unix -u -c
(root,0,0,00:00:00/19:17,6011) [kworker/6:0-events]
(root,0,0,00:00:00/18:44,6191) [kworker/7:1-events]
(root,0,0,00:00:00/13:04,7702) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/12:44,7770) [kworker/3:1-events]
(root,0,0,00:00:00/11:44,8032) [kworker/0:1-events]
(root,0,0,00:00:00/11:05,8151) [kworker/6:2-events]
(root,0,0,00:00:00/08:44,8833) [kworker/4:2-cgroup_destroy]
(root,0,0,00:00:00/07:44,9104) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:00/06:44,9377) [kworker/4:3-cgroup_destroy]
(root,0,0,00:00:00/05:44,9651) [kworker/5:2-cgroup_destroy]
(root,0,0,00:00:00/05:44,9652) [kworker/5:3-events]
(root,0,0,00:00:00/04:53,9889) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/03:44,10195) [kworker/6:1-events]
(root,0,0,00:00:00/02:44,10463) [kworker/3:0-events]
(root,0,0,00:00:00/02:44,10464) [kworker/3:3-cgroup_destroy]
(root,0,0,00:00:00/01:44,10733) [kworker/0:2-cgroup_destroy]
(www-data,77020,54968,00:00:00/01:56:42,10924) spiceproxy worker
(root,86168,2300,00:00:00/01:56:42,10926) /usr/sbin/pvefw-logger
(www-data,355600,130684,00:00:00/01:56:42,10934) pveproxy worker
(www-data,355600,130768,00:00:00/01:56:42,10935) pveproxy worker
(www-data,355600,130780,00:00:00/01:56:42,10936) pveproxy worker
(root,13808,6688,00:00:00/00:52,10973) sshd: [accepted]
(root,13808,6684,00:00:00/00:21,11070) sshd: [accepted]
(root,7188,3320,00:00:00/00:00,11257) /bin/bash /usr/bin/check_mk_agent
(root,7632,2632,00:00:00/00:00,11283) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,984,00:00:00/00:00,11284) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362440,28280,00:01:51/113-09:25:32,18556) pvedaemon worker
(root,0,0,00:00:00/01:16:44,22388) [kworker/1:1-events]
(root,0,0,00:00:00/01:01:44,26630) [kworker/7:0-events]
(root,362584,20388,00:02:14/140-04:20:41,27309) pvedaemon worker
(root,18816764,10572928,6-01:42:26/140-15:53:07,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:31/140-15:53:07,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:25/140-15:53:07,28619) [vhost-28596]
(root,0,0,01:06:25/140-15:53:07,28626) [kvm-pit/28596]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-06 00:56

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42d4c591a8

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7100,00:16:54/164-19:07:15,1) /sbin/init
(root,0,0,00:00:09/164-19:07:15,2) [kthreadd]
(root,0,0,00:00:00/164-19:07:15,3) [rcu_gp]
(root,0,0,00:00:00/164-19:07:15,4) [rcu_par_gp]
(root,0,0,00:00:00/164-19:07:15,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/164-19:07:15,9) [mm_percpu_wq]
(root,0,0,00:04:32/164-19:07:15,10) [ksoftirqd/0]
(root,0,0,00:34:39/164-19:07:15,11) [rcu_sched]
(root,0,0,00:00:41/164-19:07:15,12) [migration/0]
(root,0,0,00:00:00/164-19:07:15,13) [idle_inject/0]
(root,0,0,00:00:00/164-19:07:15,14) [cpuhp/0]
(root,0,0,00:00:00/164-19:07:15,15) [cpuhp/1]
(root,0,0,00:00:00/164-19:07:15,16) [idle_inject/1]
(root,0,0,00:00:41/164-19:07:15,17) [migration/1]
(root,0,0,00:03:19/164-19:07:15,18) [ksoftirqd/1]
(root,0,0,00:00:00/164-19:07:15,20) [kworker/1:0H]
(root,0,0,00:00:00/164-19:07:15,21) [cpuhp/2]
(root,0,0,00:00:00/164-19:07:15,22) [idle_inject/2]
(root,0,0,00:00:40/164-19:07:15,23) [migration/2]
(root,0,0,00:02:07/164-19:07:15,24) [ksoftirqd/2]
(root,0,0,00:00:00/164-19:07:15,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/164-19:07:15,27) [cpuhp/3]
(root,0,0,00:00:00/164-19:07:15,28) [idle_inject/3]
(root,0,0,00:00:53/164-19:07:15,29) [migration/3]
(root,0,0,00:01:32/164-19:07:15,30) [ksoftirqd/3]
(root,0,0,00:00:00/164-19:07:15,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/164-19:07:15,33) [cpuhp/4]
(root,0,0,00:00:00/164-19:07:15,34) [idle_inject/4]
(root,0,0,00:00:39/164-19:07:15,35) [migration/4]
(root,0,0,00:01:12/164-19:07:15,36) [ksoftirqd/4]
(root,0,0,00:00:00/164-19:07:15,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/164-19:07:15,39) [cpuhp/5]
(root,0,0,00:00:00/164-19:07:15,40) [idle_inject/5]
(root,0,0,00:00:39/164-19:07:15,41) [migration/5]
(root,0,0,00:01:03/164-19:07:15,42) [ksoftirqd/5]
(root,0,0,00:00:00/164-19:07:15,44) [kworker/5:0H]
(root,0,0,00:00:00/164-19:07:15,45) [cpuhp/6]
(root,0,0,00:00:00/164-19:07:15,46) [idle_inject/6]
(root,0,0,00:00:37/164-19:07:15,47) [migration/6]
(root,0,0,00:10:00/164-19:07:15,48) [ksoftirqd/6]
(root,0,0,00:00:00/164-19:07:15,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/164-19:07:15,51) [cpuhp/7]
(root,0,0,00:00:00/164-19:07:15,52) [idle_inject/7]
(root,0,0,00:00:46/164-19:07:15,53) [migration/7]
(root,0,0,00:25:52/164-19:07:15,54) [ksoftirqd/7]
(root,0,0,00:00:00/164-19:07:15,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/164-19:07:15,57) [kdevtmpfs]
(root,0,0,00:00:00/164-19:07:15,58) [netns]
(root,0,0,00:00:00/164-19:07:15,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/164-19:07:15,60) [kauditd]
(root,0,0,00:00:05/164-19:07:15,62) [khungtaskd]
(root,0,0,00:00:00/164-19:07:15,63) [oom_reaper]
(root,0,0,00:00:00/164-19:07:15,64) [writeback]
(root,0,0,00:00:00/164-19:07:15,65) [kcompactd0]
(root,0,0,00:00:00/164-19:07:15,66) [ksmd]
(root,0,0,00:03:46/164-19:07:15,67) [khugepaged]
(root,0,0,00:00:00/164-19:07:15,113) [kintegrityd]
(root,0,0,00:00:00/164-19:07:15,114) [kblockd]
(root,0,0,00:00:00/164-19:07:15,115) [blkcg_punt_bio]
(root,0,0,00:00:00/164-19:07:15,116) [tpm_dev_wq]
(root,0,0,00:00:00/164-19:07:15,117) [ata_sff]
(root,0,0,00:00:00/164-19:07:15,118) [md]
(root,0,0,00:00:00/164-19:07:15,119) [edac-poller]
(root,0,0,00:00:00/164-19:07:15,120) [devfreq_wq]
(root,0,0,00:00:00/164-19:07:15,121) [watchdogd]
(root,0,0,00:25:03/164-19:07:15,128) [kswapd0]
(root,0,0,00:00:00/164-19:07:15,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/164-19:07:15,131) [kthrotld]
(root,0,0,00:00:00/164-19:07:15,132) [acpi_thermal_pm]
(root,0,0,00:00:00/164-19:07:15,133) [nvme-wq]
(root,0,0,00:00:00/164-19:07:15,134) [nvme-reset-wq]
(root,0,0,00:00:00/164-19:07:15,135) [nvme-delete-wq]
(root,0,0,00:00:00/164-19:07:15,137) [ipv6_addrconf]
(root,0,0,00:00:00/164-19:07:15,146) [kstrp]
(root,0,0,00:00:00/164-19:07:15,147) [kworker/u17:0]
(root,0,0,00:00:00/164-19:07:15,162) [charger_manager]
(root,0,0,00:00:00/164-19:07:14,210) [scsi_eh_0]
(root,0,0,00:00:00/164-19:07:14,211) [scsi_tmf_0]
(root,0,0,00:00:00/164-19:07:14,212) [scsi_eh_1]
(root,0,0,00:00:00/164-19:07:14,213) [scsi_tmf_1]
(root,0,0,00:00:00/164-19:07:14,214) [scsi_eh_2]
(root,0,0,00:00:00/164-19:07:14,215) [scsi_tmf_2]
(root,0,0,00:00:00/164-19:07:14,216) [scsi_eh_3]
(root,0,0,00:00:00/164-19:07:14,217) [scsi_tmf_3]
(root,0,0,00:00:00/164-19:07:14,218) [scsi_eh_4]
(root,0,0,00:00:00/164-19:07:14,219) [scsi_tmf_4]
(root,0,0,00:00:00/164-19:07:14,220) [scsi_eh_5]
(root,0,0,00:00:00/164-19:07:14,221) [scsi_tmf_5]
(root,0,0,00:03:39/164-19:07:14,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:41/164-19:07:14,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:25/164-19:07:14,237) [kworker/1:1H-kblockd]
(root,0,0,00:49:31/164-19:07:14,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:53/164-19:07:14,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:29/164-19:07:14,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:34/164-19:07:14,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:24/164-19:07:14,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/164-19:07:14,248) [md1_raid1]
(root,0,0,00:00:36/164-19:07:14,251) [md0_raid1]
(root,0,0,01:12:45/164-19:07:14,253) [md2_raid1]
(root,0,0,00:00:00/164-19:07:13,268) [raid5wq]
(root,0,0,00:07:36/164-19:07:10,291) [jbd2/md2-8]
(root,0,0,00:00:00/164-19:07:10,292) [ext4-rsv-conver]
(root,195156,94348,00:39:45/164-19:07:10,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/164-19:07:10,348) [rpciod]
(root,0,0,00:00:00/164-19:07:10,349) [xprtiod]
(root,0,0,00:00:00/164-19:07:10,353) [spl_system_task]
(root,0,0,00:00:00/164-19:07:10,354) [spl_delay_taskq]
(root,0,0,00:00:00/164-19:07:10,355) [spl_dynamic_tas]
(root,0,0,00:00:00/164-19:07:10,356) [spl_kmem_cache]
(root,0,0,00:00:00/164-19:07:09,361) [zvol]
(root,0,0,00:00:00/164-19:07:09,362) [arc_prune]
(root,0,0,00:03:48/164-19:07:09,363) [arc_evict]
(root,0,0,00:03:33/164-19:07:09,364) [arc_reap]
(root,0,0,00:00:00/164-19:07:09,366) [dbu_evict]
(root,0,0,00:03:26/164-19:07:09,367) [dbuf_evict]
(root,22980,3920,00:18:31/164-19:07:09,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/164-19:07:09,376) [z_vdev_file]
(root,0,0,00:01:54/164-19:07:09,377) [l2arc_feed]
(root,0,0,00:00:00/164-19:07:09,485) [cryptd]
(root,3860,2148,00:00:05/164-19:07:09,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/164-19:07:09,522) [jbd2/md1-8]
(root,0,0,00:00:00/164-19:07:09,523) [ext4-rsv-conver]
(_rpc,7776,4420,00:00:25/164-19:07:07,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3420,00:00:11/164-19:07:07,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:33:12/164-19:07:07,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:23/164-19:07:07,571) /usr/sbin/watchdog-mux
(root,12248,4732,00:00:03/164-19:07:07,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:13:23/164-19:07:07,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:16/164-19:07:07,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4616,00:01:29/164-19:07:07,578) /lib/systemd/systemd-logind
(root,223768,3804,00:12:26/164-19:07:07,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2728,00:00:00/164-19:07:07,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/164-19:07:07,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,362160,26228,00:00:47/52-12:03:00,585) pvedaemon worker
(root,4084,1676,00:00:05/164-19:07:07,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1384,00:00:00/164-19:07:06,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:41/164-19:07:06,768) bpfilter_umh
(root,13808,4924,00:11:52/164-19:07:06,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/164-19:07:06,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3260,00:36:06/164-19:07:06,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,729308,53936,02:51:36/164-19:07:06,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:45/164-19:07:06,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3608,00:00:32/164-19:07:06,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5772,00:00:06/164-19:07:06,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:16/164-19:07:05,1061) /usr/sbin/cron -f
(root,303168,37844,15:10:25/164-19:07:04,1068) pvestatd
(root,304364,30868,06:11:23/164-19:07:04,1069) pve-firewall
(root,353760,3968,00:01:57/164-19:07:04,1093) pvedaemon
(root,336416,10972,00:13:57/164-19:07:04,1101) pve-ha-crm
(www-data,355164,144792,00:04:15/164-19:07:03,1102) pveproxy
(www-data,68908,57800,00:02:42/164-19:07:03,1109) spiceproxy
(root,335964,31776,00:22:56/164-19:07:03,1111) pve-ha-lrm
(root,6023096,3519916,8-12:42:29/164-19:07:02,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:12/164-19:07:02,1129) [kvm-nx-lpage-re]
(root,0,0,12:27:38/164-19:07:02,1148) [vhost-1125]
(root,0,0,10:31:55/164-19:07:01,1167) [vhost-1125]
(root,0,0,01:07:50/164-19:07:01,1172) [kvm-pit/1125]
(root,14042804,8588028,74-10:47:32/164-19:06:58,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:53/164-19:06:58,1188) [kvm-nx-lpage-re]
(root,0,0,00:22:21/164-19:06:58,1207) [vhost-1184]
(root,0,0,01:17:05/164-19:06:58,1212) [kvm-pit/1184]
(root,0,0,00:00:00/164-19:06:55,1214) [dio/md2]
(root,3674644,2323612,40-04:06:26/164-19:06:54,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:46/164-19:06:54,1267) [kvm-nx-lpage-re]
(root,0,0,05:17:23/164-19:06:54,1286) [vhost-1263]
(root,0,0,00:00:00/164-19:06:54,1289) [kvm-pit/1263]
(root,0,0,00:00:00/164-19:06:53,1295) [ib-comp-wq]
(root,0,0,00:00:00/164-19:06:53,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/164-19:06:53,1297) [ib_mcast]
(root,0,0,00:00:00/164-19:06:53,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/164-19:06:53,1299) [rdma_cm]
(root,0,0,00:00:00/164-19:06:53,1300) [cifsiod]
(root,0,0,00:00:00/164-19:06:53,1301) [smb3decryptd]
(root,0,0,00:00:00/164-19:06:53,1302) [cifsfileinfoput]
(root,0,0,00:00:00/164-19:06:53,1303) [cifsoplockd]
(root,0,0,00:14:14/164-19:06:53,1305) [cifsd]
(root,0,0,00:05:21/164-19:06:53,1340) [cifsd]
(root,6069040,4256984,10-20:55:10/164-19:06:50,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:55/164-19:06:50,1358) [kvm-nx-lpage-re]
(root,0,0,02:06:56/164-19:06:50,1377) [vhost-1354]
(root,0,0,00:00:00/164-19:06:50,1382) [kvm-pit/1354]
(root,21091388,16931844,12-16:04:16/164-19:06:46,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:19/164-19:06:46,1398) [kvm-nx-lpage-re]
(root,0,0,01:30:39/164-19:06:45,1417) [vhost-1394]
(root,0,0,00:00:00/164-19:06:45,1422) [kvm-pit/1394]
(root,19372608,5669388,9-05:30:35/164-19:06:42,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:33/164-19:06:42,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:53/164-19:06:41,1487) [vhost-1464]
(root,0,0,00:00:00/164-19:06:41,1492) [kvm-pit/1464]
(root,6089176,4304920,35-15:06:03/164-19:06:38,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:05/164-19:06:38,1511) [kvm-nx-lpage-re]
(root,0,0,01:41:27/164-19:06:37,1531) [vhost-1507]
(root,0,0,00:00:00/164-19:06:37,1534) [kvm-pit/1507]
(root,0,0,00:00:00/01:29:44,2009) [kworker/1:1-events]
(root,0,0,00:00:00/01:00:44,10098) [kworker/3:2-events]
(root,0,0,00:00:00/42:44,15124) [kworker/2:3-events]
(root,0,0,00:00:00/33:44,17675) [kworker/4:0-events]
(root,0,0,00:00:00/32:44,17976) [kworker/3:1-md]
(root,0,0,00:00:00/31:44,18276) [kworker/2:0-md]
(root,362440,28284,00:01:49/111-09:13:32,18556) pvedaemon worker
(root,0,0,00:00:00/27:44,19512) [kworker/7:2-events]
(postfix,43844,7708,00:00:00/26:43,19818) pickup -l -t unix -u -c
(root,0,0,00:00:00/25:56,20078) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/24:44,20413) [kworker/0:2-events]
(root,0,0,00:00:00/22:44,21005) [kworker/5:2-events]
(root,0,0,00:00:00/19:44,21901) [kworker/4:1-cgroup_destroy]
(root,0,0,00:00:00/17:44,22505) [kworker/6:1-cgroup_destroy]
(root,0,0,00:00:00/13:44,23726) [kworker/5:3-cgroup_destroy]
(root,0,0,00:00:00/12:44,24033) [kworker/7:0-events]
(root,0,0,00:00:00/11:44,24331) [kworker/6:0-events]
(root,0,0,00:00:00/08:58,25146) [kworker/u16:0-flush-9:2]
(root,0,0,00:00:00/07:44,25451) [kworker/1:0-cgroup_destroy]
(root,0,0,00:00:00/06:44,25724) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/05:44,25999) [kworker/6:2-md]
(root,0,0,00:00:00/04:44,26269) [kworker/6:3-cgroup_destroy]
(root,0,0,00:00:00/03:44,26542) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/03:44,26543) [kworker/3:3-cgroup_destroy]
(root,362584,20392,00:02:12/138-04:08:41,27309) pvedaemon worker
(root,0,0,00:00:00/00:46,27366) [kworker/u16:2]
(root,0,0,00:00:00/00:44,27375) [kworker/5:0-cgroup_destroy]
(root,0,0,00:00:00/00:44,27376) [kworker/5:1-events]
(root,7188,3212,00:00:00/00:00,27679) /bin/bash /usr/bin/check_mk_agent
(root,41720,36120,00:00:00/00:00,27760) /usr/bin/perl /usr/bin/pvecm status
(root,70592,16776,00:00:00/00:00,27763) /usr/bin/smbclient //u177131.your-backup.de/backup -d 0 -m smb3 -U u177131 -A /etc/pve/priv/Backup01.cred -c echo 1 0
(root,7188,3168,00:00:00/00:00,27764) /bin/bash /usr/bin/check_mk_agent
(root,7632,2724,00:00:00/00:00,27791) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,932,00:00:00/00:00,27792) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,18765008,10559464,5-23:30:21/138-15:41:07,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:29/138-15:41:07,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:24/138-15:41:07,28619) [vhost-28596]
(root,0,0,01:05:32/138-15:41:07,28626) [kvm-pit/28596]
(www-data,76944,54876,00:00:00/01:44:43,29607) spiceproxy worker
(root,86168,2216,00:00:00/01:44:43,29608) /usr/sbin/pvefw-logger
(www-data,355608,130420,00:00:00/01:44:43,29617) pveproxy worker
(www-data,355608,130420,00:00:00/01:44:43,29618) pveproxy worker
(www-data,355608,130420,00:00:00/01:44:43,29619) pveproxy worker

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-04 00:44

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42d3fc0bc2

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7036,00:16:41/162-19:38:10,1) /sbin/init
(root,0,0,00:00:09/162-19:38:10,2) [kthreadd]
(root,0,0,00:00:00/162-19:38:10,3) [rcu_gp]
(root,0,0,00:00:00/162-19:38:10,4) [rcu_par_gp]
(root,0,0,00:00:00/162-19:38:10,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/162-19:38:10,9) [mm_percpu_wq]
(root,0,0,00:04:29/162-19:38:10,10) [ksoftirqd/0]
(root,0,0,00:34:15/162-19:38:10,11) [rcu_sched]
(root,0,0,00:00:41/162-19:38:10,12) [migration/0]
(root,0,0,00:00:00/162-19:38:10,13) [idle_inject/0]
(root,0,0,00:00:00/162-19:38:10,14) [cpuhp/0]
(root,0,0,00:00:00/162-19:38:10,15) [cpuhp/1]
(root,0,0,00:00:00/162-19:38:10,16) [idle_inject/1]
(root,0,0,00:00:41/162-19:38:10,17) [migration/1]
(root,0,0,00:03:18/162-19:38:10,18) [ksoftirqd/1]
(root,0,0,00:00:00/162-19:38:10,20) [kworker/1:0H]
(root,0,0,00:00:00/162-19:38:10,21) [cpuhp/2]
(root,0,0,00:00:00/162-19:38:10,22) [idle_inject/2]
(root,0,0,00:00:39/162-19:38:10,23) [migration/2]
(root,0,0,00:02:06/162-19:38:10,24) [ksoftirqd/2]
(root,0,0,00:00:00/162-19:38:10,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/162-19:38:10,27) [cpuhp/3]
(root,0,0,00:00:00/162-19:38:10,28) [idle_inject/3]
(root,0,0,00:00:52/162-19:38:10,29) [migration/3]
(root,0,0,00:01:32/162-19:38:10,30) [ksoftirqd/3]
(root,0,0,00:00:00/162-19:38:10,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/162-19:38:10,33) [cpuhp/4]
(root,0,0,00:00:00/162-19:38:10,34) [idle_inject/4]
(root,0,0,00:00:39/162-19:38:10,35) [migration/4]
(root,0,0,00:01:11/162-19:38:10,36) [ksoftirqd/4]
(root,0,0,00:00:00/162-19:38:10,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/162-19:38:10,39) [cpuhp/5]
(root,0,0,00:00:00/162-19:38:10,40) [idle_inject/5]
(root,0,0,00:00:39/162-19:38:10,41) [migration/5]
(root,0,0,00:01:03/162-19:38:10,42) [ksoftirqd/5]
(root,0,0,00:00:00/162-19:38:10,44) [kworker/5:0H]
(root,0,0,00:00:00/162-19:38:10,45) [cpuhp/6]
(root,0,0,00:00:00/162-19:38:10,46) [idle_inject/6]
(root,0,0,00:00:37/162-19:38:10,47) [migration/6]
(root,0,0,00:09:53/162-19:38:10,48) [ksoftirqd/6]
(root,0,0,00:00:00/162-19:38:10,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/162-19:38:10,51) [cpuhp/7]
(root,0,0,00:00:00/162-19:38:10,52) [idle_inject/7]
(root,0,0,00:00:46/162-19:38:10,53) [migration/7]
(root,0,0,00:25:33/162-19:38:10,54) [ksoftirqd/7]
(root,0,0,00:00:00/162-19:38:10,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/162-19:38:10,57) [kdevtmpfs]
(root,0,0,00:00:00/162-19:38:10,58) [netns]
(root,0,0,00:00:00/162-19:38:10,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/162-19:38:10,60) [kauditd]
(root,0,0,00:00:05/162-19:38:10,62) [khungtaskd]
(root,0,0,00:00:00/162-19:38:10,63) [oom_reaper]
(root,0,0,00:00:00/162-19:38:10,64) [writeback]
(root,0,0,00:00:00/162-19:38:10,65) [kcompactd0]
(root,0,0,00:00:00/162-19:38:10,66) [ksmd]
(root,0,0,00:03:46/162-19:38:10,67) [khugepaged]
(root,0,0,00:00:00/162-19:38:10,113) [kintegrityd]
(root,0,0,00:00:00/162-19:38:10,114) [kblockd]
(root,0,0,00:00:00/162-19:38:10,115) [blkcg_punt_bio]
(root,0,0,00:00:00/162-19:38:10,116) [tpm_dev_wq]
(root,0,0,00:00:00/162-19:38:10,117) [ata_sff]
(root,0,0,00:00:00/162-19:38:10,118) [md]
(root,0,0,00:00:00/162-19:38:10,119) [edac-poller]
(root,0,0,00:00:00/162-19:38:10,120) [devfreq_wq]
(root,0,0,00:00:00/162-19:38:10,121) [watchdogd]
(root,0,0,00:24:46/162-19:38:10,128) [kswapd0]
(root,0,0,00:00:00/162-19:38:10,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/162-19:38:10,131) [kthrotld]
(root,0,0,00:00:00/162-19:38:10,132) [acpi_thermal_pm]
(root,0,0,00:00:00/162-19:38:10,133) [nvme-wq]
(root,0,0,00:00:00/162-19:38:10,134) [nvme-reset-wq]
(root,0,0,00:00:00/162-19:38:10,135) [nvme-delete-wq]
(root,0,0,00:00:00/162-19:38:10,137) [ipv6_addrconf]
(root,0,0,00:00:00/162-19:38:10,146) [kstrp]
(root,0,0,00:00:00/162-19:38:10,147) [kworker/u17:0]
(root,0,0,00:00:00/162-19:38:10,162) [charger_manager]
(root,0,0,00:00:00/162-19:38:09,210) [scsi_eh_0]
(root,0,0,00:00:00/162-19:38:09,211) [scsi_tmf_0]
(root,0,0,00:00:00/162-19:38:09,212) [scsi_eh_1]
(root,0,0,00:00:00/162-19:38:09,213) [scsi_tmf_1]
(root,0,0,00:00:00/162-19:38:09,214) [scsi_eh_2]
(root,0,0,00:00:00/162-19:38:09,215) [scsi_tmf_2]
(root,0,0,00:00:00/162-19:38:09,216) [scsi_eh_3]
(root,0,0,00:00:00/162-19:38:09,217) [scsi_tmf_3]
(root,0,0,00:00:00/162-19:38:09,218) [scsi_eh_4]
(root,0,0,00:00:00/162-19:38:09,219) [scsi_tmf_4]
(root,0,0,00:00:00/162-19:38:09,220) [scsi_eh_5]
(root,0,0,00:00:00/162-19:38:09,221) [scsi_tmf_5]
(root,0,0,00:03:37/162-19:38:09,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:39/162-19:38:09,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:22/162-19:38:09,237) [kworker/1:1H-kblockd]
(root,0,0,00:48:58/162-19:38:09,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:50/162-19:38:09,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:27/162-19:38:09,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:31/162-19:38:09,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:22/162-19:38:09,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/162-19:38:09,248) [md1_raid1]
(root,0,0,00:00:36/162-19:38:09,251) [md0_raid1]
(root,0,0,01:12:15/162-19:38:09,253) [md2_raid1]
(root,0,0,00:00:00/162-19:38:08,268) [raid5wq]
(root,0,0,00:07:31/162-19:38:05,291) [jbd2/md2-8]
(root,0,0,00:00:00/162-19:38:05,292) [ext4-rsv-conver]
(root,105264,23528,00:39:15/162-19:38:05,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/162-19:38:05,348) [rpciod]
(root,0,0,00:00:00/162-19:38:05,349) [xprtiod]
(root,0,0,00:00:00/162-19:38:05,353) [spl_system_task]
(root,0,0,00:00:00/162-19:38:05,354) [spl_delay_taskq]
(root,0,0,00:00:00/162-19:38:05,355) [spl_dynamic_tas]
(root,0,0,00:00:00/162-19:38:05,356) [spl_kmem_cache]
(root,0,0,00:00:00/162-19:38:04,361) [zvol]
(root,0,0,00:00:00/162-19:38:04,362) [arc_prune]
(root,0,0,00:03:46/162-19:38:04,363) [arc_evict]
(root,0,0,00:03:30/162-19:38:04,364) [arc_reap]
(root,0,0,00:00:00/162-19:38:04,366) [dbu_evict]
(root,0,0,00:03:24/162-19:38:04,367) [dbuf_evict]
(root,22980,3920,00:18:17/162-19:38:04,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/162-19:38:04,376) [z_vdev_file]
(root,0,0,00:01:52/162-19:38:04,377) [l2arc_feed]
(root,9796,2372,00:00:00/15:38,483) /usr/sbin/CRON -f
(root,2380,752,00:00:00/15:38,484) /bin/sh -c vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,0,0,00:00:00/162-19:38:04,485) [cryptd]
(root,330264,115708,00:00:00/15:38,486) /usr/bin/perl -T /usr/bin/vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,338628,102504,00:00:02/15:38,488) task UPID:node01:000001E8:53D7DB3E:674D0692:vzdump::root@pam:
(root,0,0,00:00:00/15:31,508) [kworker/6:8-events]
(root,3860,2148,00:00:05/162-19:38:04,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/162-19:38:04,522) [jbd2/md1-8]
(root,0,0,00:00:00/162-19:38:04,523) [ext4-rsv-conver]
(_rpc,7776,4420,00:00:25/162-19:38:02,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3420,00:00:11/162-19:38:02,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:32:52/162-19:38:02,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:20/162-19:38:02,571) /usr/sbin/watchdog-mux
(root,12248,4732,00:00:03/162-19:38:02,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:13:12/162-19:38:02,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:16/162-19:38:02,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4616,00:01:28/162-19:38:02,578) /lib/systemd/systemd-logind
(root,223768,3804,00:12:17/162-19:38:02,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2728,00:00:00/162-19:38:02,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/162-19:38:02,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,362160,26280,00:00:46/50-12:33:55,585) pvedaemon worker
(root,4084,1676,00:00:05/162-19:38:02,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1384,00:00:00/162-19:38:01,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:37/162-19:38:01,768) bpfilter_umh
(root,13808,4924,00:11:44/162-19:38:01,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/162-19:38:01,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3260,00:35:40/162-19:38:01,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,747920,63264,02:49:37/162-19:38:01,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:45/162-19:38:01,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3604,00:00:32/162-19:38:01,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5816,00:00:06/162-19:38:01,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:16/162-19:38:00,1061) /usr/sbin/cron -f
(root,303168,37836,14:59:07/162-19:37:59,1068) pvestatd
(root,304364,30868,06:06:46/162-19:37:59,1069) pve-firewall
(root,353760,3968,00:01:56/162-19:37:59,1093) pvedaemon
(root,0,0,00:00:00/13:39,1097) [kworker/1:1-events]
(root,336416,10976,00:13:47/162-19:37:59,1101) pve-ha-crm
(www-data,355128,142616,00:04:12/162-19:37:58,1102) pveproxy
(www-data,68904,57388,00:02:40/162-19:37:58,1109) spiceproxy
(root,335964,31780,00:22:39/162-19:37:58,1111) pve-ha-lrm
(root,6014512,3512024,8-10:14:24/162-19:37:57,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:12/162-19:37:57,1129) [kvm-nx-lpage-re]
(root,0,0,12:18:49/162-19:37:57,1148) [vhost-1125]
(root,0,0,10:24:35/162-19:37:56,1167) [vhost-1125]
(root,0,0,01:07:06/162-19:37:56,1172) [kvm-pit/1125]
(root,14038508,8588664,72-08:30:38/162-19:37:53,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:49/162-19:37:53,1188) [kvm-nx-lpage-re]
(root,0,0,00:22:15/162-19:37:53,1207) [vhost-1184]
(root,0,0,01:16:12/162-19:37:53,1212) [kvm-pit/1184]
(root,0,0,00:00:00/162-19:37:50,1214) [dio/md2]
(root,3665484,2314896,39-16:08:24/162-19:37:49,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:45/162-19:37:49,1267) [kvm-nx-lpage-re]
(root,0,0,05:14:19/162-19:37:49,1286) [vhost-1263]
(root,0,0,00:00:00/162-19:37:49,1289) [kvm-pit/1263]
(root,0,0,00:00:00/162-19:37:48,1295) [ib-comp-wq]
(root,0,0,00:00:00/162-19:37:48,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/162-19:37:48,1297) [ib_mcast]
(root,0,0,00:00:00/162-19:37:48,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/162-19:37:48,1299) [rdma_cm]
(root,0,0,00:00:00/162-19:37:48,1300) [cifsiod]
(root,0,0,00:00:00/162-19:37:48,1301) [smb3decryptd]
(root,0,0,00:00:00/162-19:37:48,1302) [cifsfileinfoput]
(root,0,0,00:00:00/162-19:37:48,1303) [cifsoplockd]
(root,0,0,00:14:05/162-19:37:48,1305) [cifsd]
(root,0,0,00:05:18/162-19:37:48,1340) [cifsd]
(root,6064744,4252968,10-17:46:41/162-19:37:45,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:54/162-19:37:45,1358) [kvm-nx-lpage-re]
(root,0,0,02:05:30/162-19:37:45,1377) [vhost-1354]
(root,0,0,00:00:00/162-19:37:45,1382) [kvm-pit/1354]
(root,21082660,16924056,12-12:13:58/162-19:37:41,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:16/162-19:37:41,1398) [kvm-nx-lpage-re]
(root,0,0,01:29:02/162-19:37:40,1417) [vhost-1394]
(root,0,0,00:00:00/162-19:37:40,1422) [kvm-pit/1394]
(root,0,0,00:00:00/12:39,1449) [kworker/7:1-rcu_gp]
(root,0,0,00:00:00/12:39,1450) [kworker/7:3-kvm-irqfd-cleanup]
(root,19364016,5658880,9-02:48:51/162-19:37:37,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:32/162-19:37:37,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:52/162-19:37:36,1487) [vhost-1464]
(root,0,0,00:00:00/162-19:37:36,1492) [kvm-pit/1464]
(root,6080592,4296732,35-07:42:39/162-19:37:33,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:03/162-19:37:33,1511) [kvm-nx-lpage-re]
(root,0,0,01:39:55/162-19:37:32,1531) [vhost-1507]
(root,0,0,00:00:00/162-19:37:32,1534) [kvm-pit/1507]
(root,0,0,00:00:17/12:20,1618) [kworker/u16:3-events_power_efficient]
(root,0,0,00:00:00/11:39,1755) [kworker/2:1-events]
(root,0,0,00:00:00/10:38,2056) [kworker/5:2-mm_percpu_wq]
(root,0,0,00:00:00/08:20,2739) [kworker/6:0-cgroup_destroy]
(root,0,0,00:00:00/07:39,2896) [kworker/0:1]
(root,0,0,00:00:00/06:39,3174) [kworker/3:1]
(root,0,0,00:00:00/05:39,3436) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/05:39,3437) [kworker/4:3-cgroup_destroy]
(root,0,0,00:01:24/05:30,3460) [kworker/u16:0-flush-cifs-1]
(root,0,0,00:00:00/04:39,3755) [kworker/2:2-md]
(root,0,0,00:00:00/04:39,3756) [kworker/2:3]
(root,0,0,00:00:00/03:39,4055) [kworker/1:2-events]
(root,0,0,00:00:00/03:25,4087) [kworker/7:0-mm_percpu_wq]
(root,0,0,00:00:00/02:39,4332) [kworker/6:1-dio/md2]
(root,0,0,00:00:00/00:39,4883) [kworker/6:2-events]
(root,0,0,00:00:00/00:25,4933) [kworker/u16:1]
(root,14508,7852,00:00:00/00:03,5079) sshd: root [priv]
(sshd,13808,4940,00:00:00/00:03,5080) sshd: root [net]
(root,70708,17316,00:00:00/00:01,5145) /usr/bin/smbclient //u237179.your-storagebox.de/backup -d 0 -m smb3 -U u237179 -A /etc/pve/priv/storage/Backup03.pw -c echo 1 0
(root,7188,3248,00:00:00/00:01,5173) /bin/bash /usr/bin/check_mk_agent
(root,7632,2688,00:00:00/00:00,5199) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,1000,00:00:00/00:00,5200) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(postfix,43844,7372,00:00:00/01:15:14,14635) pickup -l -t unix -u -c
(root,362440,28264,00:01:47/109-09:44:27,18556) pvedaemon worker
(root,0,0,00:00:00/57:39,19599) [kworker/1:0-cgroup_destroy]
(root,362584,20396,00:02:10/136-04:39:36,27309) pvedaemon worker
(root,18805776,10551640,5-21:21:04/136-16:12:02,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:27/136-16:12:02,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:23/136-16:12:02,28619) [vhost-28596]
(root,0,0,01:04:39/136-16:12:02,28626) [kvm-pit/28596]
(root,0,0,00:00:51/27:14,29460) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/26:39,29572) [kworker/2:0-cgroup_destroy]
(root,86168,2020,00:00:00/02:15:37,30067) /usr/sbin/pvefw-logger
(www-data,76792,54728,00:00:00/02:15:37,30070) spiceproxy worker
(www-data,367688,137068,00:00:00/02:15:37,30077) pveproxy worker
(www-data,355872,131236,00:00:00/02:15:37,30078) pveproxy worker
(www-data,355872,131396,00:00:00/02:15:37,30079) pveproxy worker
(root,0,0,00:00:00/22:52,30879) [kworker/0:2-events]
(root,0,0,00:00:00/19:39,31799) [kworker/4:2-events]
(root,0,0,00:00:00/17:39,32356) [kworker/5:0-cgroup_destroy]
(root,0,0,00:00:00/16:39,32637) [kworker/3:0-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-02 01:15

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c421c2faa65

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7056,00:16:27/160-19:04:28,1) /sbin/init
(root,0,0,00:00:09/160-19:04:28,2) [kthreadd]
(root,0,0,00:00:00/160-19:04:28,3) [rcu_gp]
(root,0,0,00:00:00/160-19:04:28,4) [rcu_par_gp]
(root,0,0,00:00:00/160-19:04:28,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/160-19:04:28,9) [mm_percpu_wq]
(root,0,0,00:04:27/160-19:04:28,10) [ksoftirqd/0]
(root,0,0,00:33:46/160-19:04:28,11) [rcu_sched]
(root,0,0,00:00:40/160-19:04:28,12) [migration/0]
(root,0,0,00:00:00/160-19:04:28,13) [idle_inject/0]
(root,0,0,00:00:00/160-19:04:28,14) [cpuhp/0]
(root,0,0,00:00:00/160-19:04:28,15) [cpuhp/1]
(root,0,0,00:00:00/160-19:04:28,16) [idle_inject/1]
(root,0,0,00:00:40/160-19:04:28,17) [migration/1]
(root,0,0,00:03:16/160-19:04:28,18) [ksoftirqd/1]
(root,0,0,00:00:00/160-19:04:28,20) [kworker/1:0H]
(root,0,0,00:00:00/160-19:04:28,21) [cpuhp/2]
(root,0,0,00:00:00/160-19:04:28,22) [idle_inject/2]
(root,0,0,00:00:39/160-19:04:28,23) [migration/2]
(root,0,0,00:02:04/160-19:04:28,24) [ksoftirqd/2]
(root,0,0,00:00:00/160-19:04:28,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/160-19:04:28,27) [cpuhp/3]
(root,0,0,00:00:00/160-19:04:28,28) [idle_inject/3]
(root,0,0,00:00:52/160-19:04:28,29) [migration/3]
(root,0,0,00:01:31/160-19:04:28,30) [ksoftirqd/3]
(root,0,0,00:00:00/160-19:04:28,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/160-19:04:28,33) [cpuhp/4]
(root,0,0,00:00:00/160-19:04:28,34) [idle_inject/4]
(root,0,0,00:00:38/160-19:04:28,35) [migration/4]
(root,0,0,00:01:10/160-19:04:28,36) [ksoftirqd/4]
(root,0,0,00:00:00/160-19:04:28,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/160-19:04:28,39) [cpuhp/5]
(root,0,0,00:00:00/160-19:04:28,40) [idle_inject/5]
(root,0,0,00:00:38/160-19:04:28,41) [migration/5]
(root,0,0,00:01:02/160-19:04:28,42) [ksoftirqd/5]
(root,0,0,00:00:00/160-19:04:28,44) [kworker/5:0H]
(root,0,0,00:00:00/160-19:04:28,45) [cpuhp/6]
(root,0,0,00:00:00/160-19:04:28,46) [idle_inject/6]
(root,0,0,00:00:36/160-19:04:28,47) [migration/6]
(root,0,0,00:09:45/160-19:04:28,48) [ksoftirqd/6]
(root,0,0,00:00:00/160-19:04:28,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/160-19:04:28,51) [cpuhp/7]
(root,0,0,00:00:00/160-19:04:28,52) [idle_inject/7]
(root,0,0,00:00:45/160-19:04:28,53) [migration/7]
(root,0,0,00:25:10/160-19:04:28,54) [ksoftirqd/7]
(root,0,0,00:00:00/160-19:04:28,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/160-19:04:28,57) [kdevtmpfs]
(root,0,0,00:00:00/160-19:04:28,58) [netns]
(root,0,0,00:00:00/160-19:04:28,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/160-19:04:28,60) [kauditd]
(root,0,0,00:00:05/160-19:04:28,62) [khungtaskd]
(root,0,0,00:00:00/160-19:04:28,63) [oom_reaper]
(root,0,0,00:00:00/160-19:04:28,64) [writeback]
(root,0,0,00:00:00/160-19:04:28,65) [kcompactd0]
(root,0,0,00:00:00/160-19:04:28,66) [ksmd]
(root,0,0,00:03:45/160-19:04:28,67) [khugepaged]
(root,0,0,00:00:00/160-19:04:28,113) [kintegrityd]
(root,0,0,00:00:00/160-19:04:28,114) [kblockd]
(root,0,0,00:00:00/160-19:04:28,115) [blkcg_punt_bio]
(root,0,0,00:00:00/160-19:04:28,116) [tpm_dev_wq]
(root,0,0,00:00:00/160-19:04:28,117) [ata_sff]
(root,0,0,00:00:00/160-19:04:28,118) [md]
(root,0,0,00:00:00/160-19:04:28,119) [edac-poller]
(root,0,0,00:00:00/160-19:04:28,120) [devfreq_wq]
(root,0,0,00:00:00/160-19:04:28,121) [watchdogd]
(root,0,0,00:24:21/160-19:04:28,128) [kswapd0]
(root,0,0,00:00:00/160-19:04:28,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/160-19:04:28,131) [kthrotld]
(root,0,0,00:00:00/160-19:04:28,132) [acpi_thermal_pm]
(root,0,0,00:00:00/160-19:04:28,133) [nvme-wq]
(root,0,0,00:00:00/160-19:04:28,134) [nvme-reset-wq]
(root,0,0,00:00:00/160-19:04:28,135) [nvme-delete-wq]
(root,0,0,00:00:00/160-19:04:28,137) [ipv6_addrconf]
(root,0,0,00:00:00/160-19:04:28,146) [kstrp]
(root,0,0,00:00:00/160-19:04:28,147) [kworker/u17:0]
(root,0,0,00:00:00/160-19:04:28,162) [charger_manager]
(root,0,0,00:00:00/160-19:04:27,210) [scsi_eh_0]
(root,0,0,00:00:00/160-19:04:27,211) [scsi_tmf_0]
(root,0,0,00:00:00/160-19:04:27,212) [scsi_eh_1]
(root,0,0,00:00:00/160-19:04:27,213) [scsi_tmf_1]
(root,0,0,00:00:00/160-19:04:27,214) [scsi_eh_2]
(root,0,0,00:00:00/160-19:04:27,215) [scsi_tmf_2]
(root,0,0,00:00:00/160-19:04:27,216) [scsi_eh_3]
(root,0,0,00:00:00/160-19:04:27,217) [scsi_tmf_3]
(root,0,0,00:00:00/160-19:04:27,218) [scsi_eh_4]
(root,0,0,00:00:00/160-19:04:27,219) [scsi_tmf_4]
(root,0,0,00:00:00/160-19:04:27,220) [scsi_eh_5]
(root,0,0,00:00:00/160-19:04:27,221) [scsi_tmf_5]
(root,0,0,00:03:34/160-19:04:27,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:36/160-19:04:27,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:19/160-19:04:27,237) [kworker/1:1H-kblockd]
(root,0,0,00:48:23/160-19:04:27,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:47/160-19:04:27,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:25/160-19:04:27,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:29/160-19:04:27,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:20/160-19:04:27,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/160-19:04:27,248) [md1_raid1]
(root,0,0,00:00:36/160-19:04:27,251) [md0_raid1]
(root,0,0,01:11:45/160-19:04:27,253) [md2_raid1]
(root,0,0,00:00:00/160-19:04:26,268) [raid5wq]
(root,0,0,00:07:26/160-19:04:23,291) [jbd2/md2-8]
(root,0,0,00:00:00/160-19:04:23,292) [ext4-rsv-conver]
(root,264928,145872,00:38:28/160-19:04:23,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/160-19:04:23,348) [rpciod]
(root,0,0,00:00:00/160-19:04:23,349) [xprtiod]
(root,0,0,00:00:00/160-19:04:23,353) [spl_system_task]
(root,0,0,00:00:00/160-19:04:23,354) [spl_delay_taskq]
(root,0,0,00:00:00/160-19:04:23,355) [spl_dynamic_tas]
(root,0,0,00:00:00/160-19:04:23,356) [spl_kmem_cache]
(root,0,0,00:00:00/160-19:04:22,361) [zvol]
(root,0,0,00:00:00/160-19:04:22,362) [arc_prune]
(root,0,0,00:03:43/160-19:04:22,363) [arc_evict]
(root,0,0,00:03:28/160-19:04:22,364) [arc_reap]
(root,0,0,00:00:00/160-19:04:22,366) [dbu_evict]
(root,0,0,00:03:21/160-19:04:22,367) [dbuf_evict]
(root,22980,3920,00:18:03/160-19:04:22,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/160-19:04:22,376) [z_vdev_file]
(root,0,0,00:01:51/160-19:04:22,377) [l2arc_feed]
(root,0,0,00:00:00/160-19:04:22,485) [cryptd]
(root,3860,2148,00:00:05/160-19:04:22,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/160-19:04:22,522) [jbd2/md1-8]
(root,0,0,00:00:00/160-19:04:22,523) [ext4-rsv-conver]
(_rpc,7776,4420,00:00:24/160-19:04:20,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3420,00:00:11/160-19:04:20,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:32:29/160-19:04:20,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:16/160-19:04:20,571) /usr/sbin/watchdog-mux
(root,12248,4732,00:00:03/160-19:04:20,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:13:00/160-19:04:20,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:16/160-19:04:20,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4616,00:01:27/160-19:04:20,578) /lib/systemd/systemd-logind
(root,223768,3812,00:12:03/160-19:04:20,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2728,00:00:00/160-19:04:20,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/160-19:04:20,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,362160,26480,00:00:44/48-12:00:13,585) pvedaemon worker
(root,4084,1676,00:00:05/160-19:04:20,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1384,00:00:00/160-19:04:19,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:33/160-19:04:19,768) bpfilter_umh
(root,13808,4924,00:11:29/160-19:04:19,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/160-19:04:19,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3268,00:35:12/160-19:04:19,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,729308,53932,02:47:36/160-19:04:19,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:44/160-19:04:19,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3612,00:00:31/160-19:04:19,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,6016,00:00:06/160-19:04:19,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:16/160-19:04:18,1061) /usr/sbin/cron -f
(root,303168,37844,14:47:43/160-19:04:17,1068) pvestatd
(root,304364,30868,06:01:54/160-19:04:17,1069) pve-firewall
(root,353760,3968,00:01:54/160-19:04:17,1093) pvedaemon
(root,336416,10976,00:13:37/160-19:04:17,1101) pve-ha-crm
(www-data,355276,144696,00:04:09/160-19:04:16,1102) pveproxy
(www-data,68836,57988,00:02:38/160-19:04:16,1109) spiceproxy
(root,335964,31780,00:22:23/160-19:04:16,1111) pve-ha-lrm
(root,6005924,3509336,8-07:43:59/160-19:04:15,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:12/160-19:04:15,1129) [kvm-nx-lpage-re]
(root,0,0,12:10:02/160-19:04:15,1148) [vhost-1125]
(root,0,0,10:17:14/160-19:04:14,1167) [vhost-1125]
(root,0,0,01:06:21/160-19:04:14,1172) [kvm-pit/1125]
(root,14025620,8575448,70-04:57:03/160-19:04:11,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:44/160-19:04:11,1188) [kvm-nx-lpage-re]
(root,0,0,00:22:08/160-19:04:11,1207) [vhost-1184]
(root,0,0,01:15:18/160-19:04:11,1212) [kvm-pit/1184]
(root,0,0,00:00:00/160-19:04:08,1214) [dio/md2]
(root,3656908,2313348,39-03:48:56/160-19:04:07,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:44/160-19:04:07,1267) [kvm-nx-lpage-re]
(root,0,0,05:10:58/160-19:04:07,1286) [vhost-1263]
(root,0,0,00:00:00/160-19:04:07,1289) [kvm-pit/1263]
(root,0,0,00:00:00/160-19:04:06,1295) [ib-comp-wq]
(root,0,0,00:00:00/160-19:04:06,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/160-19:04:06,1297) [ib_mcast]
(root,0,0,00:00:00/160-19:04:06,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/160-19:04:06,1299) [rdma_cm]
(root,0,0,00:00:00/160-19:04:06,1300) [cifsiod]
(root,0,0,00:00:00/160-19:04:06,1301) [smb3decryptd]
(root,0,0,00:00:00/160-19:04:06,1302) [cifsfileinfoput]
(root,0,0,00:00:00/160-19:04:06,1303) [cifsoplockd]
(root,0,0,00:13:54/160-19:04:06,1305) [cifsd]
(root,0,0,00:05:13/160-19:04:06,1340) [cifsd]
(root,6051868,4206256,10-14:32:17/160-19:04:03,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:53/160-19:04:03,1358) [kvm-nx-lpage-re]
(root,0,0,02:04:04/160-19:04:03,1377) [vhost-1354]
(root,0,0,00:00:00/160-19:04:03,1382) [kvm-pit/1354]
(root,21074084,16922472,12-07:45:14/160-19:03:59,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:13/160-19:03:59,1398) [kvm-nx-lpage-re]
(root,0,0,01:27:55/160-19:03:58,1417) [vhost-1394]
(root,0,0,00:00:00/160-19:03:58,1422) [kvm-pit/1394]
(root,19355424,5656720,9-00:02:53/160-19:03:55,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:32/160-19:03:55,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:51/160-19:03:54,1487) [vhost-1464]
(root,0,0,00:00:00/160-19:03:54,1492) [kvm-pit/1464]
(root,6072008,4293696,35-00:07:57/160-19:03:51,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:01/160-19:03:51,1511) [kvm-nx-lpage-re]
(root,0,0,01:38:11/160-19:03:50,1531) [vhost-1507]
(root,0,0,00:00:00/160-19:03:50,1534) [kvm-pit/1507]
(postfix,43844,7684,00:00:00/01:00:10,4015) pickup -l -t unix -u -c
(root,0,0,00:00:00/49:57,7096) [kworker/4:0-events]
(root,0,0,00:00:00/43:57,8895) [kworker/4:1-cgroup_destroy]
(root,0,0,00:00:00/41:45,9574) [kworker/0:0-events]
(root,0,0,00:00:00/28:57,13535) [kworker/2:2-events]
(root,0,0,00:00:00/20:57,16036) [kworker/3:2-events]
(root,0,0,00:00:00/19:48,16353) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/18:57,16645) [kworker/1:0-events]
(root,0,0,00:00:00/17:57,16963) [kworker/7:3-events]
(root,0,0,00:00:00/13:57,18179) [kworker/6:1-events]
(root,362440,28316,00:01:45/107-09:10:45,18556) pvedaemon worker
(root,0,0,00:00:00/11:57,18821) [kworker/7:0-events]
(root,0,0,00:00:00/11:57,18822) [kworker/7:1-events]
(root,0,0,00:00:00/08:57,19771) [kworker/1:1-events]
(root,0,0,00:00:00/07:57,20090) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/07:57,20091) [kworker/6:0-events]
(root,0,0,00:00:00/06:57,20408) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/06:29,20585) [kworker/u16:0-flush-9:2]
(root,0,0,00:00:00/05:57,20727) [kworker/5:1-cgroup_destroy]
(root,0,0,00:00:00/05:57,20728) [kworker/5:2-events]
(root,0,0,00:00:00/04:57,21042) [kworker/7:2-cgroup_destroy]
(root,0,0,00:00:00/01:57,22005) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/00:51,22330) [kworker/u16:1-events_power_efficient]
(root,13808,6568,00:00:00/00:03,22596) sshd: [accepted]
(root,14792,7996,00:00:00/00:03,22597) sshd: unknown [priv]
(sshd,13808,4888,00:00:00/00:03,22598) sshd: unknown [net]
(root,14508,7800,00:00:00/00:02,22599) sshd: root [priv]
(sshd,13808,5004,00:00:00/00:02,22600) sshd: root [net]
(sshd,13808,2460,00:00:00/00:01,22602) sshd: [net]
(root,7188,3360,00:00:00/00:00,22606) /bin/bash /usr/bin/check_mk_agent
(root,7188,3264,00:00:00/00:00,22689) /bin/bash /usr/bin/check_mk_agent
(root,43392,37776,00:00:00/00:00,22774) /usr/bin/perl /usr/bin/pvecm status
(root,25792,22740,00:00:00/00:00,22775) /usr/bin/perl /usr/bin/pvecm nodes
(root,7188,3300,00:00:00/00:00,22776) /bin/bash /usr/bin/check_mk_agent
(root,7632,2720,00:00:00/00:00,22802) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,992,00:00:00/00:00,22803) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(www-data,77008,55044,00:00:00/01:41:55,23219) spiceproxy worker
(root,86168,2288,00:00:00/01:41:55,23221) /usr/sbin/pvefw-logger
(www-data,355708,130720,00:00:00/01:41:55,23231) pveproxy worker
(www-data,355572,130716,00:00:00/01:41:55,23232) pveproxy worker
(www-data,355572,130720,00:00:00/01:41:55,23233) pveproxy worker
(root,362584,20452,00:02:08/134-04:05:54,27309) pvedaemon worker
(root,0,0,00:00:00/01:25:57,28245) [kworker/0:3-events]
(root,18768412,10546840,5-19:07:45/134-15:38:20,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:25/134-15:38:20,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:22/134-15:38:20,28619) [vhost-28596]
(root,0,0,01:03:45/134-15:38:20,28626) [kvm-pit/28596]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-30 00:41

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42b63d6658

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7096,00:16:13/158-19:23:50,1) /sbin/init
(root,0,0,00:00:09/158-19:23:50,2) [kthreadd]
(root,0,0,00:00:00/158-19:23:50,3) [rcu_gp]
(root,0,0,00:00:00/158-19:23:50,4) [rcu_par_gp]
(root,0,0,00:00:00/158-19:23:50,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/158-19:23:50,9) [mm_percpu_wq]
(root,0,0,00:04:25/158-19:23:50,10) [ksoftirqd/0]
(root,0,0,00:33:20/158-19:23:50,11) [rcu_sched]
(root,0,0,00:00:40/158-19:23:50,12) [migration/0]
(root,0,0,00:00:00/158-19:23:50,13) [idle_inject/0]
(root,0,0,00:00:00/158-19:23:50,14) [cpuhp/0]
(root,0,0,00:00:00/158-19:23:50,15) [cpuhp/1]
(root,0,0,00:00:00/158-19:23:50,16) [idle_inject/1]
(root,0,0,00:00:39/158-19:23:50,17) [migration/1]
(root,0,0,00:03:14/158-19:23:50,18) [ksoftirqd/1]
(root,0,0,00:00:00/158-19:23:50,20) [kworker/1:0H]
(root,0,0,00:00:00/158-19:23:50,21) [cpuhp/2]
(root,0,0,00:00:00/158-19:23:50,22) [idle_inject/2]
(root,0,0,00:00:38/158-19:23:50,23) [migration/2]
(root,0,0,00:02:03/158-19:23:50,24) [ksoftirqd/2]
(root,0,0,00:00:00/158-19:23:50,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/158-19:23:50,27) [cpuhp/3]
(root,0,0,00:00:00/158-19:23:50,28) [idle_inject/3]
(root,0,0,00:00:51/158-19:23:50,29) [migration/3]
(root,0,0,00:01:30/158-19:23:50,30) [ksoftirqd/3]
(root,0,0,00:00:00/158-19:23:50,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/158-19:23:50,33) [cpuhp/4]
(root,0,0,00:00:00/158-19:23:50,34) [idle_inject/4]
(root,0,0,00:00:38/158-19:23:50,35) [migration/4]
(root,0,0,00:01:09/158-19:23:50,36) [ksoftirqd/4]
(root,0,0,00:00:00/158-19:23:50,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/158-19:23:50,39) [cpuhp/5]
(root,0,0,00:00:00/158-19:23:50,40) [idle_inject/5]
(root,0,0,00:00:38/158-19:23:50,41) [migration/5]
(root,0,0,00:01:01/158-19:23:50,42) [ksoftirqd/5]
(root,0,0,00:00:00/158-19:23:50,44) [kworker/5:0H]
(root,0,0,00:00:00/158-19:23:50,45) [cpuhp/6]
(root,0,0,00:00:00/158-19:23:50,46) [idle_inject/6]
(root,0,0,00:00:36/158-19:23:50,47) [migration/6]
(root,0,0,00:09:38/158-19:23:50,48) [ksoftirqd/6]
(root,0,0,00:00:00/158-19:23:50,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/158-19:23:50,51) [cpuhp/7]
(root,0,0,00:00:00/158-19:23:50,52) [idle_inject/7]
(root,0,0,00:00:44/158-19:23:50,53) [migration/7]
(root,0,0,00:24:49/158-19:23:50,54) [ksoftirqd/7]
(root,0,0,00:00:00/158-19:23:50,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/158-19:23:50,57) [kdevtmpfs]
(root,0,0,00:00:00/158-19:23:50,58) [netns]
(root,0,0,00:00:00/158-19:23:50,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/158-19:23:50,60) [kauditd]
(root,0,0,00:00:05/158-19:23:50,62) [khungtaskd]
(root,0,0,00:00:00/158-19:23:50,63) [oom_reaper]
(root,0,0,00:00:00/158-19:23:50,64) [writeback]
(root,0,0,00:00:00/158-19:23:50,65) [kcompactd0]
(root,0,0,00:00:00/158-19:23:50,66) [ksmd]
(root,0,0,00:03:44/158-19:23:50,67) [khugepaged]
(root,0,0,00:00:00/158-19:23:50,113) [kintegrityd]
(root,0,0,00:00:00/158-19:23:50,114) [kblockd]
(root,0,0,00:00:00/158-19:23:50,115) [blkcg_punt_bio]
(root,0,0,00:00:00/158-19:23:50,116) [tpm_dev_wq]
(root,0,0,00:00:00/158-19:23:50,117) [ata_sff]
(root,0,0,00:00:00/158-19:23:50,118) [md]
(root,0,0,00:00:00/158-19:23:50,119) [edac-poller]
(root,0,0,00:00:00/158-19:23:50,120) [devfreq_wq]
(root,0,0,00:00:00/158-19:23:50,121) [watchdogd]
(root,0,0,00:24:00/158-19:23:50,128) [kswapd0]
(root,0,0,00:00:00/158-19:23:50,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/158-19:23:50,131) [kthrotld]
(root,0,0,00:00:00/158-19:23:50,132) [acpi_thermal_pm]
(root,0,0,00:00:00/158-19:23:50,133) [nvme-wq]
(root,0,0,00:00:00/158-19:23:50,134) [nvme-reset-wq]
(root,0,0,00:00:00/158-19:23:50,135) [nvme-delete-wq]
(root,0,0,00:00:00/158-19:23:50,137) [ipv6_addrconf]
(root,0,0,00:00:00/158-19:23:50,146) [kstrp]
(root,0,0,00:00:00/158-19:23:50,147) [kworker/u17:0]
(root,0,0,00:00:00/158-19:23:50,162) [charger_manager]
(root,0,0,00:00:00/158-19:23:49,210) [scsi_eh_0]
(root,0,0,00:00:00/158-19:23:49,211) [scsi_tmf_0]
(root,0,0,00:00:00/158-19:23:49,212) [scsi_eh_1]
(root,0,0,00:00:00/158-19:23:49,213) [scsi_tmf_1]
(root,0,0,00:00:00/158-19:23:49,214) [scsi_eh_2]
(root,0,0,00:00:00/158-19:23:49,215) [scsi_tmf_2]
(root,0,0,00:00:00/158-19:23:49,216) [scsi_eh_3]
(root,0,0,00:00:00/158-19:23:49,217) [scsi_tmf_3]
(root,0,0,00:00:00/158-19:23:49,218) [scsi_eh_4]
(root,0,0,00:00:00/158-19:23:49,219) [scsi_tmf_4]
(root,0,0,00:00:00/158-19:23:49,220) [scsi_eh_5]
(root,0,0,00:00:00/158-19:23:49,221) [scsi_tmf_5]
(root,0,0,00:03:32/158-19:23:49,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:33/158-19:23:49,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:16/158-19:23:49,237) [kworker/1:1H-kblockd]
(root,0,0,00:47:50/158-19:23:49,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:44/158-19:23:49,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:22/158-19:23:49,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:27/158-19:23:49,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:18/158-19:23:49,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/158-19:23:49,248) [md1_raid1]
(root,0,0,00:00:36/158-19:23:49,251) [md0_raid1]
(root,0,0,01:11:15/158-19:23:49,253) [md2_raid1]
(root,0,0,00:00:00/158-19:23:48,268) [raid5wq]
(root,0,0,00:07:20/158-19:23:45,291) [jbd2/md2-8]
(root,0,0,00:00:00/158-19:23:45,292) [ext4-rsv-conver]
(root,121592,39112,00:37:51/158-19:23:45,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/158-19:23:45,348) [rpciod]
(root,0,0,00:00:00/158-19:23:45,349) [xprtiod]
(root,0,0,00:00:00/158-19:23:45,353) [spl_system_task]
(root,0,0,00:00:00/158-19:23:45,354) [spl_delay_taskq]
(root,0,0,00:00:00/158-19:23:45,355) [spl_dynamic_tas]
(root,0,0,00:00:00/158-19:23:45,356) [spl_kmem_cache]
(root,0,0,00:00:00/158-19:23:44,361) [zvol]
(root,0,0,00:00:00/158-19:23:44,362) [arc_prune]
(root,0,0,00:03:41/158-19:23:44,363) [arc_evict]
(root,0,0,00:03:26/158-19:23:44,364) [arc_reap]
(root,0,0,00:00:00/158-19:23:44,366) [dbu_evict]
(root,0,0,00:03:19/158-19:23:44,367) [dbuf_evict]
(root,22980,3932,00:17:49/158-19:23:44,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/158-19:23:44,376) [z_vdev_file]
(root,0,0,00:01:50/158-19:23:44,377) [l2arc_feed]
(root,0,0,00:00:00/158-19:23:44,485) [cryptd]
(root,3860,2148,00:00:05/158-19:23:44,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/158-19:23:44,522) [jbd2/md1-8]
(root,0,0,00:00:00/158-19:23:44,523) [ext4-rsv-conver]
(_rpc,7776,4444,00:00:24/158-19:23:42,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3432,00:00:10/158-19:23:42,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:32:07/158-19:23:42,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:12/158-19:23:42,571) /usr/sbin/watchdog-mux
(root,12248,4732,00:00:03/158-19:23:42,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:12:50/158-19:23:42,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:16/158-19:23:42,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4628,00:01:25/158-19:23:42,578) /lib/systemd/systemd-logind
(root,223768,3812,00:11:52/158-19:23:42,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2740,00:00:00/158-19:23:42,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/158-19:23:42,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,362160,26656,00:00:42/46-12:19:35,585) pvedaemon worker
(root,4084,1676,00:00:05/158-19:23:42,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1384,00:00:00/158-19:23:41,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:30/158-19:23:41,768) bpfilter_umh
(root,13808,4976,00:11:18/158-19:23:41,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/158-19:23:41,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3268,00:34:46/158-19:23:41,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,741716,60196,02:45:36/158-19:23:41,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:44/158-19:23:41,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3616,00:00:31/158-19:23:41,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5332,00:00:06/158-19:23:41,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:15/158-19:23:40,1061) /usr/sbin/cron -f
(root,303168,37848,14:36:29/158-19:23:39,1068) pvestatd
(root,304364,30868,05:57:08/158-19:23:39,1069) pve-firewall
(root,353760,3968,00:01:53/158-19:23:39,1093) pvedaemon
(root,336416,10976,00:13:27/158-19:23:39,1101) pve-ha-crm
(www-data,355168,144616,00:04:06/158-19:23:38,1102) pveproxy
(www-data,68860,57984,00:02:36/158-19:23:38,1109) spiceproxy
(root,335964,31780,00:22:06/158-19:23:38,1111) pve-ha-lrm
(root,5997340,3509564,8-05:17:47/158-19:23:37,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:11/158-19:23:37,1129) [kvm-nx-lpage-re]
(root,0,0,12:01:43/158-19:23:37,1148) [vhost-1125]
(root,0,0,10:10:13/158-19:23:36,1167) [vhost-1125]
(root,0,0,01:05:36/158-19:23:36,1172) [kvm-pit/1125]
(root,14017028,8571912,68-02:11:05/158-19:23:33,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:40/158-19:23:33,1188) [kvm-nx-lpage-re]
(root,0,0,00:22:02/158-19:23:33,1207) [vhost-1184]
(root,0,0,01:14:25/158-19:23:33,1212) [kvm-pit/1184]
(root,0,0,00:00:00/158-19:23:30,1214) [dio/md2]
(root,3648844,2312620,38-15:41:34/158-19:23:29,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:44/158-19:23:29,1267) [kvm-nx-lpage-re]
(root,0,0,05:07:44/158-19:23:29,1286) [vhost-1263]
(root,0,0,00:00:00/158-19:23:29,1289) [kvm-pit/1263]
(root,0,0,00:00:00/158-19:23:28,1295) [ib-comp-wq]
(root,0,0,00:00:00/158-19:23:28,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/158-19:23:28,1297) [ib_mcast]
(root,0,0,00:00:00/158-19:23:28,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/158-19:23:28,1299) [rdma_cm]
(root,0,0,00:00:00/158-19:23:28,1300) [cifsiod]
(root,0,0,00:00:00/158-19:23:28,1301) [smb3decryptd]
(root,0,0,00:00:00/158-19:23:28,1302) [cifsfileinfoput]
(root,0,0,00:00:00/158-19:23:28,1303) [cifsoplockd]
(root,0,0,00:13:43/158-19:23:28,1305) [cifsd]
(root,0,0,00:05:09/158-19:23:28,1340) [cifsd]
(root,6043284,4197420,10-11:17:11/158-19:23:25,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:53/158-19:23:25,1358) [kvm-nx-lpage-re]
(root,0,0,02:02:37/158-19:23:25,1377) [vhost-1354]
(root,0,0,00:00:00/158-19:23:25,1382) [kvm-pit/1354]
(root,21065504,16921316,12-03:09:41/158-19:23:21,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:10/158-19:23:21,1398) [kvm-nx-lpage-re]
(root,0,0,01:26:51/158-19:23:20,1417) [vhost-1394]
(root,0,0,00:00:00/158-19:23:20,1422) [kvm-pit/1394]
(root,19346832,5516104,8-21:19:27/158-19:23:17,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:31/158-19:23:17,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:50/158-19:23:16,1487) [vhost-1464]
(root,0,0,00:00:00/158-19:23:16,1492) [kvm-pit/1464]
(root,6063424,4290440,34-16:39:45/158-19:23:13,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:00/158-19:23:13,1511) [kvm-nx-lpage-re]
(root,0,0,01:36:44/158-19:23:12,1531) [vhost-1507]
(root,0,0,00:00:00/158-19:23:12,1534) [kvm-pit/1507]
(root,0,0,00:00:00/33:19,5008) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/33:19,5009) [kworker/1:3-events]
(root,0,0,00:00:00/32:19,5293) [kworker/0:0-kvm-irqfd-cleanup]
(root,0,0,00:00:00/31:19,5583) [kworker/2:3-events]
(root,0,0,00:00:00/29:17,6151) [kworker/6:2-dio/md2]
(root,0,0,00:00:00/22:19,8232) [kworker/4:1-events]
(root,0,0,00:00:00/20:34,8672) [kworker/3:0-events]
(root,0,0,00:00:00/18:55,9173) [kworker/u16:0-events_power_efficient]
(root,0,0,00:00:00/15:19,10271) [kworker/5:3-events]
(root,0,0,00:00:00/13:19,10860) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/12:49,10960) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/12:19,11158) [kworker/2:2-events]
(root,0,0,00:00:00/12:05,11198) [kworker/0:1-events]
(root,0,0,00:00:00/11:19,11429) [kworker/4:2-events]
(root,0,0,00:00:00/11:19,11436) [kworker/4:3-events]
(root,0,0,00:00:00/09:19,12045) [kworker/7:0-events]
(root,0,0,00:00:00/08:19,12337) [kworker/7:2-rcu_gp]
(www-data,77020,54956,00:00:00/02:01:17,12614) spiceproxy worker
(root,86168,2328,00:00:00/02:01:17,12616) /usr/sbin/pvefw-logger
(www-data,355612,130408,00:00:00/02:01:17,12621) pveproxy worker
(www-data,355612,130408,00:00:00/02:01:17,12622) pveproxy worker
(www-data,355612,130408,00:00:00/02:01:17,12624) pveproxy worker
(root,0,0,00:00:00/05:54,12991) [kworker/6:1-events]
(root,0,0,00:00:00/04:47,13300) [kworker/u16:2-flush-9:2]
(root,0,0,00:00:00/04:19,13486) [kworker/3:2-events]
(root,0,0,00:00:00/03:19,13767) [kworker/5:0-cgroup_destroy]
(root,0,0,00:00:00/03:19,13768) [kworker/5:1]
(root,0,0,00:00:00/02:19,14046) [kworker/2:0-cgroup_destroy]
(root,9796,2388,00:00:00/01:19,14327) /usr/sbin/CRON -f
(root,2380,760,00:00:00/01:19,14328) /bin/sh -c vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,330244,116372,00:00:00/01:19,14329) /usr/bin/perl -T /usr/bin/vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,0,0,00:00:00/01:19,14338) [kworker/4:0-cgroup_destroy]
(root,337512,102276,00:00:00/01:18,14339) task UPID:node01:00003803:51C882F1:6747C091:vzdump::root@pam:
(root,5212,1804,00:00:00/01:18,14349) lzop
(root,14792,8008,00:00:00/00:13,14641) sshd: unknown [priv]
(sshd,13808,4928,00:00:00/00:13,14642) sshd: unknown [net]
(root,7188,3244,00:00:00/00:00,14738) /bin/bash /usr/bin/check_mk_agent
(root,7632,2720,00:00:00/00:00,14764) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,988,00:00:00/00:00,14765) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362440,28408,00:01:43/105-09:30:07,18556) pvedaemon worker
(postfix,43844,7844,00:00:00/01:37:59,18963) pickup -l -t unix -u -c
(root,362584,20544,00:02:06/132-04:25:16,27309) pvedaemon worker
(root,18786360,10532060,5-17:00:11/132-15:57:42,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:24/132-15:57:42,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:21/132-15:57:42,28619) [vhost-28596]
(root,0,0,01:02:53/132-15:57:42,28626) [kvm-pit/28596]
(root,0,0,00:00:00/53:19,31861) [kworker/5:2-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-28 01:01

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c426d346090

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7084,00:16:01/156-19:28:31,1) /sbin/init
(root,0,0,00:00:09/156-19:28:31,2) [kthreadd]
(root,0,0,00:00:00/156-19:28:31,3) [rcu_gp]
(root,0,0,00:00:00/156-19:28:31,4) [rcu_par_gp]
(root,0,0,00:00:00/156-19:28:31,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/156-19:28:31,9) [mm_percpu_wq]
(root,0,0,00:04:23/156-19:28:31,10) [ksoftirqd/0]
(root,0,0,00:32:56/156-19:28:31,11) [rcu_sched]
(root,0,0,00:00:39/156-19:28:31,12) [migration/0]
(root,0,0,00:00:00/156-19:28:31,13) [idle_inject/0]
(root,0,0,00:00:00/156-19:28:31,14) [cpuhp/0]
(root,0,0,00:00:00/156-19:28:31,15) [cpuhp/1]
(root,0,0,00:00:00/156-19:28:31,16) [idle_inject/1]
(root,0,0,00:00:39/156-19:28:31,17) [migration/1]
(root,0,0,00:03:13/156-19:28:31,18) [ksoftirqd/1]
(root,0,0,00:00:00/156-19:28:31,20) [kworker/1:0H]
(root,0,0,00:00:00/156-19:28:31,21) [cpuhp/2]
(root,0,0,00:00:00/156-19:28:31,22) [idle_inject/2]
(root,0,0,00:00:38/156-19:28:31,23) [migration/2]
(root,0,0,00:02:02/156-19:28:31,24) [ksoftirqd/2]
(root,0,0,00:00:00/156-19:28:31,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/156-19:28:31,27) [cpuhp/3]
(root,0,0,00:00:00/156-19:28:31,28) [idle_inject/3]
(root,0,0,00:00:50/156-19:28:31,29) [migration/3]
(root,0,0,00:01:29/156-19:28:31,30) [ksoftirqd/3]
(root,0,0,00:00:00/156-19:28:31,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/156-19:28:31,33) [cpuhp/4]
(root,0,0,00:00:00/156-19:28:31,34) [idle_inject/4]
(root,0,0,00:00:37/156-19:28:31,35) [migration/4]
(root,0,0,00:01:09/156-19:28:31,36) [ksoftirqd/4]
(root,0,0,00:00:00/156-19:28:31,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/156-19:28:31,39) [cpuhp/5]
(root,0,0,00:00:00/156-19:28:31,40) [idle_inject/5]
(root,0,0,00:00:37/156-19:28:31,41) [migration/5]
(root,0,0,00:01:01/156-19:28:31,42) [ksoftirqd/5]
(root,0,0,00:00:00/156-19:28:31,44) [kworker/5:0H]
(root,0,0,00:00:00/156-19:28:31,45) [cpuhp/6]
(root,0,0,00:00:00/156-19:28:31,46) [idle_inject/6]
(root,0,0,00:00:35/156-19:28:31,47) [migration/6]
(root,0,0,00:09:30/156-19:28:31,48) [ksoftirqd/6]
(root,0,0,00:00:00/156-19:28:31,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/156-19:28:31,51) [cpuhp/7]
(root,0,0,00:00:00/156-19:28:31,52) [idle_inject/7]
(root,0,0,00:00:44/156-19:28:31,53) [migration/7]
(root,0,0,00:24:28/156-19:28:31,54) [ksoftirqd/7]
(root,0,0,00:00:00/156-19:28:31,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/156-19:28:31,57) [kdevtmpfs]
(root,0,0,00:00:00/156-19:28:31,58) [netns]
(root,0,0,00:00:00/156-19:28:31,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/156-19:28:31,60) [kauditd]
(root,0,0,00:00:05/156-19:28:31,62) [khungtaskd]
(root,0,0,00:00:00/156-19:28:31,63) [oom_reaper]
(root,0,0,00:00:00/156-19:28:31,64) [writeback]
(root,0,0,00:00:00/156-19:28:31,65) [kcompactd0]
(root,0,0,00:00:00/156-19:28:31,66) [ksmd]
(root,0,0,00:03:44/156-19:28:31,67) [khugepaged]
(root,0,0,00:00:00/156-19:28:31,113) [kintegrityd]
(root,0,0,00:00:00/156-19:28:31,114) [kblockd]
(root,0,0,00:00:00/156-19:28:31,115) [blkcg_punt_bio]
(root,0,0,00:00:00/156-19:28:31,116) [tpm_dev_wq]
(root,0,0,00:00:00/156-19:28:31,117) [ata_sff]
(root,0,0,00:00:00/156-19:28:31,118) [md]
(root,0,0,00:00:00/156-19:28:31,119) [edac-poller]
(root,0,0,00:00:00/156-19:28:31,120) [devfreq_wq]
(root,0,0,00:00:00/156-19:28:31,121) [watchdogd]
(root,0,0,00:23:41/156-19:28:31,128) [kswapd0]
(root,0,0,00:00:00/156-19:28:31,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/156-19:28:31,131) [kthrotld]
(root,0,0,00:00:00/156-19:28:31,132) [acpi_thermal_pm]
(root,0,0,00:00:00/156-19:28:31,133) [nvme-wq]
(root,0,0,00:00:00/156-19:28:31,134) [nvme-reset-wq]
(root,0,0,00:00:00/156-19:28:31,135) [nvme-delete-wq]
(root,0,0,00:00:00/156-19:28:31,137) [ipv6_addrconf]
(root,0,0,00:00:00/156-19:28:31,146) [kstrp]
(root,0,0,00:00:00/156-19:28:31,147) [kworker/u17:0]
(root,0,0,00:00:00/156-19:28:31,162) [charger_manager]
(root,0,0,00:00:00/156-19:28:30,210) [scsi_eh_0]
(root,0,0,00:00:00/156-19:28:30,211) [scsi_tmf_0]
(root,0,0,00:00:00/156-19:28:30,212) [scsi_eh_1]
(root,0,0,00:00:00/156-19:28:30,213) [scsi_tmf_1]
(root,0,0,00:00:00/156-19:28:30,214) [scsi_eh_2]
(root,0,0,00:00:00/156-19:28:30,215) [scsi_tmf_2]
(root,0,0,00:00:00/156-19:28:30,216) [scsi_eh_3]
(root,0,0,00:00:00/156-19:28:30,217) [scsi_tmf_3]
(root,0,0,00:00:00/156-19:28:30,218) [scsi_eh_4]
(root,0,0,00:00:00/156-19:28:30,219) [scsi_tmf_4]
(root,0,0,00:00:00/156-19:28:30,220) [scsi_eh_5]
(root,0,0,00:00:00/156-19:28:30,221) [scsi_tmf_5]
(root,0,0,00:03:30/156-19:28:30,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:30/156-19:28:30,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:14/156-19:28:30,237) [kworker/1:1H-kblockd]
(root,0,0,00:47:16/156-19:28:30,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:41/156-19:28:30,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:20/156-19:28:30,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:25/156-19:28:30,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:16/156-19:28:30,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/156-19:28:30,248) [md1_raid1]
(root,0,0,00:00:36/156-19:28:30,251) [md0_raid1]
(root,0,0,01:10:45/156-19:28:30,253) [md2_raid1]
(root,0,0,00:00:00/156-19:28:29,268) [raid5wq]
(root,0,0,00:07:15/156-19:28:26,291) [jbd2/md2-8]
(root,0,0,00:00:00/156-19:28:26,292) [ext4-rsv-conver]
(root,244800,133636,00:37:22/156-19:28:26,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/156-19:28:26,348) [rpciod]
(root,0,0,00:00:00/156-19:28:26,349) [xprtiod]
(root,0,0,00:00:00/156-19:28:26,353) [spl_system_task]
(root,0,0,00:00:00/156-19:28:26,354) [spl_delay_taskq]
(root,0,0,00:00:00/156-19:28:26,355) [spl_dynamic_tas]
(root,0,0,00:00:00/156-19:28:26,356) [spl_kmem_cache]
(root,0,0,00:00:00/156-19:28:25,361) [zvol]
(root,0,0,00:00:00/156-19:28:25,362) [arc_prune]
(root,0,0,00:03:38/156-19:28:25,363) [arc_evict]
(root,0,0,00:03:23/156-19:28:25,364) [arc_reap]
(root,0,0,00:00:00/156-19:28:25,366) [dbu_evict]
(root,0,0,00:03:17/156-19:28:25,367) [dbuf_evict]
(root,22980,3936,00:17:35/156-19:28:25,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/156-19:28:25,376) [z_vdev_file]
(root,0,0,00:01:48/156-19:28:25,377) [l2arc_feed]
(root,0,0,00:00:00/156-19:28:25,485) [cryptd]
(root,3860,2148,00:00:05/156-19:28:25,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/156-19:28:25,522) [jbd2/md1-8]
(root,0,0,00:00:00/156-19:28:25,523) [ext4-rsv-conver]
(_rpc,7776,4444,00:00:24/156-19:28:23,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3436,00:00:10/156-19:28:23,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:31:46/156-19:28:23,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:09/156-19:28:23,571) /usr/sbin/watchdog-mux
(root,12248,4732,00:00:03/156-19:28:23,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:12:41/156-19:28:23,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:16/156-19:28:23,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4632,00:01:24/156-19:28:23,578) /lib/systemd/systemd-logind
(root,223768,3816,00:11:43/156-19:28:23,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2744,00:00:00/156-19:28:23,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/156-19:28:23,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,354192,11688,00:00:40/44-12:24:16,585) pvedaemon worker
(root,4084,1676,00:00:05/156-19:28:23,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1388,00:00:00/156-19:28:22,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:26/156-19:28:22,768) bpfilter_umh
(root,13808,4980,00:11:10/156-19:28:22,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/156-19:28:22,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3268,00:34:19/156-19:28:22,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,747920,63332,02:43:35/156-19:28:22,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:43/156-19:28:22,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3616,00:00:31/156-19:28:22,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5476,00:00:06/156-19:28:22,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:15/156-19:28:21,1061) /usr/sbin/cron -f
(root,303168,37852,14:25:10/156-19:28:20,1068) pvestatd
(root,304364,30868,05:52:30/156-19:28:20,1069) pve-firewall
(root,353760,3968,00:01:51/156-19:28:20,1093) pvedaemon
(root,336416,10976,00:13:17/156-19:28:20,1101) pve-ha-crm
(www-data,355220,144164,00:04:03/156-19:28:19,1102) pveproxy
(www-data,68916,57908,00:02:34/156-19:28:19,1109) spiceproxy
(root,335964,31780,00:21:50/156-19:28:19,1111) pve-ha-lrm
(root,5988756,3469172,8-02:47:34/156-19:28:18,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:11/156-19:28:18,1129) [kvm-nx-lpage-re]
(root,0,0,11:52:46/156-19:28:18,1148) [vhost-1125]
(root,0,0,10:02:43/156-19:28:17,1167) [vhost-1125]
(root,0,0,01:04:51/156-19:28:17,1172) [kvm-pit/1125]
(root,14012732,8572008,65-23:28:46/156-19:28:14,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:35/156-19:28:14,1188) [kvm-nx-lpage-re]
(root,0,0,00:21:55/156-19:28:14,1207) [vhost-1184]
(root,0,0,01:13:31/156-19:28:14,1212) [kvm-pit/1184]
(root,0,0,00:00:00/156-19:28:11,1214) [dio/md2]
(root,3640392,2307944,38-03:29:45/156-19:28:10,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:43/156-19:28:10,1267) [kvm-nx-lpage-re]
(root,0,0,05:04:25/156-19:28:10,1286) [vhost-1263]
(root,0,0,00:00:00/156-19:28:10,1289) [kvm-pit/1263]
(root,0,0,00:00:00/156-19:28:09,1295) [ib-comp-wq]
(root,0,0,00:00:00/156-19:28:09,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/156-19:28:09,1297) [ib_mcast]
(root,0,0,00:00:00/156-19:28:09,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/156-19:28:09,1299) [rdma_cm]
(root,0,0,00:00:00/156-19:28:09,1300) [cifsiod]
(root,0,0,00:00:00/156-19:28:09,1301) [smb3decryptd]
(root,0,0,00:00:00/156-19:28:09,1302) [cifsfileinfoput]
(root,0,0,00:00:00/156-19:28:09,1303) [cifsoplockd]
(root,0,0,00:13:33/156-19:28:09,1305) [cifsd]
(root,0,0,00:05:05/156-19:28:09,1340) [cifsd]
(root,6034700,4185700,10-08:00:16/156-19:28:06,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:52/156-19:28:06,1358) [kvm-nx-lpage-re]
(root,0,0,02:01:07/156-19:28:06,1377) [vhost-1354]
(root,0,0,00:00:00/156-19:28:06,1382) [kvm-pit/1354]
(root,21056924,16913324,11-23:24:48/156-19:28:02,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:08/156-19:28:02,1398) [kvm-nx-lpage-re]
(root,0,0,01:25:28/156-19:28:01,1417) [vhost-1394]
(root,0,0,00:00:00/156-19:28:01,1422) [kvm-pit/1394]
(root,19338240,5467892,8-18:35:12/156-19:27:58,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:31/156-19:27:58,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:49/156-19:27:57,1487) [vhost-1464]
(root,0,0,00:00:00/156-19:27:57,1492) [kvm-pit/1464]
(root,6054836,4286996,34-09:06:51/156-19:27:54,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:58/156-19:27:54,1511) [kvm-nx-lpage-re]
(root,0,0,01:35:18/156-19:27:53,1531) [vhost-1507]
(root,0,0,00:00:00/156-19:27:53,1534) [kvm-pit/1507]
(root,0,0,00:00:00/30:10,9603) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/29:00,10024) [kworker/2:2-events]
(root,0,0,00:00:00/28:00,10318) [kworker/2:3-cgroup_destroy]
(root,0,0,00:00:00/25:00,11209) [kworker/3:3-cgroup_destroy]
(postfix,43844,7440,00:00:00/22:10,11992) pickup -l -t unix -u -c
(root,0,0,00:00:00/22:00,12125) [kworker/4:2-events]
(root,0,0,00:00:00/22:00,12126) [kworker/4:3-cifsiod]
(root,0,0,00:00:00/20:00,12736) [kworker/7:1-cifsiod]
(root,0,0,00:00:00/17:00,13689) [kworker/5:2-events]
(root,0,0,00:00:00/16:00,14067) [kworker/6:3-md]
(root,0,0,00:00:00/14:00,14694) [kworker/1:2-events]
(root,0,0,00:00:17/13:11,14883) [kworker/u16:2+flush-cifs-1]
(root,0,0,00:00:00/13:00,15012) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/13:00,15013) [kworker/0:3-cifsiod]
(root,0,0,00:00:00/11:00,15622) [kworker/7:0]
(root,0,0,00:00:00/11:00,15623) [kworker/5:1-cifsiod]
(www-data,76784,54756,00:00:00/02:05:58,15819) spiceproxy worker
(root,86168,2020,00:00:00/02:05:58,15822) /usr/sbin/pvefw-logger
(www-data,355648,130260,00:00:00/02:05:58,15831) pveproxy worker
(www-data,367836,137136,00:00:00/02:05:58,15832) pveproxy worker
(www-data,367708,137308,00:00:00/02:05:58,15833) pveproxy worker
(root,0,0,00:00:00/10:00,15929) [kworker/6:0-events]
(root,0,0,00:00:00/08:00,16541) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/08:00,16542) [kworker/3:1-events]
(root,0,0,00:00:00/07:00,16845) [kworker/1:1-events]
(root,9796,2388,00:00:00/05:59,17148) /usr/sbin/CRON -f
(root,2380,752,00:00:00/05:59,17149) /bin/sh -c vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,330200,115996,00:00:00/05:59,17150) /usr/bin/perl -T /usr/bin/vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,337480,102448,00:00:00/05:59,17153) task UPID:node01:00004301:50C0D72F:67451D92:vzdump::root@pam:
(root,5212,1856,00:00:39/05:58,17165) lzop
(root,0,0,00:00:52/04:59,17448) [kworker/u16:0-events_unbound]
(root,0,0,00:00:00/04:00,17725) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/03:00,18000) [kworker/2:0-events]
(root,0,0,00:00:00/01:52,18302) [kworker/u16:3]
(root,0,0,00:00:00/01:00,18544) [kworker/1:0-events]
(root,0,0,00:00:00/01:00,18550) [kworker/1:3-cgroup_destroy]
(root,362260,15948,00:01:42/103-09:34:48,18556) pvedaemon worker
(root,14508,7808,00:00:00/00:05,18700) sshd: root [priv]
(sshd,13808,5012,00:00:00/00:05,18701) sshd: root [net]
(root,271204,82308,00:00:00/00:00,18901) /usr/bin/perl -T /usr/bin/pvesr run --mail 1
(root,22980,2592,00:00:00/00:00,18902) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:00,18903) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:00,18904) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:00,18905) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:00,18906) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:00,18907) /lib/systemd/systemd-udevd
(root,22980,2536,00:00:00/00:00,18908) /lib/systemd/systemd-udevd
(root,22980,2508,00:00:00/00:00,18909) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:00,18910) /lib/systemd/systemd-udevd
(root,7188,3260,00:00:00/00:00,18958) /bin/bash /usr/bin/check_mk_agent
(root,13808,6672,00:00:00/00:00,18962) sshd: [accepted]
(sshd,13808,2532,00:00:00/00:00,18963) sshd: [net]
(root,7632,2696,00:00:00/00:00,18986) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,1000,00:00:00/00:00,18987) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362584,18704,00:02:05/130-04:29:57,27309) pvedaemon worker
(root,18785176,10498972,5-14:39:53/130-16:02:23,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:22/130-16:02:23,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:15/130-16:02:23,28619) [vhost-28596]
(root,0,0,01:01:59/130-16:02:23,28626) [kvm-pit/28596]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-26 01:06

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c427f5f08ff

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7108,00:15:48/154-19:15:36,1) /sbin/init
(root,0,0,00:00:08/154-19:15:36,2) [kthreadd]
(root,0,0,00:00:00/154-19:15:36,3) [rcu_gp]
(root,0,0,00:00:00/154-19:15:36,4) [rcu_par_gp]
(root,0,0,00:00:00/154-19:15:36,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/154-19:15:36,9) [mm_percpu_wq]
(root,0,0,00:04:21/154-19:15:36,10) [ksoftirqd/0]
(root,0,0,00:32:32/154-19:15:36,11) [rcu_sched]
(root,0,0,00:00:38/154-19:15:36,12) [migration/0]
(root,0,0,00:00:00/154-19:15:36,13) [idle_inject/0]
(root,0,0,00:00:00/154-19:15:36,14) [cpuhp/0]
(root,0,0,00:00:00/154-19:15:36,15) [cpuhp/1]
(root,0,0,00:00:00/154-19:15:36,16) [idle_inject/1]
(root,0,0,00:00:38/154-19:15:36,17) [migration/1]
(root,0,0,00:03:11/154-19:15:36,18) [ksoftirqd/1]
(root,0,0,00:00:00/154-19:15:36,20) [kworker/1:0H]
(root,0,0,00:00:00/154-19:15:36,21) [cpuhp/2]
(root,0,0,00:00:00/154-19:15:36,22) [idle_inject/2]
(root,0,0,00:00:37/154-19:15:36,23) [migration/2]
(root,0,0,00:02:01/154-19:15:36,24) [ksoftirqd/2]
(root,0,0,00:00:00/154-19:15:36,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/154-19:15:36,27) [cpuhp/3]
(root,0,0,00:00:00/154-19:15:36,28) [idle_inject/3]
(root,0,0,00:00:49/154-19:15:36,29) [migration/3]
(root,0,0,00:01:28/154-19:15:36,30) [ksoftirqd/3]
(root,0,0,00:00:00/154-19:15:36,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/154-19:15:36,33) [cpuhp/4]
(root,0,0,00:00:00/154-19:15:36,34) [idle_inject/4]
(root,0,0,00:00:37/154-19:15:36,35) [migration/4]
(root,0,0,00:01:08/154-19:15:36,36) [ksoftirqd/4]
(root,0,0,00:00:00/154-19:15:36,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/154-19:15:36,39) [cpuhp/5]
(root,0,0,00:00:00/154-19:15:36,40) [idle_inject/5]
(root,0,0,00:00:37/154-19:15:36,41) [migration/5]
(root,0,0,00:01:00/154-19:15:36,42) [ksoftirqd/5]
(root,0,0,00:00:00/154-19:15:36,44) [kworker/5:0H]
(root,0,0,00:00:00/154-19:15:36,45) [cpuhp/6]
(root,0,0,00:00:00/154-19:15:36,46) [idle_inject/6]
(root,0,0,00:00:35/154-19:15:36,47) [migration/6]
(root,0,0,00:09:22/154-19:15:36,48) [ksoftirqd/6]
(root,0,0,00:00:00/154-19:15:36,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/154-19:15:36,51) [cpuhp/7]
(root,0,0,00:00:00/154-19:15:36,52) [idle_inject/7]
(root,0,0,00:00:43/154-19:15:36,53) [migration/7]
(root,0,0,00:24:06/154-19:15:36,54) [ksoftirqd/7]
(root,0,0,00:00:00/154-19:15:36,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/154-19:15:36,57) [kdevtmpfs]
(root,0,0,00:00:00/154-19:15:36,58) [netns]
(root,0,0,00:00:00/154-19:15:36,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/154-19:15:36,60) [kauditd]
(root,0,0,00:00:05/154-19:15:36,62) [khungtaskd]
(root,0,0,00:00:00/154-19:15:36,63) [oom_reaper]
(root,0,0,00:00:00/154-19:15:36,64) [writeback]
(root,0,0,00:00:00/154-19:15:36,65) [kcompactd0]
(root,0,0,00:00:00/154-19:15:36,66) [ksmd]
(root,0,0,00:03:43/154-19:15:36,67) [khugepaged]
(root,0,0,00:00:00/154-19:15:36,113) [kintegrityd]
(root,0,0,00:00:00/154-19:15:36,114) [kblockd]
(root,0,0,00:00:00/154-19:15:36,115) [blkcg_punt_bio]
(root,0,0,00:00:00/154-19:15:36,116) [tpm_dev_wq]
(root,0,0,00:00:00/154-19:15:36,117) [ata_sff]
(root,0,0,00:00:00/154-19:15:36,118) [md]
(root,0,0,00:00:00/154-19:15:36,119) [edac-poller]
(root,0,0,00:00:00/154-19:15:36,120) [devfreq_wq]
(root,0,0,00:00:00/154-19:15:36,121) [watchdogd]
(root,0,0,00:23:20/154-19:15:36,128) [kswapd0]
(root,0,0,00:00:00/154-19:15:36,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/154-19:15:36,131) [kthrotld]
(root,0,0,00:00:00/154-19:15:36,132) [acpi_thermal_pm]
(root,0,0,00:00:00/154-19:15:36,133) [nvme-wq]
(root,0,0,00:00:00/154-19:15:36,134) [nvme-reset-wq]
(root,0,0,00:00:00/154-19:15:36,135) [nvme-delete-wq]
(root,0,0,00:00:00/154-19:15:36,137) [ipv6_addrconf]
(root,0,0,00:00:00/154-19:15:36,146) [kstrp]
(root,0,0,00:00:00/154-19:15:36,147) [kworker/u17:0]
(root,0,0,00:00:00/154-19:15:36,162) [charger_manager]
(root,0,0,00:00:00/154-19:15:35,210) [scsi_eh_0]
(root,0,0,00:00:00/154-19:15:35,211) [scsi_tmf_0]
(root,0,0,00:00:00/154-19:15:35,212) [scsi_eh_1]
(root,0,0,00:00:00/154-19:15:35,213) [scsi_tmf_1]
(root,0,0,00:00:00/154-19:15:35,214) [scsi_eh_2]
(root,0,0,00:00:00/154-19:15:35,215) [scsi_tmf_2]
(root,0,0,00:00:00/154-19:15:35,216) [scsi_eh_3]
(root,0,0,00:00:00/154-19:15:35,217) [scsi_tmf_3]
(root,0,0,00:00:00/154-19:15:35,218) [scsi_eh_4]
(root,0,0,00:00:00/154-19:15:35,219) [scsi_tmf_4]
(root,0,0,00:00:00/154-19:15:35,220) [scsi_eh_5]
(root,0,0,00:00:00/154-19:15:35,221) [scsi_tmf_5]
(root,0,0,00:03:28/154-19:15:35,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:27/154-19:15:35,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:11/154-19:15:35,237) [kworker/1:1H-kblockd]
(root,0,0,00:46:42/154-19:15:35,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:38/154-19:15:35,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:18/154-19:15:35,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:22/154-19:15:35,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:14/154-19:15:35,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/154-19:15:35,248) [md1_raid1]
(root,0,0,00:00:36/154-19:15:35,251) [md0_raid1]
(root,0,0,01:10:16/154-19:15:35,253) [md2_raid1]
(root,0,0,00:00:00/154-19:15:34,268) [raid5wq]
(root,0,0,00:07:10/154-19:15:31,291) [jbd2/md2-8]
(root,0,0,00:00:00/154-19:15:31,292) [ext4-rsv-conver]
(root,141760,59348,00:36:53/154-19:15:31,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/154-19:15:31,348) [rpciod]
(root,0,0,00:00:00/154-19:15:31,349) [xprtiod]
(root,0,0,00:00:00/154-19:15:31,353) [spl_system_task]
(root,0,0,00:00:00/154-19:15:31,354) [spl_delay_taskq]
(root,0,0,00:00:00/154-19:15:31,355) [spl_dynamic_tas]
(root,0,0,00:00:00/154-19:15:31,356) [spl_kmem_cache]
(root,0,0,00:00:00/154-19:15:30,361) [zvol]
(root,0,0,00:00:00/154-19:15:30,362) [arc_prune]
(root,0,0,00:03:35/154-19:15:30,363) [arc_evict]
(root,0,0,00:03:21/154-19:15:30,364) [arc_reap]
(root,0,0,00:00:00/154-19:15:30,366) [dbu_evict]
(root,0,0,00:03:14/154-19:15:30,367) [dbuf_evict]
(root,22980,3936,00:17:21/154-19:15:30,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/154-19:15:30,376) [z_vdev_file]
(root,0,0,00:01:47/154-19:15:30,377) [l2arc_feed]
(root,0,0,00:00:00/154-19:15:30,485) [cryptd]
(root,3860,2148,00:00:05/154-19:15:30,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/154-19:15:30,522) [jbd2/md1-8]
(root,0,0,00:00:00/154-19:15:30,523) [ext4-rsv-conver]
(_rpc,7776,4444,00:00:23/154-19:15:28,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3436,00:00:10/154-19:15:28,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:31:23/154-19:15:28,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:05/154-19:15:28,571) /usr/sbin/watchdog-mux
(root,12248,4732,00:00:03/154-19:15:28,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:12:29/154-19:15:28,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:15/154-19:15:28,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4632,00:01:23/154-19:15:28,578) /lib/systemd/systemd-logind
(root,223768,3816,00:11:34/154-19:15:28,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2744,00:00:00/154-19:15:28,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/154-19:15:28,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,354192,11712,00:00:38/42-12:11:21,585) pvedaemon worker
(root,4084,1676,00:00:05/154-19:15:28,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1388,00:00:00/154-19:15:27,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:22/154-19:15:27,768) bpfilter_umh
(root,13808,4980,00:11:02/154-19:15:27,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/154-19:15:27,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3268,00:33:51/154-19:15:27,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,729308,53940,02:41:35/154-19:15:27,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:43/154-19:15:27,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3624,00:00:30/154-19:15:27,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5616,00:00:06/154-19:15:27,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:15/154-19:15:26,1061) /usr/sbin/cron -f
(root,303168,37852,14:13:36/154-19:15:25,1068) pvestatd
(root,304364,30868,05:47:52/154-19:15:25,1069) pve-firewall
(root,353760,3968,00:01:50/154-19:15:25,1093) pvedaemon
(root,336416,10976,00:13:06/154-19:15:25,1101) pve-ha-crm
(www-data,355272,144444,00:04:00/154-19:15:24,1102) pveproxy
(www-data,68844,58048,00:02:32/154-19:15:24,1109) spiceproxy
(root,335964,31780,00:21:33/154-19:15:24,1111) pve-ha-lrm
(root,5980172,3463824,8-00:16:09/154-19:15:23,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:11/154-19:15:23,1129) [kvm-nx-lpage-re]
(root,0,0,11:43:35/154-19:15:23,1148) [vhost-1125]
(root,0,0,09:54:50/154-19:15:22,1167) [vhost-1125]
(root,0,0,01:04:06/154-19:15:22,1172) [kvm-pit/1125]
(root,13999844,8558064,63-20:29:11/154-19:15:19,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:31/154-19:15:19,1188) [kvm-nx-lpage-re]
(root,0,0,00:21:49/154-19:15:19,1207) [vhost-1184]
(root,0,0,01:12:38/154-19:15:19,1212) [kvm-pit/1184]
(root,0,0,00:00:00/154-19:15:16,1214) [dio/md2]
(root,3631748,2301924,37-15:11:19/154-19:15:15,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:42/154-19:15:15,1267) [kvm-nx-lpage-re]
(root,0,0,05:01:05/154-19:15:15,1286) [vhost-1263]
(root,0,0,00:00:00/154-19:15:15,1289) [kvm-pit/1263]
(root,0,0,00:00:00/154-19:15:14,1295) [ib-comp-wq]
(root,0,0,00:00:00/154-19:15:14,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/154-19:15:14,1297) [ib_mcast]
(root,0,0,00:00:00/154-19:15:14,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/154-19:15:14,1299) [rdma_cm]
(root,0,0,00:00:00/154-19:15:14,1300) [cifsiod]
(root,0,0,00:00:00/154-19:15:14,1301) [smb3decryptd]
(root,0,0,00:00:00/154-19:15:14,1302) [cifsfileinfoput]
(root,0,0,00:00:00/154-19:15:14,1303) [cifsoplockd]
(root,0,0,00:13:23/154-19:15:14,1305) [cifsd]
(root,0,0,00:05:02/154-19:15:14,1340) [cifsd]
(root,6026112,4173900,10-04:40:57/154-19:15:11,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:51/154-19:15:11,1358) [kvm-nx-lpage-re]
(root,0,0,01:59:38/154-19:15:11,1377) [vhost-1354]
(root,0,0,00:00:00/154-19:15:11,1382) [kvm-pit/1354]
(root,21048344,16907480,11-18:10:04/154-19:15:07,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:05/154-19:15:07,1398) [kvm-nx-lpage-re]
(root,0,0,01:23:40/154-19:15:06,1417) [vhost-1394]
(root,0,0,00:00:00/154-19:15:06,1422) [kvm-pit/1394]
(root,19329648,5436652,8-15:49:20/154-19:15:03,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:31/154-19:15:03,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:47/154-19:15:02,1487) [vhost-1464]
(root,0,0,00:00:00/154-19:15:02,1492) [kvm-pit/1464]
(root,6046252,4281096,34-01:28:55/154-19:14:59,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:56/154-19:14:59,1511) [kvm-nx-lpage-re]
(root,0,0,01:33:43/154-19:14:58,1531) [vhost-1507]
(root,0,0,00:00:00/154-19:14:58,1534) [kvm-pit/1507]
(root,0,0,00:00:00/43:32,6525) [kworker/1:0-cgroup_destroy]
(root,0,0,00:00:00/33:05,9868) [kworker/4:2-cgroup_destroy]
(root,0,0,00:00:00/31:05,10477) [kworker/0:2-events]
(root,0,0,00:00:00/29:05,11046) [kworker/2:1-events]
(postfix,43844,7620,00:00:00/27:46,11398) pickup -l -t unix -u -c
(root,0,0,00:00:00/20:05,13580) [kworker/0:1-events]
(root,0,0,00:00:00/19:05,13849) [kworker/u16:1-flush-9:2]
(root,0,0,00:00:00/18:02,14156) [kworker/6:2-events]
(root,0,0,00:00:00/17:05,14412) [kworker/3:2-events]
(root,0,0,00:00:00/17:05,14413) [kworker/3:3-mm_percpu_wq]
(root,0,0,00:00:00/16:05,14690) [kworker/1:2-events]
(root,0,0,00:00:00/13:05,15522) [kworker/2:3-events]
(root,0,0,00:00:00/12:05,15800) [kworker/5:3-cgroup_destroy]
(root,0,0,00:00:00/11:05,16064) [kworker/7:1-cgroup_destroy]
(root,0,0,00:00:00/11:05,16065) [kworker/7:2-events]
(www-data,76900,54968,00:00:00/01:53:04,16208) spiceproxy worker
(root,86168,2272,00:00:00/01:53:03,16210) /usr/sbin/pvefw-logger
(www-data,355976,131604,00:00:00/01:53:03,16235) pveproxy worker
(www-data,367816,137852,00:00:00/01:53:03,16236) pveproxy worker
(www-data,355568,130908,00:00:00/01:53:03,16237) pveproxy worker
(root,0,0,00:00:00/09:05,16613) [kworker/4:0-events]
(root,0,0,00:00:00/08:19,16762) [kworker/6:0-events]
(root,0,0,00:00:00/07:08,17066) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/06:05,17437) [kworker/5:1-cgroup_destroy]
(root,0,0,00:00:00/06:05,17439) [kworker/5:2-events]
(root,0,0,00:00:00/03:05,18261) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:00/03:05,18262) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/02:05,18538) [kworker/0:0-events]
(root,0,0,00:00:00/02:05,18539) [kworker/0:3-events]
(root,362260,15976,00:01:40/101-09:21:53,18556) pvedaemon worker
(root,14508,7860,00:00:00/00:01,19113) sshd: root [priv]
(sshd,13808,5004,00:00:00/00:01,19114) sshd: root [net]
(root,14508,7536,00:00:00/00:01,19117) sshd: root [priv]
(sshd,13808,4872,00:00:00/00:01,19118) sshd: root [net]
(root,7188,3256,00:00:00/00:00,19157) /bin/bash /usr/bin/check_mk_agent
(root,7632,2692,00:00:00/00:00,19183) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,1000,00:00:00/00:00,19184) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362584,18736,00:02:03/128-04:17:02,27309) pvedaemon worker
(root,18736508,10492136,5-12:26:54/128-15:49:28,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:21/128-15:49:28,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:14/128-15:49:28,28619) [vhost-28596]
(root,0,0,01:01:06/128-15:49:28,28626) [kvm-pit/28596]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-24 00:53

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42ae4f0735

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7160,00:15:35/152-19:17:47,1) /sbin/init
(root,0,0,00:00:08/152-19:17:47,2) [kthreadd]
(root,0,0,00:00:00/152-19:17:47,3) [rcu_gp]
(root,0,0,00:00:00/152-19:17:47,4) [rcu_par_gp]
(root,0,0,00:00:00/152-19:17:47,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/152-19:17:47,9) [mm_percpu_wq]
(root,0,0,00:04:19/152-19:17:47,10) [ksoftirqd/0]
(root,0,0,00:32:07/152-19:17:47,11) [rcu_sched]
(root,0,0,00:00:38/152-19:17:47,12) [migration/0]
(root,0,0,00:00:00/152-19:17:47,13) [idle_inject/0]
(root,0,0,00:00:00/152-19:17:47,14) [cpuhp/0]
(root,0,0,00:00:00/152-19:17:47,15) [cpuhp/1]
(root,0,0,00:00:00/152-19:17:47,16) [idle_inject/1]
(root,0,0,00:00:38/152-19:17:47,17) [migration/1]
(root,0,0,00:03:09/152-19:17:47,18) [ksoftirqd/1]
(root,0,0,00:00:00/152-19:17:47,20) [kworker/1:0H]
(root,0,0,00:00:00/152-19:17:47,21) [cpuhp/2]
(root,0,0,00:00:00/152-19:17:47,22) [idle_inject/2]
(root,0,0,00:00:37/152-19:17:47,23) [migration/2]
(root,0,0,00:01:59/152-19:17:47,24) [ksoftirqd/2]
(root,0,0,00:00:00/152-19:17:47,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/152-19:17:47,27) [cpuhp/3]
(root,0,0,00:00:00/152-19:17:47,28) [idle_inject/3]
(root,0,0,00:00:49/152-19:17:47,29) [migration/3]
(root,0,0,00:01:27/152-19:17:47,30) [ksoftirqd/3]
(root,0,0,00:00:00/152-19:17:47,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/152-19:17:47,33) [cpuhp/4]
(root,0,0,00:00:00/152-19:17:47,34) [idle_inject/4]
(root,0,0,00:00:36/152-19:17:47,35) [migration/4]
(root,0,0,00:01:07/152-19:17:47,36) [ksoftirqd/4]
(root,0,0,00:00:00/152-19:17:47,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/152-19:17:47,39) [cpuhp/5]
(root,0,0,00:00:00/152-19:17:47,40) [idle_inject/5]
(root,0,0,00:00:36/152-19:17:47,41) [migration/5]
(root,0,0,00:00:59/152-19:17:47,42) [ksoftirqd/5]
(root,0,0,00:00:00/152-19:17:47,44) [kworker/5:0H]
(root,0,0,00:00:00/152-19:17:47,45) [cpuhp/6]
(root,0,0,00:00:00/152-19:17:47,46) [idle_inject/6]
(root,0,0,00:00:34/152-19:17:47,47) [migration/6]
(root,0,0,00:09:14/152-19:17:47,48) [ksoftirqd/6]
(root,0,0,00:00:00/152-19:17:47,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/152-19:17:47,51) [cpuhp/7]
(root,0,0,00:00:00/152-19:17:47,52) [idle_inject/7]
(root,0,0,00:00:42/152-19:17:47,53) [migration/7]
(root,0,0,00:23:44/152-19:17:47,54) [ksoftirqd/7]
(root,0,0,00:00:00/152-19:17:47,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/152-19:17:47,57) [kdevtmpfs]
(root,0,0,00:00:00/152-19:17:47,58) [netns]
(root,0,0,00:00:00/152-19:17:47,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/152-19:17:47,60) [kauditd]
(root,0,0,00:00:04/152-19:17:47,62) [khungtaskd]
(root,0,0,00:00:00/152-19:17:47,63) [oom_reaper]
(root,0,0,00:00:00/152-19:17:47,64) [writeback]
(root,0,0,00:00:00/152-19:17:47,65) [kcompactd0]
(root,0,0,00:00:00/152-19:17:47,66) [ksmd]
(root,0,0,00:03:42/152-19:17:47,67) [khugepaged]
(root,0,0,00:00:00/152-19:17:47,113) [kintegrityd]
(root,0,0,00:00:00/152-19:17:47,114) [kblockd]
(root,0,0,00:00:00/152-19:17:47,115) [blkcg_punt_bio]
(root,0,0,00:00:00/152-19:17:47,116) [tpm_dev_wq]
(root,0,0,00:00:00/152-19:17:47,117) [ata_sff]
(root,0,0,00:00:00/152-19:17:47,118) [md]
(root,0,0,00:00:00/152-19:17:47,119) [edac-poller]
(root,0,0,00:00:00/152-19:17:47,120) [devfreq_wq]
(root,0,0,00:00:00/152-19:17:47,121) [watchdogd]
(root,0,0,00:23:00/152-19:17:47,128) [kswapd0]
(root,0,0,00:00:00/152-19:17:47,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/152-19:17:47,131) [kthrotld]
(root,0,0,00:00:00/152-19:17:47,132) [acpi_thermal_pm]
(root,0,0,00:00:00/152-19:17:47,133) [nvme-wq]
(root,0,0,00:00:00/152-19:17:47,134) [nvme-reset-wq]
(root,0,0,00:00:00/152-19:17:47,135) [nvme-delete-wq]
(root,0,0,00:00:00/152-19:17:47,137) [ipv6_addrconf]
(root,0,0,00:00:00/152-19:17:47,146) [kstrp]
(root,0,0,00:00:00/152-19:17:47,147) [kworker/u17:0]
(root,0,0,00:00:00/152-19:17:47,162) [charger_manager]
(root,0,0,00:00:00/152-19:17:46,210) [scsi_eh_0]
(root,0,0,00:00:00/152-19:17:46,211) [scsi_tmf_0]
(root,0,0,00:00:00/152-19:17:46,212) [scsi_eh_1]
(root,0,0,00:00:00/152-19:17:46,213) [scsi_tmf_1]
(root,0,0,00:00:00/152-19:17:46,214) [scsi_eh_2]
(root,0,0,00:00:00/152-19:17:46,215) [scsi_tmf_2]
(root,0,0,00:00:00/152-19:17:46,216) [scsi_eh_3]
(root,0,0,00:00:00/152-19:17:46,217) [scsi_tmf_3]
(root,0,0,00:00:00/152-19:17:46,218) [scsi_eh_4]
(root,0,0,00:00:00/152-19:17:46,219) [scsi_tmf_4]
(root,0,0,00:00:00/152-19:17:46,220) [scsi_eh_5]
(root,0,0,00:00:00/152-19:17:46,221) [scsi_tmf_5]
(root,0,0,00:03:25/152-19:17:46,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:24/152-19:17:46,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:08/152-19:17:46,237) [kworker/1:1H-kblockd]
(root,0,0,00:46:06/152-19:17:46,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:35/152-19:17:46,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:16/152-19:17:46,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:20/152-19:17:46,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:12/152-19:17:46,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/152-19:17:46,248) [md1_raid1]
(root,0,0,00:00:36/152-19:17:46,251) [md0_raid1]
(root,0,0,01:09:46/152-19:17:46,253) [md2_raid1]
(root,0,0,00:00:00/152-19:17:45,268) [raid5wq]
(root,0,0,00:07:05/152-19:17:42,291) [jbd2/md2-8]
(root,0,0,00:00:00/152-19:17:42,292) [ext4-rsv-conver]
(root,226600,123808,00:36:19/152-19:17:42,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/41:16,344) [kworker/4:3-events]
(root,0,0,00:00:00/152-19:17:42,348) [rpciod]
(root,0,0,00:00:00/152-19:17:42,349) [xprtiod]
(root,0,0,00:00:00/152-19:17:42,353) [spl_system_task]
(root,0,0,00:00:00/152-19:17:42,354) [spl_delay_taskq]
(root,0,0,00:00:00/152-19:17:42,355) [spl_dynamic_tas]
(root,0,0,00:00:00/152-19:17:42,356) [spl_kmem_cache]
(root,0,0,00:00:00/152-19:17:41,361) [zvol]
(root,0,0,00:00:00/152-19:17:41,362) [arc_prune]
(root,0,0,00:03:33/152-19:17:41,363) [arc_evict]
(root,0,0,00:03:19/152-19:17:41,364) [arc_reap]
(root,0,0,00:00:00/152-19:17:41,366) [dbu_evict]
(root,0,0,00:03:12/152-19:17:41,367) [dbuf_evict]
(root,22980,3960,00:17:06/152-19:17:41,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/152-19:17:41,376) [z_vdev_file]
(root,0,0,00:01:46/152-19:17:41,377) [l2arc_feed]
(root,0,0,00:00:00/152-19:17:41,485) [cryptd]
(root,3860,2148,00:00:05/152-19:17:41,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/152-19:17:41,522) [jbd2/md1-8]
(root,0,0,00:00:00/152-19:17:41,523) [ext4-rsv-conver]
(_rpc,7776,4464,00:00:23/152-19:17:39,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3464,00:00:10/152-19:17:39,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:31:02/152-19:17:39,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:05:01/152-19:17:39,571) /usr/sbin/watchdog-mux
(root,12248,4732,00:00:03/152-19:17:39,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:12:17/152-19:17:39,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:15/152-19:17:39,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4660,00:01:22/152-19:17:39,578) /lib/systemd/systemd-logind
(root,223768,3828,00:11:24/152-19:17:39,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2768,00:00:00/152-19:17:39,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/152-19:17:39,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,354192,11748,00:00:36/40-12:13:32,585) pvedaemon worker
(root,4084,1676,00:00:05/152-19:17:39,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1388,00:00:00/152-19:17:38,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:18/152-19:17:38,768) bpfilter_umh
(root,13808,4980,00:10:52/152-19:17:38,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/152-19:17:38,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3268,00:33:24/152-19:17:38,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,729308,53888,02:39:35/152-19:17:38,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:42/152-19:17:38,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3636,00:00:30/152-19:17:38,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5824,00:00:06/152-19:17:38,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:15/152-19:17:37,1061) /usr/sbin/cron -f
(root,303168,37852,14:01:56/152-19:17:36,1068) pvestatd
(root,304364,30868,05:43:04/152-19:17:36,1069) pve-firewall
(root,353760,3968,00:01:48/152-19:17:36,1093) pvedaemon
(root,336416,10976,00:12:56/152-19:17:36,1101) pve-ha-crm
(www-data,355204,144820,00:03:56/152-19:17:35,1102) pveproxy
(www-data,68856,57988,00:02:30/152-19:17:35,1109) spiceproxy
(root,335964,31780,00:21:17/152-19:17:35,1111) pve-ha-lrm
(root,5971584,3463352,7-21:45:18/152-19:17:34,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:11/152-19:17:34,1129) [kvm-nx-lpage-re]
(root,0,0,11:34:30/152-19:17:34,1148) [vhost-1125]
(root,0,0,09:47:02/152-19:17:33,1167) [vhost-1125]
(root,0,0,01:03:23/152-19:17:33,1172) [kvm-pit/1125]
(root,13991252,8555876,61-14:17:34/152-19:17:30,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:26/152-19:17:30,1188) [kvm-nx-lpage-re]
(root,0,0,00:21:35/152-19:17:30,1207) [vhost-1184]
(root,0,0,01:11:45/152-19:17:30,1212) [kvm-pit/1184]
(root,0,0,00:00:00/152-19:17:27,1214) [dio/md2]
(root,3623364,2299520,37-02:46:03/152-19:17:26,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:41/152-19:17:26,1267) [kvm-nx-lpage-re]
(root,0,0,04:57:39/152-19:17:26,1286) [vhost-1263]
(root,0,0,00:00:00/152-19:17:26,1289) [kvm-pit/1263]
(root,0,0,00:00:00/152-19:17:25,1295) [ib-comp-wq]
(root,0,0,00:00:00/152-19:17:25,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/152-19:17:25,1297) [ib_mcast]
(root,0,0,00:00:00/152-19:17:25,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/152-19:17:25,1299) [rdma_cm]
(root,0,0,00:00:00/152-19:17:25,1300) [cifsiod]
(root,0,0,00:00:00/152-19:17:25,1301) [smb3decryptd]
(root,0,0,00:00:00/152-19:17:25,1302) [cifsfileinfoput]
(root,0,0,00:00:00/152-19:17:25,1303) [cifsoplockd]
(root,0,0,00:13:13/152-19:17:25,1305) [cifsd]
(root,0,0,00:04:58/152-19:17:25,1340) [cifsd]
(root,6017528,4163224,10-01:22:24/152-19:17:22,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:50/152-19:17:22,1358) [kvm-nx-lpage-re]
(root,0,0,01:58:15/152-19:17:22,1377) [vhost-1354]
(root,0,0,00:00:00/152-19:17:22,1382) [kvm-pit/1354]
(root,21039768,16907836,11-11:04:23/152-19:17:18,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:02/152-19:17:18,1398) [kvm-nx-lpage-re]
(root,0,0,01:22:01/152-19:17:17,1417) [vhost-1394]
(root,0,0,00:00:00/152-19:17:17,1422) [kvm-pit/1394]
(root,19321056,5395536,8-13:04:30/152-19:17:14,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:30/152-19:17:14,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:46/152-19:17:13,1487) [vhost-1464]
(root,0,0,00:00:00/152-19:17:13,1492) [kvm-pit/1464]
(root,6037668,4273272,33-17:50:10/152-19:17:10,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:55/152-19:17:10,1511) [kvm-nx-lpage-re]
(root,0,0,01:32:11/152-19:17:09,1531) [vhost-1507]
(root,0,0,00:00:00/152-19:17:09,1534) [kvm-pit/1507]
(root,0,0,00:00:00/36:16,1846) [kworker/7:3-events]
(root,0,0,00:00:00/34:16,2398) [kworker/3:3-mm_percpu_wq]
(root,0,0,00:00:00/33:16,2666) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/25:16,4797) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/22:52,5543) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/22:16,5728) [kworker/1:1-events]
(root,0,0,00:00:00/21:16,6002) [kworker/4:1-cgroup_destroy]
(root,0,0,00:00:00/17:16,7096) [kworker/0:0-events]
(root,0,0,00:00:00/15:16,7642) [kworker/2:1-events]
(root,0,0,00:00:00/11:16,8726) [kworker/7:0-cgroup_destroy]
(root,0,0,00:00:00/09:16,9293) [kworker/5:3-cgroup_destroy]
(root,0,0,00:00:00/07:24,9745) [kworker/6:2-events]
(root,0,0,00:00:00/05:53,10219) [kworker/u16:2]
(root,0,0,00:00:00/04:16,10706) [kworker/1:0-events]
(root,0,0,00:00:00/04:16,10707) [kworker/1:3-cgroup_destroy]
(root,0,0,00:00:00/02:16,11264) [kworker/5:0-mm_percpu_wq]
(root,0,0,00:00:00/02:16,11266) [kworker/5:2]
(root,0,0,00:00:00/01:16,11561) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/01:16,11562) [kworker/4:2-events]
(root,0,0,00:00:00/00:16,11840) [kworker/2:0-cgroup_destroy]
(root,7188,3300,00:00:00/00:00,11947) /bin/bash /usr/bin/check_mk_agent
(root,7632,2708,00:00:00/00:00,11973) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,992,00:00:00/00:00,11974) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(www-data,76760,54660,00:00:00/01:55:14,12751) spiceproxy worker
(root,86168,2304,00:00:00/01:55:14,12753) /usr/sbin/pvefw-logger
(www-data,367692,137684,00:00:00/01:55:14,12761) pveproxy worker
(www-data,355900,131608,00:00:00/01:55:14,12762) pveproxy worker
(www-data,355900,131360,00:00:00/01:55:14,12763) pveproxy worker
(root,362260,16036,00:01:38/99-09:24:04,18556) pvedaemon worker
(root,0,0,00:00:00/01:07:16,25731) [kworker/5:1-events]
(root,362584,18776,00:02:01/126-04:19:13,27309) pvedaemon worker
(root,0,0,00:00:00/01:00:15,27634) [kworker/6:1-dio/md2]
(root,18698116,10486856,5-10:13:14/126-15:51:39,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:20/126-15:51:39,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:13/126-15:51:39,28619) [vhost-28596]
(root,0,0,01:00:15/126-15:51:39,28626) [kvm-pit/28596]
(root,0,0,00:00:00/54:51,29095) [kworker/0:1-events]
(root,0,0,00:00:00/51:16,30106) [kworker/2:3-events]
(postfix,43844,7496,00:00:00/48:28,30797) pickup -l -t unix -u -c

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-22 00:55

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42e98fe3f0

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,6876,00:15:26/151-09:19:39,1) /sbin/init
(root,0,0,00:00:08/151-09:19:39,2) [kthreadd]
(root,0,0,00:00:00/151-09:19:39,3) [rcu_gp]
(root,0,0,00:00:00/151-09:19:39,4) [rcu_par_gp]
(root,0,0,00:00:00/151-09:19:39,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/151-09:19:39,9) [mm_percpu_wq]
(root,0,0,00:04:18/151-09:19:39,10) [ksoftirqd/0]
(root,0,0,00:31:48/151-09:19:39,11) [rcu_sched]
(root,0,0,00:00:37/151-09:19:39,12) [migration/0]
(root,0,0,00:00:00/151-09:19:39,13) [idle_inject/0]
(root,0,0,00:00:00/151-09:19:39,14) [cpuhp/0]
(root,0,0,00:00:00/151-09:19:39,15) [cpuhp/1]
(root,0,0,00:00:00/151-09:19:39,16) [idle_inject/1]
(root,0,0,00:00:37/151-09:19:39,17) [migration/1]
(root,0,0,00:03:08/151-09:19:39,18) [ksoftirqd/1]
(root,0,0,00:00:00/151-09:19:39,20) [kworker/1:0H]
(root,0,0,00:00:00/151-09:19:39,21) [cpuhp/2]
(root,0,0,00:00:00/151-09:19:39,22) [idle_inject/2]
(root,0,0,00:00:36/151-09:19:39,23) [migration/2]
(root,0,0,00:01:59/151-09:19:39,24) [ksoftirqd/2]
(root,0,0,00:00:00/151-09:19:39,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/151-09:19:39,27) [cpuhp/3]
(root,0,0,00:00:00/151-09:19:39,28) [idle_inject/3]
(root,0,0,00:00:48/151-09:19:39,29) [migration/3]
(root,0,0,00:01:26/151-09:19:39,30) [ksoftirqd/3]
(root,0,0,00:00:00/151-09:19:39,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/151-09:19:39,33) [cpuhp/4]
(root,0,0,00:00:00/151-09:19:39,34) [idle_inject/4]
(root,0,0,00:00:36/151-09:19:39,35) [migration/4]
(root,0,0,00:01:06/151-09:19:39,36) [ksoftirqd/4]
(root,0,0,00:00:00/151-09:19:39,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/151-09:19:39,39) [cpuhp/5]
(root,0,0,00:00:00/151-09:19:39,40) [idle_inject/5]
(root,0,0,00:00:36/151-09:19:39,41) [migration/5]
(root,0,0,00:00:59/151-09:19:39,42) [ksoftirqd/5]
(root,0,0,00:00:00/151-09:19:39,44) [kworker/5:0H]
(root,0,0,00:00:00/151-09:19:39,45) [cpuhp/6]
(root,0,0,00:00:00/151-09:19:39,46) [idle_inject/6]
(root,0,0,00:00:34/151-09:19:39,47) [migration/6]
(root,0,0,00:09:09/151-09:19:39,48) [ksoftirqd/6]
(root,0,0,00:00:00/151-09:19:39,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/151-09:19:39,51) [cpuhp/7]
(root,0,0,00:00:00/151-09:19:39,52) [idle_inject/7]
(root,0,0,00:00:42/151-09:19:39,53) [migration/7]
(root,0,0,00:23:30/151-09:19:39,54) [ksoftirqd/7]
(root,0,0,00:00:00/151-09:19:39,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/151-09:19:39,57) [kdevtmpfs]
(root,0,0,00:00:00/151-09:19:39,58) [netns]
(root,0,0,00:00:00/151-09:19:39,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/151-09:19:39,60) [kauditd]
(root,0,0,00:00:04/151-09:19:39,62) [khungtaskd]
(root,0,0,00:00:00/151-09:19:39,63) [oom_reaper]
(root,0,0,00:00:00/151-09:19:39,64) [writeback]
(root,0,0,00:00:00/151-09:19:39,65) [kcompactd0]
(root,0,0,00:00:00/151-09:19:39,66) [ksmd]
(root,0,0,00:03:42/151-09:19:39,67) [khugepaged]
(root,0,0,00:00:00/151-09:19:39,113) [kintegrityd]
(root,0,0,00:00:00/151-09:19:39,114) [kblockd]
(root,0,0,00:00:00/151-09:19:39,115) [blkcg_punt_bio]
(root,0,0,00:00:00/151-09:19:39,116) [tpm_dev_wq]
(root,0,0,00:00:00/151-09:19:39,117) [ata_sff]
(root,0,0,00:00:00/151-09:19:39,118) [md]
(root,0,0,00:00:00/151-09:19:39,119) [edac-poller]
(root,0,0,00:00:00/151-09:19:39,120) [devfreq_wq]
(root,0,0,00:00:00/151-09:19:39,121) [watchdogd]
(root,0,0,00:22:50/151-09:19:39,128) [kswapd0]
(root,0,0,00:00:00/151-09:19:39,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/151-09:19:39,131) [kthrotld]
(root,0,0,00:00:00/151-09:19:39,132) [acpi_thermal_pm]
(root,0,0,00:00:00/151-09:19:39,133) [nvme-wq]
(root,0,0,00:00:00/151-09:19:39,134) [nvme-reset-wq]
(root,0,0,00:00:00/151-09:19:39,135) [nvme-delete-wq]
(root,0,0,00:00:00/151-09:19:39,137) [ipv6_addrconf]
(root,0,0,00:00:00/151-09:19:39,146) [kstrp]
(root,0,0,00:00:00/151-09:19:39,147) [kworker/u17:0]
(root,0,0,00:00:00/151-09:19:39,162) [charger_manager]
(root,0,0,00:00:00/151-09:19:38,210) [scsi_eh_0]
(root,0,0,00:00:00/151-09:19:38,211) [scsi_tmf_0]
(root,0,0,00:00:00/151-09:19:38,212) [scsi_eh_1]
(root,0,0,00:00:00/151-09:19:38,213) [scsi_tmf_1]
(root,0,0,00:00:00/151-09:19:38,214) [scsi_eh_2]
(root,0,0,00:00:00/151-09:19:38,215) [scsi_tmf_2]
(root,0,0,00:00:00/151-09:19:38,216) [scsi_eh_3]
(root,0,0,00:00:00/151-09:19:38,217) [scsi_tmf_3]
(root,0,0,00:00:00/151-09:19:38,218) [scsi_eh_4]
(root,0,0,00:00:00/151-09:19:38,219) [scsi_tmf_4]
(root,0,0,00:00:00/151-09:19:38,220) [scsi_eh_5]
(root,0,0,00:00:00/151-09:19:38,221) [scsi_tmf_5]
(root,0,0,00:03:20/151-09:19:38,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:18/151-09:19:38,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:02/151-09:19:38,237) [kworker/1:1H-kblockd]
(root,0,0,00:45:34/151-09:19:38,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:28/151-09:19:38,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:10/151-09:19:38,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:14/151-09:19:38,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:07/151-09:19:38,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/151-09:19:38,248) [md1_raid1]
(root,0,0,00:00:29/151-09:19:38,251) [md0_raid1]
(root,0,0,01:03:08/151-09:19:38,253) [md2_raid1]
(root,0,0,00:00:00/151-09:19:37,268) [raid5wq]
(root,0,0,00:07:01/151-09:19:34,291) [jbd2/md2-8]
(root,0,0,00:00:00/151-09:19:34,292) [ext4-rsv-conver]
(root,185356,86032,00:35:52/151-09:19:34,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/151-09:19:34,348) [rpciod]
(root,0,0,00:00:00/151-09:19:34,349) [xprtiod]
(root,0,0,00:00:00/151-09:19:34,353) [spl_system_task]
(root,0,0,00:00:00/151-09:19:34,354) [spl_delay_taskq]
(root,0,0,00:00:00/151-09:19:34,355) [spl_dynamic_tas]
(root,0,0,00:00:00/151-09:19:34,356) [spl_kmem_cache]
(root,0,0,00:00:00/151-09:19:33,361) [zvol]
(root,0,0,00:00:00/151-09:19:33,362) [arc_prune]
(root,0,0,00:03:31/151-09:19:33,363) [arc_evict]
(root,0,0,00:03:17/151-09:19:33,364) [arc_reap]
(root,0,0,00:00:00/151-09:19:33,366) [dbu_evict]
(root,0,0,00:03:11/151-09:19:33,367) [dbuf_evict]
(root,22980,3960,00:16:56/151-09:19:33,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/151-09:19:33,376) [z_vdev_file]
(root,0,0,00:01:45/151-09:19:33,377) [l2arc_feed]
(root,0,0,00:00:00/151-09:19:33,485) [cryptd]
(root,3860,2148,00:00:05/151-09:19:33,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/151-09:19:33,522) [jbd2/md1-8]
(root,0,0,00:00:00/151-09:19:33,523) [ext4-rsv-conver]
(_rpc,7776,4464,00:00:23/151-09:19:31,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3464,00:00:10/151-09:19:31,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:30:45/151-09:19:31,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:04:59/151-09:19:31,571) /usr/sbin/watchdog-mux
(root,12248,4736,00:00:03/151-09:19:31,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:12:10/151-09:19:31,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:15/151-09:19:31,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4660,00:01:22/151-09:19:31,578) /lib/systemd/systemd-logind
(root,223768,3572,00:11:16/151-09:19:31,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2768,00:00:00/151-09:19:31,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/151-09:19:31,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,354192,11748,00:00:35/39-02:15:24,585) pvedaemon worker
(root,4084,1676,00:00:05/151-09:19:31,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1388,00:00:00/151-09:19:30,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:15/151-09:19:30,768) bpfilter_umh
(root,13808,4980,00:10:44/151-09:19:30,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/151-09:19:30,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3268,00:33:05/151-09:19:30,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,735512,57020,02:38:10/151-09:19:30,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:42/151-09:19:30,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3636,00:00:30/151-09:19:30,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5896,00:00:06/151-09:19:30,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:15/151-09:19:29,1061) /usr/sbin/cron -f
(root,303168,37856,13:53:44/151-09:19:28,1068) pvestatd
(root,304364,30872,05:39:31/151-09:19:28,1069) pve-firewall
(root,353760,3968,00:01:47/151-09:19:28,1093) pvedaemon
(root,336416,10980,00:12:49/151-09:19:28,1101) pve-ha-crm
(www-data,355152,141596,00:03:53/151-09:19:27,1102) pveproxy
(www-data,68844,56636,00:02:28/151-09:19:27,1109) spiceproxy
(root,335964,31784,00:21:05/151-09:19:27,1111) pve-ha-lrm
(root,5963000,3414544,7-19:59:20/151-09:19:26,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:11/151-09:19:26,1129) [kvm-nx-lpage-re]
(root,0,0,11:28:15/151-09:19:26,1148) [vhost-1125]
(root,0,0,09:41:45/151-09:19:25,1167) [vhost-1125]
(root,0,0,01:02:52/151-09:19:25,1172) [kvm-pit/1125]
(root,13986956,8552976,60-00:35:11/151-09:19:22,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:23/151-09:19:22,1188) [kvm-nx-lpage-re]
(root,0,0,00:21:28/151-09:19:22,1207) [vhost-1184]
(root,0,0,01:11:08/151-09:19:22,1212) [kvm-pit/1184]
(root,0,0,00:00:00/151-09:19:19,1214) [dio/md2]
(root,3614528,2290580,36-18:00:22/151-09:19:18,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:41/151-09:19:18,1267) [kvm-nx-lpage-re]
(root,0,0,04:55:17/151-09:19:18,1286) [vhost-1263]
(root,0,0,00:00:00/151-09:19:18,1289) [kvm-pit/1263]
(root,0,0,00:00:00/151-09:19:17,1295) [ib-comp-wq]
(root,0,0,00:00:00/151-09:19:17,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/151-09:19:17,1297) [ib_mcast]
(root,0,0,00:00:00/151-09:19:17,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/151-09:19:17,1299) [rdma_cm]
(root,0,0,00:00:00/151-09:19:17,1300) [cifsiod]
(root,0,0,00:00:00/151-09:19:17,1301) [smb3decryptd]
(root,0,0,00:00:00/151-09:19:17,1302) [cifsfileinfoput]
(root,0,0,00:00:00/151-09:19:17,1303) [cifsoplockd]
(root,0,0,00:13:07/151-09:19:17,1305) [cifsd]
(root,0,0,00:04:55/151-09:19:17,1340) [cifsd]
(root,6013236,4158224,9-23:02:58/151-09:19:14,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:50/151-09:19:14,1358) [kvm-nx-lpage-re]
(root,0,0,01:57:16/151-09:19:14,1377) [vhost-1354]
(root,0,0,00:00:00/151-09:19:14,1382) [kvm-pit/1354]
(root,21035476,16901172,11-05:07:08/151-09:19:10,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:00/151-09:19:10,1398) [kvm-nx-lpage-re]
(root,0,0,01:21:00/151-09:19:09,1417) [vhost-1394]
(root,0,0,00:00:00/151-09:19:09,1422) [kvm-pit/1394]
(root,19312464,5384708,8-11:06:04/151-09:19:06,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:30/151-09:19:06,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:45/151-09:19:05,1487) [vhost-1464]
(root,0,0,00:00:00/151-09:19:05,1492) [kvm-pit/1464]
(root,6033376,4269384,33-12:26:18/151-09:19:02,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:54/151-09:19:02,1511) [kvm-nx-lpage-re]
(root,0,0,01:31:07/151-09:19:01,1531) [vhost-1507]
(root,0,0,00:00:00/151-09:19:01,1534) [kvm-pit/1507]
(root,0,0,00:00:00/47:08,1872) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/44:54,2478) [kworker/0:0-rcu_gp]
(root,0,0,00:00:00/26:08,7637) [kworker/1:3-cgroup_destroy]
(root,0,0,00:00:00/25:08,7905) [kworker/3:0-events]
(root,0,0,00:00:00/24:08,8173) [kworker/5:3-events]
(root,0,0,00:00:00/23:08,8438) [kworker/6:2-dio/md2]
(root,0,0,00:00:00/20:23,9110) [kworker/u16:0-events_power_efficient]
(root,0,0,00:00:00/20:08,9248) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/19:08,9523) [kworker/2:2-mm_percpu_wq]
(root,0,0,00:00:00/15:21,10482) [kworker/u16:1-flush-9:2]
(root,0,0,00:00:00/14:08,10891) [kworker/0:3-events]
(root,0,0,00:00:00/13:08,11154) [kworker/4:1-events]
(root,0,0,00:00:00/12:08,11419) [kworker/7:1-events]
(root,0,0,00:00:00/11:08,11692) [kworker/5:0-cgroup_destroy]
(postfix,43844,7648,00:00:00/09:06,12236) pickup -l -t unix -u -c
(root,0,0,00:00:00/08:08,12505) [kworker/3:1]
(root,0,0,00:00:00/07:08,12774) [kworker/1:1-events]
(root,0,0,00:00:00/05:08,13315) [kworker/6:0-events]
(root,0,0,00:00:00/04:08,13585) [kworker/5:1-events]
(root,0,0,00:00:00/02:48,13912) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/02:08,14120) [kworker/4:2-events]
(root,0,0,00:00:00/02:08,14123) [kworker/4:3-cgroup_destroy]
(root,0,0,00:00:00/00:08,14820) [kworker/1:0-events]
(root,0,0,00:00:00/00:08,14821) [kworker/1:2-events]
(root,7188,3224,00:00:00/00:00,14837) /bin/bash /usr/bin/check_mk_agent
(root,7632,2692,00:00:00/00:00,14863) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,996,00:00:00/00:00,14864) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362260,16040,00:01:37/97-23:25:56,18556) pvedaemon worker
(root,0,0,00:00:00/01:16:08,26112) [kworker/7:0-rcu_gp]
(root,362584,18780,00:02:00/124-18:21:05,27309) pvedaemon worker
(root,18775036,10482704,5-08:40:59/125-05:53:31,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:19/125-05:53:31,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:12/125-05:53:31,28619) [vhost-28596]
(root,0,0,00:59:38/125-05:53:31,28626) [kvm-pit/28596]
(root,86168,1988,00:00:03/15:57:07,30153) /usr/sbin/pvefw-logger
(www-data,76900,54264,00:00:00/15:57:07,30159) spiceproxy worker
(www-data,355868,130560,00:00:00/15:57:06,30167) pveproxy worker
(www-data,367828,136808,00:00:00/15:57:06,30168) pveproxy worker
(www-data,367416,136900,00:00:00/15:57:06,30169) pveproxy worker

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-20 14:56

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42bcabc8c5

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,6828,00:15:22/150-19:56:40,1) /sbin/init
(root,0,0,00:00:08/150-19:56:40,2) [kthreadd]
(root,0,0,00:00:00/150-19:56:40,3) [rcu_gp]
(root,0,0,00:00:00/150-19:56:40,4) [rcu_par_gp]
(root,0,0,00:00:00/150-19:56:40,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/150-19:56:40,9) [mm_percpu_wq]
(root,0,0,00:04:17/150-19:56:40,10) [ksoftirqd/0]
(root,0,0,00:31:41/150-19:56:40,11) [rcu_sched]
(root,0,0,00:00:37/150-19:56:40,12) [migration/0]
(root,0,0,00:00:00/150-19:56:40,13) [idle_inject/0]
(root,0,0,00:00:00/150-19:56:40,14) [cpuhp/0]
(root,0,0,00:00:00/150-19:56:40,15) [cpuhp/1]
(root,0,0,00:00:00/150-19:56:40,16) [idle_inject/1]
(root,0,0,00:00:37/150-19:56:40,17) [migration/1]
(root,0,0,00:03:08/150-19:56:40,18) [ksoftirqd/1]
(root,0,0,00:00:00/150-19:56:40,20) [kworker/1:0H]
(root,0,0,00:00:00/150-19:56:40,21) [cpuhp/2]
(root,0,0,00:00:00/150-19:56:40,22) [idle_inject/2]
(root,0,0,00:00:36/150-19:56:40,23) [migration/2]
(root,0,0,00:01:58/150-19:56:40,24) [ksoftirqd/2]
(root,0,0,00:00:00/150-19:56:40,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/150-19:56:40,27) [cpuhp/3]
(root,0,0,00:00:00/150-19:56:40,28) [idle_inject/3]
(root,0,0,00:00:48/150-19:56:40,29) [migration/3]
(root,0,0,00:01:26/150-19:56:40,30) [ksoftirqd/3]
(root,0,0,00:00:00/150-19:56:40,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/150-19:56:40,33) [cpuhp/4]
(root,0,0,00:00:00/150-19:56:40,34) [idle_inject/4]
(root,0,0,00:00:36/150-19:56:40,35) [migration/4]
(root,0,0,00:01:06/150-19:56:40,36) [ksoftirqd/4]
(root,0,0,00:00:00/150-19:56:40,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/150-19:56:40,39) [cpuhp/5]
(root,0,0,00:00:00/150-19:56:40,40) [idle_inject/5]
(root,0,0,00:00:36/150-19:56:40,41) [migration/5]
(root,0,0,00:00:59/150-19:56:40,42) [ksoftirqd/5]
(root,0,0,00:00:00/150-19:56:40,44) [kworker/5:0H]
(root,0,0,00:00:00/150-19:56:40,45) [cpuhp/6]
(root,0,0,00:00:00/150-19:56:40,46) [idle_inject/6]
(root,0,0,00:00:34/150-19:56:40,47) [migration/6]
(root,0,0,00:09:07/150-19:56:40,48) [ksoftirqd/6]
(root,0,0,00:00:00/150-19:56:40,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/150-19:56:40,51) [cpuhp/7]
(root,0,0,00:00:00/150-19:56:40,52) [idle_inject/7]
(root,0,0,00:00:42/150-19:56:40,53) [migration/7]
(root,0,0,00:23:26/150-19:56:40,54) [ksoftirqd/7]
(root,0,0,00:00:00/150-19:56:40,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/150-19:56:40,57) [kdevtmpfs]
(root,0,0,00:00:00/150-19:56:40,58) [netns]
(root,0,0,00:00:00/150-19:56:40,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/150-19:56:40,60) [kauditd]
(root,0,0,00:00:04/150-19:56:40,62) [khungtaskd]
(root,0,0,00:00:00/150-19:56:40,63) [oom_reaper]
(root,0,0,00:00:00/150-19:56:40,64) [writeback]
(root,0,0,00:00:00/150-19:56:40,65) [kcompactd0]
(root,0,0,00:00:00/150-19:56:40,66) [ksmd]
(root,0,0,00:03:42/150-19:56:40,67) [khugepaged]
(root,0,0,00:00:00/150-19:56:40,113) [kintegrityd]
(root,0,0,00:00:00/150-19:56:40,114) [kblockd]
(root,0,0,00:00:00/150-19:56:40,115) [blkcg_punt_bio]
(root,0,0,00:00:00/150-19:56:40,116) [tpm_dev_wq]
(root,0,0,00:00:00/150-19:56:40,117) [ata_sff]
(root,0,0,00:00:00/150-19:56:40,118) [md]
(root,0,0,00:00:00/150-19:56:40,119) [edac-poller]
(root,0,0,00:00:00/150-19:56:40,120) [devfreq_wq]
(root,0,0,00:00:00/150-19:56:40,121) [watchdogd]
(root,0,0,00:22:47/150-19:56:40,128) [kswapd0]
(root,0,0,00:00:00/150-19:56:40,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/150-19:56:40,131) [kthrotld]
(root,0,0,00:00:00/150-19:56:40,132) [acpi_thermal_pm]
(root,0,0,00:00:00/150-19:56:40,133) [nvme-wq]
(root,0,0,00:00:00/150-19:56:40,134) [nvme-reset-wq]
(root,0,0,00:00:00/150-19:56:40,135) [nvme-delete-wq]
(root,0,0,00:00:00/150-19:56:40,137) [ipv6_addrconf]
(root,0,0,00:00:00/150-19:56:40,146) [kstrp]
(root,0,0,00:00:00/150-19:56:40,147) [kworker/u17:0]
(root,0,0,00:00:00/150-19:56:40,162) [charger_manager]
(root,0,0,00:00:00/150-19:56:39,210) [scsi_eh_0]
(root,0,0,00:00:00/150-19:56:39,211) [scsi_tmf_0]
(root,0,0,00:00:00/150-19:56:39,212) [scsi_eh_1]
(root,0,0,00:00:00/150-19:56:39,213) [scsi_tmf_1]
(root,0,0,00:00:00/150-19:56:39,214) [scsi_eh_2]
(root,0,0,00:00:00/150-19:56:39,215) [scsi_tmf_2]
(root,0,0,00:00:00/150-19:56:39,216) [scsi_eh_3]
(root,0,0,00:00:00/150-19:56:39,217) [scsi_tmf_3]
(root,0,0,00:00:00/150-19:56:39,218) [scsi_eh_4]
(root,0,0,00:00:00/150-19:56:39,219) [scsi_tmf_4]
(root,0,0,00:00:00/150-19:56:39,220) [scsi_eh_5]
(root,0,0,00:00:00/150-19:56:39,221) [scsi_tmf_5]
(root,0,0,00:03:19/150-19:56:39,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:17/150-19:56:39,229) [kworker/0:1H-kblockd]
(root,0,0,00:04:01/150-19:56:39,237) [kworker/1:1H-kblockd]
(root,0,0,00:45:25/150-19:56:39,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:28/150-19:56:39,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:10/150-19:56:39,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:14/150-19:56:39,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:06/150-19:56:39,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/150-19:56:39,248) [md1_raid1]
(root,0,0,00:00:29/150-19:56:39,251) [md0_raid1]
(root,0,0,01:03:00/150-19:56:39,253) [md2_raid1]
(root,0,0,00:00:00/150-19:56:38,268) [raid5wq]
(root,0,0,00:07:00/150-19:56:35,291) [jbd2/md2-8]
(root,0,0,00:00:00/150-19:56:35,292) [ext4-rsv-conver]
(root,283496,162028,00:35:41/150-19:56:35,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/150-19:56:35,348) [rpciod]
(root,0,0,00:00:00/150-19:56:35,349) [xprtiod]
(root,0,0,00:00:00/150-19:56:35,353) [spl_system_task]
(root,0,0,00:00:00/150-19:56:35,354) [spl_delay_taskq]
(root,0,0,00:00:00/150-19:56:35,355) [spl_dynamic_tas]
(root,0,0,00:00:00/150-19:56:35,356) [spl_kmem_cache]
(root,0,0,00:00:00/150-19:56:34,361) [zvol]
(root,0,0,00:00:00/150-19:56:34,362) [arc_prune]
(root,0,0,00:03:30/150-19:56:34,363) [arc_evict]
(root,0,0,00:03:16/150-19:56:34,364) [arc_reap]
(root,0,0,00:00:00/150-19:56:34,366) [dbu_evict]
(root,0,0,00:03:10/150-19:56:34,367) [dbuf_evict]
(root,22980,3988,00:16:52/150-19:56:34,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/150-19:56:34,376) [z_vdev_file]
(root,0,0,00:01:44/150-19:56:34,377) [l2arc_feed]
(root,0,0,00:00:00/150-19:56:34,485) [cryptd]
(root,3860,2148,00:00:05/150-19:56:34,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/150-19:56:34,522) [jbd2/md1-8]
(root,0,0,00:00:00/150-19:56:34,523) [ext4-rsv-conver]
(_rpc,7776,4464,00:00:23/150-19:56:32,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3492,00:00:10/150-19:56:32,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:30:40/150-19:56:32,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:04:58/150-19:56:32,571) /usr/sbin/watchdog-mux
(root,12248,4748,00:00:03/150-19:56:32,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:12:08/150-19:56:32,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:15/150-19:56:32,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4688,00:01:21/150-19:56:32,578) /lib/systemd/systemd-logind
(root,223768,3584,00:11:13/150-19:56:32,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2796,00:00:00/150-19:56:32,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/150-19:56:32,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,354192,11748,00:00:35/38-12:52:25,585) pvedaemon worker
(root,4084,1676,00:00:05/150-19:56:32,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1388,00:00:00/150-19:56:31,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:15/150-19:56:31,768) bpfilter_umh
(root,13808,4972,00:10:41/150-19:56:31,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/150-19:56:31,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/26:09,891) [kworker/5:1-events]
(root,878176,3268,00:32:58/150-19:56:31,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,741716,60148,02:37:36/150-19:56:31,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:41/150-19:56:31,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3648,00:00:30/150-19:56:31,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,5920,00:00:06/150-19:56:31,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:15/150-19:56:30,1061) /usr/sbin/cron -f
(root,303168,37844,13:50:33/150-19:56:29,1068) pvestatd
(root,304364,30872,05:38:06/150-19:56:29,1069) pve-firewall
(root,353760,3968,00:01:47/150-19:56:29,1093) pvedaemon
(root,336416,10980,00:12:46/150-19:56:29,1101) pve-ha-crm
(www-data,355152,142316,00:03:53/150-19:56:28,1102) pveproxy
(www-data,68844,57300,00:02:28/150-19:56:28,1109) spiceproxy
(root,335964,31784,00:21:00/150-19:56:28,1111) pve-ha-lrm
(root,5963000,3414668,7-19:16:56/150-19:56:27,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:11/150-19:56:27,1129) [kvm-nx-lpage-re]
(root,0,0,11:25:37/150-19:56:27,1148) [vhost-1125]
(root,0,0,09:39:31/150-19:56:26,1167) [vhost-1125]
(root,0,0,01:02:40/150-19:56:26,1172) [kvm-pit/1125]
(root,13986956,8550308,59-10:24:46/150-19:56:23,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:22/150-19:56:23,1188) [kvm-nx-lpage-re]
(root,0,0,00:21:26/150-19:56:23,1207) [vhost-1184]
(root,0,0,01:10:54/150-19:56:23,1212) [kvm-pit/1184]
(root,0,0,00:00:00/150-19:56:20,1214) [dio/md2]
(root,0,0,00:00:00/25:08,1254) [kworker/1:1-md]
(root,3614528,2290580,36-14:35:07/150-19:56:19,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:41/150-19:56:19,1267) [kvm-nx-lpage-re]
(root,0,0,04:54:20/150-19:56:19,1286) [vhost-1263]
(root,0,0,00:00:00/150-19:56:19,1289) [kvm-pit/1263]
(root,0,0,00:00:00/150-19:56:18,1295) [ib-comp-wq]
(root,0,0,00:00:00/150-19:56:18,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/150-19:56:18,1297) [ib_mcast]
(root,0,0,00:00:00/150-19:56:18,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/150-19:56:18,1299) [rdma_cm]
(root,0,0,00:00:00/150-19:56:18,1300) [cifsiod]
(root,0,0,00:00:00/150-19:56:18,1301) [smb3decryptd]
(root,0,0,00:00:00/150-19:56:18,1302) [cifsfileinfoput]
(root,0,0,00:00:00/150-19:56:18,1303) [cifsoplockd]
(root,0,0,00:13:06/150-19:56:18,1305) [cifsd]
(root,0,0,00:04:54/150-19:56:18,1340) [cifsd]
(root,6013236,4158116,9-22:08:10/150-19:56:15,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:50/150-19:56:15,1358) [kvm-nx-lpage-re]
(root,0,0,01:56:52/150-19:56:15,1377) [vhost-1354]
(root,0,0,00:00:00/150-19:56:15,1382) [kvm-pit/1354]
(root,21035476,16907316,11-02:22:51/150-19:56:11,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:59/150-19:56:11,1398) [kvm-nx-lpage-re]
(root,0,0,01:20:30/150-19:56:10,1417) [vhost-1394]
(root,0,0,00:00:00/150-19:56:10,1422) [kvm-pit/1394]
(root,19312464,5338412,8-10:21:58/150-19:56:07,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:30/150-19:56:07,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:45/150-19:56:06,1487) [vhost-1464]
(root,0,0,00:00:00/150-19:56:06,1492) [kvm-pit/1464]
(root,6033376,4273952,33-10:19:52/150-19:56:03,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:53/150-19:56:03,1511) [kvm-nx-lpage-re]
(root,0,0,01:30:39/150-19:56:02,1531) [vhost-1507]
(root,0,0,00:00:00/150-19:56:02,1534) [kvm-pit/1507]
(root,0,0,00:00:00/20:09,2818) [kworker/7:3-events]
(root,0,0,00:03:28/19:22,2968) [kworker/u16:3-events_unbound]
(root,0,0,00:00:00/19:12,3005) [kworker/2:1-events]
(root,0,0,00:00:00/19:07,3133) [kworker/3:0-kvm-irqfd-cleanup]
(root,0,0,00:00:20/14:15,4593) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/13:09,5014) [kworker/4:1-cgroup_destroy]
(root,0,0,00:00:00/11:09,5615) [kworker/6:2-cgroup_destroy]
(root,0,0,00:00:00/11:09,5617) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/09:47,5997) [kworker/0:0-events]
(root,0,0,00:00:00/07:09,6801) [kworker/7:0-cgroup_destroy]
(root,0,0,00:00:00/06:09,7100) [kworker/5:2-cgroup_destroy]
(postfix,43844,7604,00:00:00/05:48,7171) pickup -l -t unix -u -c
(root,0,0,00:00:00/05:09,7375) [kworker/6:3-events]
(root,0,0,00:00:00/04:19,7526) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/04:08,7651) [kworker/2:0-cgroup_destroy]
(root,5212,1796,00:00:50/03:59,7682) lzop
(root,0,0,00:00:00/02:51,7966) [kworker/3:1-events]
(root,0,0,00:00:00/02:09,8193) [kworker/2:3-cgroup_destroy]
(root,0,0,00:00:00/00:09,8734) [kworker/0:1-events]
(root,7188,3248,00:00:00/00:01,8749) /bin/bash /usr/bin/check_mk_agent
(root,7188,3196,00:00:00/00:01,8831) /bin/bash /usr/bin/check_mk_agent
(root,26344,23296,00:00:00/00:00,8912) /usr/bin/perl /usr/bin/pvecm status
(root,24304,21100,00:00:00/00:00,8913) /usr/bin/perl /usr/bin/pvecm nodes
(root,7188,3136,00:00:00/00:00,8914) /bin/bash /usr/bin/check_mk_agent
(root,7632,2716,00:00:00/00:00,8940) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,992,00:00:00/00:00,8941) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362260,16040,00:01:36/97-10:02:57,18556) pvedaemon worker
(root,0,0,00:00:00/01:07:09,21340) [kworker/4:0-mm_percpu_wq]
(root,0,0,00:02:33/53:46,25120) [kworker/u16:0-flush-9:2]
(root,0,0,00:00:00/50:09,26266) [kworker/2:2-mm_percpu_wq]
(root,362584,18780,00:01:59/124-04:58:06,27309) pvedaemon worker
(root,0,0,00:00:00/46:09,27516) [kworker/0:2-events]
(root,18793540,10484792,5-08:03:19/124-16:30:32,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:19/124-16:30:32,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:12/124-16:30:32,28619) [vhost-28596]
(root,0,0,00:59:24/124-16:30:32,28626) [kvm-pit/28596]
(root,86168,1988,00:00:00/02:34:08,30153) /usr/sbin/pvefw-logger
(www-data,76768,54388,00:00:00/02:34:08,30159) spiceproxy worker
(www-data,355868,130908,00:00:00/02:34:07,30167) pveproxy worker
(www-data,367828,136956,00:00:00/02:34:07,30168) pveproxy worker
(www-data,355604,130332,00:00:00/02:34:07,30169) pveproxy worker
(root,9796,2372,00:00:00/34:08,31011) /usr/sbin/CRON -f
(root,2380,756,00:00:00/34:08,31012) /bin/sh -c vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,330236,115068,00:00:00/34:08,31013) /usr/bin/perl -T /usr/bin/vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,339644,102368,00:00:08/34:08,31022) task UPID:node01:0000792E:4DA9D33A:673D3492:vzdump::root@pam:
(root,0,0,00:00:00/30:09,32177) [kworker/3:2-rcu_gp]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-20 01:34

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42d2611224

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7160,00:15:10/148-19:09:34,1) /sbin/init
(root,0,0,00:00:08/148-19:09:34,2) [kthreadd]
(root,0,0,00:00:00/148-19:09:34,3) [rcu_gp]
(root,0,0,00:00:00/148-19:09:34,4) [rcu_par_gp]
(root,0,0,00:00:00/148-19:09:34,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/148-19:09:34,9) [mm_percpu_wq]
(root,0,0,00:04:15/148-19:09:34,10) [ksoftirqd/0]
(root,0,0,00:31:17/148-19:09:34,11) [rcu_sched]
(root,0,0,00:00:37/148-19:09:34,12) [migration/0]
(root,0,0,00:00:00/148-19:09:34,13) [idle_inject/0]
(root,0,0,00:00:00/148-19:09:34,14) [cpuhp/0]
(root,0,0,00:00:00/148-19:09:34,15) [cpuhp/1]
(root,0,0,00:00:00/148-19:09:34,16) [idle_inject/1]
(root,0,0,00:00:37/148-19:09:34,17) [migration/1]
(root,0,0,00:03:06/148-19:09:34,18) [ksoftirqd/1]
(root,0,0,00:00:00/148-19:09:34,20) [kworker/1:0H]
(root,0,0,00:00:00/148-19:09:34,21) [cpuhp/2]
(root,0,0,00:00:00/148-19:09:34,22) [idle_inject/2]
(root,0,0,00:00:36/148-19:09:34,23) [migration/2]
(root,0,0,00:01:57/148-19:09:34,24) [ksoftirqd/2]
(root,0,0,00:00:00/148-19:09:34,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/148-19:09:34,27) [cpuhp/3]
(root,0,0,00:00:00/148-19:09:34,28) [idle_inject/3]
(root,0,0,00:00:47/148-19:09:34,29) [migration/3]
(root,0,0,00:01:25/148-19:09:34,30) [ksoftirqd/3]
(root,0,0,00:00:00/148-19:09:34,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/148-19:09:34,33) [cpuhp/4]
(root,0,0,00:00:00/148-19:09:34,34) [idle_inject/4]
(root,0,0,00:00:35/148-19:09:34,35) [migration/4]
(root,0,0,00:01:05/148-19:09:34,36) [ksoftirqd/4]
(root,0,0,00:00:00/148-19:09:34,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/148-19:09:34,39) [cpuhp/5]
(root,0,0,00:00:00/148-19:09:34,40) [idle_inject/5]
(root,0,0,00:00:35/148-19:09:34,41) [migration/5]
(root,0,0,00:00:58/148-19:09:34,42) [ksoftirqd/5]
(root,0,0,00:00:00/148-19:09:34,44) [kworker/5:0H]
(root,0,0,00:00:00/148-19:09:34,45) [cpuhp/6]
(root,0,0,00:00:00/148-19:09:34,46) [idle_inject/6]
(root,0,0,00:00:33/148-19:09:34,47) [migration/6]
(root,0,0,00:08:59/148-19:09:34,48) [ksoftirqd/6]
(root,0,0,00:00:00/148-19:09:34,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/148-19:09:34,51) [cpuhp/7]
(root,0,0,00:00:00/148-19:09:34,52) [idle_inject/7]
(root,0,0,00:00:41/148-19:09:34,53) [migration/7]
(root,0,0,00:23:00/148-19:09:34,54) [ksoftirqd/7]
(root,0,0,00:00:00/148-19:09:34,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/148-19:09:34,57) [kdevtmpfs]
(root,0,0,00:00:00/148-19:09:34,58) [netns]
(root,0,0,00:00:00/148-19:09:34,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/148-19:09:34,60) [kauditd]
(root,0,0,00:00:04/148-19:09:34,62) [khungtaskd]
(root,0,0,00:00:00/148-19:09:34,63) [oom_reaper]
(root,0,0,00:00:00/148-19:09:34,64) [writeback]
(root,0,0,00:00:00/148-19:09:34,65) [kcompactd0]
(root,0,0,00:00:00/148-19:09:34,66) [ksmd]
(root,0,0,00:03:41/148-19:09:34,67) [khugepaged]
(root,0,0,00:00:00/148-19:09:34,113) [kintegrityd]
(root,0,0,00:00:00/148-19:09:34,114) [kblockd]
(root,0,0,00:00:00/148-19:09:34,115) [blkcg_punt_bio]
(root,0,0,00:00:00/148-19:09:34,116) [tpm_dev_wq]
(root,0,0,00:00:00/148-19:09:34,117) [ata_sff]
(root,0,0,00:00:00/148-19:09:34,118) [md]
(root,0,0,00:00:00/148-19:09:34,119) [edac-poller]
(root,0,0,00:00:00/148-19:09:34,120) [devfreq_wq]
(root,0,0,00:00:00/148-19:09:34,121) [watchdogd]
(root,0,0,00:22:21/148-19:09:34,128) [kswapd0]
(root,0,0,00:00:00/148-19:09:34,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/148-19:09:34,131) [kthrotld]
(root,0,0,00:00:00/148-19:09:34,132) [acpi_thermal_pm]
(root,0,0,00:00:00/148-19:09:34,133) [nvme-wq]
(root,0,0,00:00:00/148-19:09:34,134) [nvme-reset-wq]
(root,0,0,00:00:00/148-19:09:34,135) [nvme-delete-wq]
(root,0,0,00:00:00/148-19:09:34,137) [ipv6_addrconf]
(root,0,0,00:00:00/148-19:09:34,146) [kstrp]
(root,0,0,00:00:00/148-19:09:34,147) [kworker/u17:0]
(root,0,0,00:00:00/148-19:09:34,162) [charger_manager]
(root,0,0,00:00:00/148-19:09:33,210) [scsi_eh_0]
(root,0,0,00:00:00/148-19:09:33,211) [scsi_tmf_0]
(root,0,0,00:00:00/148-19:09:33,212) [scsi_eh_1]
(root,0,0,00:00:00/148-19:09:33,213) [scsi_tmf_1]
(root,0,0,00:00:00/148-19:09:33,214) [scsi_eh_2]
(root,0,0,00:00:00/148-19:09:33,215) [scsi_tmf_2]
(root,0,0,00:00:00/148-19:09:33,216) [scsi_eh_3]
(root,0,0,00:00:00/148-19:09:33,217) [scsi_tmf_3]
(root,0,0,00:00:00/148-19:09:33,218) [scsi_eh_4]
(root,0,0,00:00:00/148-19:09:33,219) [scsi_tmf_4]
(root,0,0,00:00:00/148-19:09:33,220) [scsi_eh_5]
(root,0,0,00:00:00/148-19:09:33,221) [scsi_tmf_5]
(root,0,0,00:03:17/148-19:09:33,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:14/148-19:09:33,229) [kworker/0:1H-kblockd]
(root,0,0,00:03:59/148-19:09:33,237) [kworker/1:1H-kblockd]
(root,0,0,00:44:50/148-19:09:33,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:25/148-19:09:33,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:08/148-19:09:33,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:11/148-19:09:33,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:04/148-19:09:33,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/148-19:09:33,248) [md1_raid1]
(root,0,0,00:00:29/148-19:09:33,251) [md0_raid1]
(root,0,0,01:02:29/148-19:09:33,253) [md2_raid1]
(root,0,0,00:00:00/148-19:09:32,268) [raid5wq]
(root,0,0,00:06:55/148-19:09:29,291) [jbd2/md2-8]
(root,0,0,00:00:00/148-19:09:29,292) [ext4-rsv-conver]
(root,192872,97240,00:35:13/148-19:09:29,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/148-19:09:29,348) [rpciod]
(root,0,0,00:00:00/148-19:09:29,349) [xprtiod]
(root,0,0,00:00:00/148-19:09:29,353) [spl_system_task]
(root,0,0,00:00:00/148-19:09:29,354) [spl_delay_taskq]
(root,0,0,00:00:00/148-19:09:29,355) [spl_dynamic_tas]
(root,0,0,00:00:00/148-19:09:29,356) [spl_kmem_cache]
(root,0,0,00:00:00/148-19:09:28,361) [zvol]
(root,0,0,00:00:00/148-19:09:28,362) [arc_prune]
(root,0,0,00:03:28/148-19:09:28,363) [arc_evict]
(root,0,0,00:03:14/148-19:09:28,364) [arc_reap]
(root,0,0,00:00:00/148-19:09:28,366) [dbu_evict]
(root,0,0,00:03:08/148-19:09:28,367) [dbuf_evict]
(root,22980,4000,00:16:37/148-19:09:28,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/148-19:09:28,376) [z_vdev_file]
(root,0,0,00:01:43/148-19:09:28,377) [l2arc_feed]
(root,0,0,00:00:00/148-19:09:28,485) [cryptd]
(root,3860,2148,00:00:04/148-19:09:28,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/148-19:09:28,522) [jbd2/md1-8]
(root,0,0,00:00:00/148-19:09:28,523) [ext4-rsv-conver]
(_rpc,7776,4464,00:00:22/148-19:09:26,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3512,00:00:10/148-19:09:26,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:30:16/148-19:09:26,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:04:54/148-19:09:26,571) /usr/sbin/watchdog-mux
(root,12248,4748,00:00:03/148-19:09:26,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:11:57/148-19:09:26,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:15/148-19:09:26,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4708,00:01:20/148-19:09:26,578) /lib/systemd/systemd-logind
(root,223768,3592,00:11:05/148-19:09:26,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2796,00:00:00/148-19:09:26,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/148-19:09:26,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,354192,11832,00:00:33/36-12:05:19,585) pvedaemon worker
(root,4084,1676,00:00:04/148-19:09:26,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1396,00:00:00/148-19:09:25,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:11/148-19:09:25,768) bpfilter_umh
(root,13808,4980,00:10:33/148-19:09:25,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/148-19:09:25,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3268,00:32:30/148-19:09:25,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,723104,50752,02:35:35/148-19:09:25,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:41/148-19:09:25,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3668,00:00:29/148-19:09:25,1025) /usr/lib/postfix/sbin/master -w
(postfix,43952,6152,00:00:06/148-19:09:25,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:14/148-19:09:24,1061) /usr/sbin/cron -f
(root,303168,37864,13:38:48/148-19:09:23,1068) pvestatd
(root,304364,30880,05:33:12/148-19:09:23,1069) pve-firewall
(root,353760,3968,00:01:45/148-19:09:23,1093) pvedaemon
(root,336416,10988,00:12:36/148-19:09:23,1101) pve-ha-crm
(www-data,355120,144532,00:03:49/148-19:09:22,1102) pveproxy
(www-data,68896,57940,00:02:26/148-19:09:22,1109) spiceproxy
(root,335964,31792,00:20:43/148-19:09:22,1111) pve-ha-lrm
(root,5954416,3408764,7-16:42:06/148-19:09:21,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:11/148-19:09:21,1129) [kvm-nx-lpage-re]
(root,0,0,11:16:02/148-19:09:21,1148) [vhost-1125]
(root,0,0,09:31:23/148-19:09:20,1167) [vhost-1125]
(root,0,0,01:01:55/148-19:09:20,1172) [kvm-pit/1125]
(root,13974068,8537744,57-06:32:45/148-19:09:17,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:17/148-19:09:17,1188) [kvm-nx-lpage-re]
(root,0,0,00:21:19/148-19:09:17,1207) [vhost-1184]
(root,0,0,01:10:00/148-19:09:17,1212) [kvm-pit/1184]
(root,0,0,00:00:00/148-19:09:14,1214) [dio/md2]
(root,3605432,2282320,36-02:10:53/148-19:09:13,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:40/148-19:09:13,1267) [kvm-nx-lpage-re]
(root,0,0,04:50:52/148-19:09:13,1286) [vhost-1263]
(root,0,0,00:00:00/148-19:09:13,1289) [kvm-pit/1263]
(root,0,0,00:00:00/148-19:09:12,1295) [ib-comp-wq]
(root,0,0,00:00:00/148-19:09:12,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/148-19:09:12,1297) [ib_mcast]
(root,0,0,00:00:00/148-19:09:12,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/148-19:09:12,1299) [rdma_cm]
(root,0,0,00:00:00/148-19:09:12,1300) [cifsiod]
(root,0,0,00:00:00/148-19:09:12,1301) [smb3decryptd]
(root,0,0,00:00:00/148-19:09:12,1302) [cifsfileinfoput]
(root,0,0,00:00:00/148-19:09:12,1303) [cifsoplockd]
(root,0,0,00:12:53/148-19:09:12,1305) [cifsd]
(root,0,0,00:04:50/148-19:09:12,1340) [cifsd]
(root,6000360,4143724,9-18:45:15/148-19:09:09,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:49/148-19:09:09,1358) [kvm-nx-lpage-re]
(root,0,0,01:55:18/148-19:09:09,1377) [vhost-1354]
(root,0,0,00:00:00/148-19:09:09,1382) [kvm-pit/1354]
(root,21022608,16888764,10-21:32:08/148-19:09:05,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:56/148-19:09:05,1398) [kvm-nx-lpage-re]
(root,0,0,01:19:06/148-19:09:04,1417) [vhost-1394]
(root,0,0,00:00:00/148-19:09:04,1422) [kvm-pit/1394]
(root,19303872,5295044,8-07:34:56/148-19:09:01,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:29/148-19:09:01,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:44/148-19:09:00,1487) [vhost-1464]
(root,0,0,00:00:00/148-19:09:00,1492) [kvm-pit/1464]
(root,6020496,4257712,33-02:26:35/148-19:08:57,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:51/148-19:08:57,1511) [kvm-nx-lpage-re]
(root,0,0,01:28:36/148-19:08:56,1531) [vhost-1507]
(root,0,0,00:00:00/148-19:08:56,1534) [kvm-pit/1507]
(postfix,43844,7748,00:00:00/01:16:25,8903) pickup -l -t unix -u -c
(root,0,0,00:00:00/01:01:03,13553) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:00/52:03,16322) [kworker/3:0-events]
(root,0,0,00:00:00/50:03,16948) [kworker/1:2-events]
(root,362260,16140,00:01:34/95-09:15:51,18556) pvedaemon worker
(root,0,0,00:00:00/38:03,20606) [kworker/7:0-events]
(root,0,0,00:00:00/33:03,21996) [kworker/5:1-events]
(root,0,0,00:00:00/30:03,22845) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/28:03,23405) [kworker/6:3-events]
(root,0,0,00:00:00/27:02,23696) [kworker/5:0-events]
(root,0,0,00:00:00/25:03,24249) [kworker/0:3-events]
(root,0,0,00:00:00/22:03,25072) [kworker/3:2-cgroup_destroy]
(root,0,0,00:00:00/21:03,25357) [kworker/7:2-cgroup_destroy]
(root,0,0,00:00:00/19:01,25910) [kworker/2:2-events]
(root,0,0,00:00:00/17:03,26458) [kworker/6:0-events]
(root,0,0,00:00:00/15:03,27006) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/15:03,27010) [kworker/4:3-events]
(root,362584,18876,00:01:57/122-04:11:00,27309) pvedaemon worker
(root,0,0,00:00:00/11:03,28123) [kworker/0:2-events]
(root,0,0,00:00:00/10:03,28386) [kworker/7:1-cgroup_destroy]
(root,0,0,00:00:00/09:16,28515) [kworker/u16:1-events_unbound]
(root,18785812,10469484,5-05:49:00/122-15:43:26,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:18/122-15:43:26,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:11/122-15:43:26,28619) [vhost-28596]
(root,0,0,00:58:30/122-15:43:26,28626) [kvm-pit/28596]
(root,0,0,00:00:00/09:03,28681) [kworker/4:0-md]
(root,0,0,00:00:00/06:20,29353) [kworker/6:1-cgroup_destroy]
(root,0,0,00:00:00/05:03,29774) [kworker/7:3-events]
(root,0,0,00:00:00/03:03,30314) [kworker/6:2-dio/md2]
(root,0,0,00:00:00/02:03,30585) [kworker/3:1-events]
(root,0,0,00:00:00/01:03,30859) [kworker/5:2-cgroup_destroy]
(root,22980,2592,00:00:00/00:03,31119) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:03,31120) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:03,31121) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:03,31122) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:03,31123) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/00:03,31124) [kworker/0:0-events]
(root,0,0,00:00:00/00:03,31125) [kworker/0:1-cgroup_destroy]
(root,14792,8052,00:00:00/00:02,31126) sshd: unknown [priv]
(sshd,13808,4960,00:00:00/00:02,31127) sshd: unknown [net]
(root,7188,3312,00:00:00/00:01,31128) /bin/bash /usr/bin/check_mk_agent
(root,7188,3324,00:00:00/00:01,31210) /bin/bash /usr/bin/check_mk_agent
(root,43344,37608,00:00:00/00:01,31291) /usr/bin/perl /usr/bin/pvecm status
(root,31048,28060,00:00:00/00:01,31292) /usr/bin/perl /usr/bin/pvecm nodes
(root,7188,3292,00:00:00/00:01,31293) /bin/bash /usr/bin/check_mk_agent
(root,7632,2748,00:00:00/00:01,31319) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,996,00:00:00/00:01,31320) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,86168,2288,00:00:00/01:47:01,32524) /usr/sbin/pvefw-logger
(www-data,76920,54924,00:00:00/01:47:01,32527) spiceproxy worker
(www-data,355572,130444,00:00:00/01:47:01,32535) pveproxy worker
(www-data,355572,130588,00:00:00/01:47:01,32536) pveproxy worker
(www-data,355572,130444,00:00:00/01:47:01,32537) pveproxy worker

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-18 00:47

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c424b3970fb

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,6832,00:14:57/146-19:51:31,1) /sbin/init
(root,0,0,00:00:08/146-19:51:31,2) [kthreadd]
(root,0,0,00:00:00/146-19:51:31,3) [rcu_gp]
(root,0,0,00:00:00/146-19:51:31,4) [rcu_par_gp]
(root,0,0,00:00:00/146-19:51:31,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/146-19:51:31,9) [mm_percpu_wq]
(root,0,0,00:04:13/146-19:51:31,10) [ksoftirqd/0]
(root,0,0,00:30:53/146-19:51:31,11) [rcu_sched]
(root,0,0,00:00:36/146-19:51:31,12) [migration/0]
(root,0,0,00:00:00/146-19:51:31,13) [idle_inject/0]
(root,0,0,00:00:00/146-19:51:31,14) [cpuhp/0]
(root,0,0,00:00:00/146-19:51:31,15) [cpuhp/1]
(root,0,0,00:00:00/146-19:51:31,16) [idle_inject/1]
(root,0,0,00:00:36/146-19:51:31,17) [migration/1]
(root,0,0,00:03:04/146-19:51:31,18) [ksoftirqd/1]
(root,0,0,00:00:00/146-19:51:31,20) [kworker/1:0H]
(root,0,0,00:00:00/146-19:51:31,21) [cpuhp/2]
(root,0,0,00:00:00/146-19:51:31,22) [idle_inject/2]
(root,0,0,00:00:35/146-19:51:31,23) [migration/2]
(root,0,0,00:01:56/146-19:51:31,24) [ksoftirqd/2]
(root,0,0,00:00:00/146-19:51:31,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/146-19:51:31,27) [cpuhp/3]
(root,0,0,00:00:00/146-19:51:31,28) [idle_inject/3]
(root,0,0,00:00:47/146-19:51:31,29) [migration/3]
(root,0,0,00:01:24/146-19:51:31,30) [ksoftirqd/3]
(root,0,0,00:00:00/146-19:51:31,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/146-19:51:31,33) [cpuhp/4]
(root,0,0,00:00:00/146-19:51:31,34) [idle_inject/4]
(root,0,0,00:00:35/146-19:51:31,35) [migration/4]
(root,0,0,00:01:05/146-19:51:31,36) [ksoftirqd/4]
(root,0,0,00:00:00/146-19:51:31,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/146-19:51:31,39) [cpuhp/5]
(root,0,0,00:00:00/146-19:51:31,40) [idle_inject/5]
(root,0,0,00:00:35/146-19:51:31,41) [migration/5]
(root,0,0,00:00:57/146-19:51:31,42) [ksoftirqd/5]
(root,0,0,00:00:00/146-19:51:31,44) [kworker/5:0H]
(root,0,0,00:00:00/146-19:51:31,45) [cpuhp/6]
(root,0,0,00:00:00/146-19:51:31,46) [idle_inject/6]
(root,0,0,00:00:33/146-19:51:31,47) [migration/6]
(root,0,0,00:08:52/146-19:51:31,48) [ksoftirqd/6]
(root,0,0,00:00:00/146-19:51:31,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/146-19:51:31,51) [cpuhp/7]
(root,0,0,00:00:00/146-19:51:31,52) [idle_inject/7]
(root,0,0,00:00:40/146-19:51:31,53) [migration/7]
(root,0,0,00:22:43/146-19:51:31,54) [ksoftirqd/7]
(root,0,0,00:00:00/146-19:51:31,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/146-19:51:31,57) [kdevtmpfs]
(root,0,0,00:00:00/146-19:51:31,58) [netns]
(root,0,0,00:00:00/146-19:51:31,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/146-19:51:31,60) [kauditd]
(root,0,0,00:00:04/146-19:51:31,62) [khungtaskd]
(root,0,0,00:00:00/146-19:51:31,63) [oom_reaper]
(root,0,0,00:00:00/146-19:51:31,64) [writeback]
(root,0,0,00:00:00/146-19:51:31,65) [kcompactd0]
(root,0,0,00:00:00/146-19:51:31,66) [ksmd]
(root,0,0,00:03:41/146-19:51:31,67) [khugepaged]
(root,0,0,00:00:00/146-19:51:31,113) [kintegrityd]
(root,0,0,00:00:00/146-19:51:31,114) [kblockd]
(root,0,0,00:00:00/146-19:51:31,115) [blkcg_punt_bio]
(root,0,0,00:00:00/146-19:51:31,116) [tpm_dev_wq]
(root,0,0,00:00:00/146-19:51:31,117) [ata_sff]
(root,0,0,00:00:00/146-19:51:31,118) [md]
(root,0,0,00:00:00/146-19:51:31,119) [edac-poller]
(root,0,0,00:00:00/146-19:51:31,120) [devfreq_wq]
(root,0,0,00:00:00/146-19:51:31,121) [watchdogd]
(root,0,0,00:22:08/146-19:51:31,128) [kswapd0]
(root,0,0,00:00:00/146-19:51:31,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/146-19:51:31,131) [kthrotld]
(root,0,0,00:00:00/146-19:51:31,132) [acpi_thermal_pm]
(root,0,0,00:00:00/146-19:51:31,133) [nvme-wq]
(root,0,0,00:00:00/146-19:51:31,134) [nvme-reset-wq]
(root,0,0,00:00:00/146-19:51:31,135) [nvme-delete-wq]
(root,0,0,00:00:00/146-19:51:31,137) [ipv6_addrconf]
(root,0,0,00:00:00/146-19:51:31,146) [kstrp]
(root,0,0,00:00:00/146-19:51:31,147) [kworker/u17:0]
(root,0,0,00:00:00/146-19:51:31,162) [charger_manager]
(root,0,0,00:00:00/146-19:51:30,210) [scsi_eh_0]
(root,0,0,00:00:00/146-19:51:30,211) [scsi_tmf_0]
(root,0,0,00:00:00/146-19:51:30,212) [scsi_eh_1]
(root,0,0,00:00:00/146-19:51:30,213) [scsi_tmf_1]
(root,0,0,00:00:00/146-19:51:30,214) [scsi_eh_2]
(root,0,0,00:00:00/146-19:51:30,215) [scsi_tmf_2]
(root,0,0,00:00:00/146-19:51:30,216) [scsi_eh_3]
(root,0,0,00:00:00/146-19:51:30,217) [scsi_tmf_3]
(root,0,0,00:00:00/146-19:51:30,218) [scsi_eh_4]
(root,0,0,00:00:00/146-19:51:30,219) [scsi_tmf_4]
(root,0,0,00:00:00/146-19:51:30,220) [scsi_eh_5]
(root,0,0,00:00:00/146-19:51:30,221) [scsi_tmf_5]
(root,0,0,00:03:14/146-19:51:30,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:11/146-19:51:30,229) [kworker/0:1H-kblockd]
(root,0,0,00:03:56/146-19:51:30,237) [kworker/1:1H-kblockd]
(root,0,0,00:44:17/146-19:51:30,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:22/146-19:51:30,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:06/146-19:51:30,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:09/146-19:51:30,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:02/146-19:51:30,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/146-19:51:30,248) [md1_raid1]
(root,0,0,00:00:29/146-19:51:30,251) [md0_raid1]
(root,0,0,01:02:00/146-19:51:30,253) [md2_raid1]
(root,0,0,00:00:00/146-19:51:29,268) [raid5wq]
(root,0,0,00:06:49/146-19:51:26,291) [jbd2/md2-8]
(root,0,0,00:00:00/146-19:51:26,292) [ext4-rsv-conver]
(root,102360,20736,00:34:42/146-19:51:26,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/146-19:51:26,348) [rpciod]
(root,0,0,00:00:00/146-19:51:26,349) [xprtiod]
(root,0,0,00:00:00/146-19:51:26,353) [spl_system_task]
(root,0,0,00:00:00/146-19:51:26,354) [spl_delay_taskq]
(root,0,0,00:00:00/146-19:51:26,355) [spl_dynamic_tas]
(root,0,0,00:00:00/146-19:51:26,356) [spl_kmem_cache]
(root,0,0,00:00:00/146-19:51:25,361) [zvol]
(root,0,0,00:00:00/146-19:51:25,362) [arc_prune]
(root,0,0,00:03:25/146-19:51:25,363) [arc_evict]
(root,0,0,00:03:12/146-19:51:25,364) [arc_reap]
(root,0,0,00:00:00/146-19:51:25,366) [dbu_evict]
(root,0,0,00:03:05/146-19:51:25,367) [dbuf_evict]
(root,22980,4012,00:16:24/146-19:51:25,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/146-19:51:25,376) [z_vdev_file]
(root,0,0,00:01:42/146-19:51:25,377) [l2arc_feed]
(root,0,0,00:00:00/146-19:51:25,485) [cryptd]
(root,3860,2148,00:00:04/146-19:51:25,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/146-19:51:25,522) [jbd2/md1-8]
(root,0,0,00:00:00/146-19:51:25,523) [ext4-rsv-conver]
(_rpc,7776,4464,00:00:22/146-19:51:23,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3532,00:00:10/146-19:51:23,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:29:56/146-19:51:23,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:04:50/146-19:51:23,571) /usr/sbin/watchdog-mux
(root,12248,4748,00:00:03/146-19:51:23,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:11:47/146-19:51:23,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:14/146-19:51:23,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4728,00:01:19/146-19:51:23,578) /lib/systemd/systemd-logind
(root,223768,3588,00:10:56/146-19:51:23,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2820,00:00:00/146-19:51:23,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/146-19:51:23,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,354192,11848,00:00:31/34-12:47:16,585) pvedaemon worker
(root,4084,1676,00:00:04/146-19:51:23,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1404,00:00:00/146-19:51:22,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:07/146-19:51:22,768) bpfilter_umh
(root,13808,4980,00:10:24/146-19:51:22,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/146-19:51:22,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/33:00,904) [kworker/5:1-cgroup_destroy]
(root,878176,3268,00:32:04/146-19:51:22,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,735512,57016,02:33:37/146-19:51:22,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:40/146-19:51:22,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3664,00:00:29/146-19:51:22,1025) /usr/lib/postfix/sbin/master -w
(postfix,43948,5880,00:00:06/146-19:51:22,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:14/146-19:51:21,1061) /usr/sbin/cron -f
(root,303168,37888,13:27:16/146-19:51:20,1068) pvestatd
(root,304364,30888,05:28:32/146-19:51:20,1069) pve-firewall
(root,353760,3968,00:01:44/146-19:51:20,1093) pvedaemon
(root,336416,10996,00:12:26/146-19:51:20,1101) pve-ha-crm
(www-data,355280,142624,00:03:46/146-19:51:19,1102) pveproxy
(www-data,68856,57568,00:02:24/146-19:51:19,1109) spiceproxy
(root,335964,31800,00:20:27/146-19:51:19,1111) pve-ha-lrm
(root,5945832,3400588,7-14:15:09/146-19:51:18,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:10/146-19:51:18,1129) [kvm-nx-lpage-re]
(root,0,0,11:07:22/146-19:51:18,1148) [vhost-1125]
(root,0,0,09:24:00/146-19:51:17,1167) [vhost-1125]
(root,0,0,01:01:10/146-19:51:17,1172) [kvm-pit/1125]
(root,13969772,8534328,55-04:29:17/146-19:51:14,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:13/146-19:51:14,1188) [kvm-nx-lpage-re]
(root,0,0,00:21:12/146-19:51:14,1207) [vhost-1184]
(root,0,0,01:09:07/146-19:51:14,1212) [kvm-pit/1184]
(root,0,0,00:00:00/146-19:51:11,1214) [dio/md2]
(root,3597496,2274616,35-14:11:25/146-19:51:10,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:39/146-19:51:10,1267) [kvm-nx-lpage-re]
(root,0,0,04:47:32/146-19:51:10,1286) [vhost-1263]
(root,0,0,00:00:00/146-19:51:10,1289) [kvm-pit/1263]
(root,0,0,00:00:00/146-19:51:09,1295) [ib-comp-wq]
(root,0,0,00:00:00/146-19:51:09,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/146-19:51:09,1297) [ib_mcast]
(root,0,0,00:00:00/146-19:51:09,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/146-19:51:09,1299) [rdma_cm]
(root,0,0,00:00:00/146-19:51:09,1300) [cifsiod]
(root,0,0,00:00:00/146-19:51:09,1301) [smb3decryptd]
(root,0,0,00:00:00/146-19:51:09,1302) [cifsfileinfoput]
(root,0,0,00:00:00/146-19:51:09,1303) [cifsoplockd]
(root,0,0,00:12:45/146-19:51:09,1305) [cifsd]
(root,0,0,00:04:46/146-19:51:09,1340) [cifsd]
(root,5996064,4137436,9-15:28:28/146-19:51:06,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:48/146-19:51:06,1358) [kvm-nx-lpage-re]
(root,0,0,01:53:46/146-19:51:06,1377) [vhost-1354]
(root,0,0,00:00:00/146-19:51:06,1382) [kvm-pit/1354]
(root,21018320,16890016,10-18:10:37/146-19:51:02,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:54/146-19:51:02,1398) [kvm-nx-lpage-re]
(root,0,0,01:18:04/146-19:51:01,1417) [vhost-1394]
(root,0,0,00:00:00/146-19:51:01,1422) [kvm-pit/1394]
(root,19295280,5260308,8-04:53:17/146-19:50:58,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:29/146-19:50:58,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:43/146-19:50:57,1487) [vhost-1464]
(root,0,0,00:00:00/146-19:50:57,1492) [kvm-pit/1464]
(root,6016204,4258112,32-18:51:32/146-19:50:54,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:50/146-19:50:54,1511) [kvm-nx-lpage-re]
(root,0,0,01:26:52/146-19:50:53,1531) [vhost-1507]
(root,0,0,00:00:00/146-19:50:53,1534) [kvm-pit/1507]
(root,0,0,00:00:00/30:00,1858) [kworker/2:2-cgroup_destroy]
(root,9796,2372,00:00:00/28:59,2141) /usr/sbin/CRON -f
(root,2380,756,00:00:00/28:59,2142) /bin/sh -c vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,330260,115164,00:00:00/28:59,2143) /usr/bin/perl -T /usr/bin/vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,339660,102504,00:00:06/28:59,2146) task UPID:node01:00000862:4B9A7B2F:6737EE92:vzdump::root@pam:
(root,0,0,00:02:19/28:39,2225) [kworker/u16:0-events_unbound]
(root,0,0,00:00:00/28:00,2453) [kworker/0:0-events]
(root,0,0,00:00:00/19:00,5014) [kworker/7:1-memcg_kmem_cache]
(root,0,0,00:00:00/18:00,5298) [kworker/3:0-events]
(root,0,0,00:00:00/17:49,5334) [kworker/6:0-dio/md2]
(root,0,0,00:00:00/16:00,5875) [kworker/6:3-events]
(root,0,0,00:00:00/15:00,6153) [kworker/5:0-events]
(root,0,0,00:00:00/13:00,6719) [kworker/2:1-events]
(root,0,0,00:00:00/11:00,7411) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/10:00,7691) [kworker/4:0-events]
(root,0,0,00:00:00/08:00,8247) [kworker/1:0-cgroup_destroy]
(root,0,0,00:00:00/08:00,8248) [kworker/1:3-events]
(root,0,0,00:00:00/06:45,8555) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/05:00,9076) [kworker/0:2-events]
(root,0,0,00:00:00/04:00,9350) [kworker/5:2-events]
(root,0,0,00:00:00/04:00,9351) [kworker/7:0]
(root,5212,1856,00:00:00/00:03,10322) lzop
(root,14508,7848,00:00:00/00:02,10323) sshd: root [priv]
(sshd,13808,4948,00:00:00/00:02,10324) sshd: root [net]
(root,25164,18764,00:00:00/00:00,10485) /usr/bin/perl -T /usr/bin/pvesr run --mail 1
(root,22980,2656,00:00:00/00:00,10488) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:00,10489) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:00,10490) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:00,10491) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:00,10492) /lib/systemd/systemd-udevd
(root,7188,3140,00:00:00/00:00,10493) /bin/bash /usr/bin/check_mk_agent
(root,7632,2708,00:00:00/00:00,10519) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,992,00:00:00/00:00,10520) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362260,16172,00:01:32/93-09:57:48,18556) pvedaemon worker
(root,362584,18908,00:01:56/120-04:52:57,27309) pvedaemon worker
(root,0,0,00:00:00/52:00,27958) [kworker/7:3-cifsiod]
(root,18687976,10464020,5-03:40:07/120-16:25:23,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:17/120-16:25:23,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:09/120-16:25:23,28619) [vhost-28596]
(root,0,0,00:57:37/120-16:25:23,28626) [kvm-pit/28596]
(root,0,0,00:00:00/46:00,29678) [kworker/3:2-events]
(root,0,0,00:03:49/42:07,30683) [kworker/u16:1-flush-9:2]
(postfix,43844,7384,00:00:00/37:49,31971) pickup -l -t unix -u -c
(www-data,76760,54656,00:00:00/02:28:58,32527) spiceproxy worker
(root,86168,2052,00:00:00/02:28:58,32529) /usr/sbin/pvefw-logger
(www-data,355576,129856,00:00:00/02:28:58,32536) pveproxy worker
(www-data,355576,129856,00:00:00/02:28:58,32537) pveproxy worker
(www-data,355576,129856,00:00:00/02:28:58,32538) pveproxy worker
(root,0,0,00:00:00/35:00,32766) [kworker/4:1-cgroup_destroy]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-16 01:29

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42e7b2236f

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7168,00:14:41/144-19:11:22,1) /sbin/init
(root,0,0,00:00:08/144-19:11:22,2) [kthreadd]
(root,0,0,00:00:00/144-19:11:22,3) [rcu_gp]
(root,0,0,00:00:00/144-19:11:22,4) [rcu_par_gp]
(root,0,0,00:00:00/144-19:11:22,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/144-19:11:22,9) [mm_percpu_wq]
(root,0,0,00:04:11/144-19:11:22,10) [ksoftirqd/0]
(root,0,0,00:30:21/144-19:11:22,11) [rcu_sched]
(root,0,0,00:00:36/144-19:11:22,12) [migration/0]
(root,0,0,00:00:00/144-19:11:22,13) [idle_inject/0]
(root,0,0,00:00:00/144-19:11:22,14) [cpuhp/0]
(root,0,0,00:00:00/144-19:11:22,15) [cpuhp/1]
(root,0,0,00:00:00/144-19:11:22,16) [idle_inject/1]
(root,0,0,00:00:36/144-19:11:22,17) [migration/1]
(root,0,0,00:03:02/144-19:11:22,18) [ksoftirqd/1]
(root,0,0,00:00:00/144-19:11:22,20) [kworker/1:0H]
(root,0,0,00:00:00/144-19:11:22,21) [cpuhp/2]
(root,0,0,00:00:00/144-19:11:22,22) [idle_inject/2]
(root,0,0,00:00:35/144-19:11:22,23) [migration/2]
(root,0,0,00:01:55/144-19:11:22,24) [ksoftirqd/2]
(root,0,0,00:00:00/144-19:11:22,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/144-19:11:22,27) [cpuhp/3]
(root,0,0,00:00:00/144-19:11:22,28) [idle_inject/3]
(root,0,0,00:00:46/144-19:11:22,29) [migration/3]
(root,0,0,00:01:23/144-19:11:22,30) [ksoftirqd/3]
(root,0,0,00:00:00/144-19:11:22,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/144-19:11:22,33) [cpuhp/4]
(root,0,0,00:00:00/144-19:11:22,34) [idle_inject/4]
(root,0,0,00:00:34/144-19:11:22,35) [migration/4]
(root,0,0,00:01:04/144-19:11:22,36) [ksoftirqd/4]
(root,0,0,00:00:00/144-19:11:22,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/144-19:11:22,39) [cpuhp/5]
(root,0,0,00:00:00/144-19:11:22,40) [idle_inject/5]
(root,0,0,00:00:34/144-19:11:22,41) [migration/5]
(root,0,0,00:00:56/144-19:11:22,42) [ksoftirqd/5]
(root,0,0,00:00:00/144-19:11:22,44) [kworker/5:0H]
(root,0,0,00:00:00/144-19:11:22,45) [cpuhp/6]
(root,0,0,00:00:00/144-19:11:22,46) [idle_inject/6]
(root,0,0,00:00:32/144-19:11:22,47) [migration/6]
(root,0,0,00:08:44/144-19:11:22,48) [ksoftirqd/6]
(root,0,0,00:00:00/144-19:11:22,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/144-19:11:22,51) [cpuhp/7]
(root,0,0,00:00:00/144-19:11:22,52) [idle_inject/7]
(root,0,0,00:00:40/144-19:11:22,53) [migration/7]
(root,0,0,00:22:18/144-19:11:22,54) [ksoftirqd/7]
(root,0,0,00:00:00/144-19:11:22,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/144-19:11:22,57) [kdevtmpfs]
(root,0,0,00:00:00/144-19:11:22,58) [netns]
(root,0,0,00:00:00/144-19:11:22,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/144-19:11:22,60) [kauditd]
(root,0,0,00:00:04/144-19:11:22,62) [khungtaskd]
(root,0,0,00:00:00/144-19:11:22,63) [oom_reaper]
(root,0,0,00:00:00/144-19:11:22,64) [writeback]
(root,0,0,00:00:00/144-19:11:22,65) [kcompactd0]
(root,0,0,00:00:00/144-19:11:22,66) [ksmd]
(root,0,0,00:03:40/144-19:11:22,67) [khugepaged]
(root,0,0,00:00:00/144-19:11:22,113) [kintegrityd]
(root,0,0,00:00:00/144-19:11:22,114) [kblockd]
(root,0,0,00:00:00/144-19:11:22,115) [blkcg_punt_bio]
(root,0,0,00:00:00/144-19:11:22,116) [tpm_dev_wq]
(root,0,0,00:00:00/144-19:11:22,117) [ata_sff]
(root,0,0,00:00:00/144-19:11:22,118) [md]
(root,0,0,00:00:00/144-19:11:22,119) [edac-poller]
(root,0,0,00:00:00/144-19:11:22,120) [devfreq_wq]
(root,0,0,00:00:00/144-19:11:22,121) [watchdogd]
(root,0,0,00:21:43/144-19:11:22,128) [kswapd0]
(root,0,0,00:00:00/144-19:11:22,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/144-19:11:22,131) [kthrotld]
(root,0,0,00:00:00/144-19:11:22,132) [acpi_thermal_pm]
(root,0,0,00:00:00/144-19:11:22,133) [nvme-wq]
(root,0,0,00:00:00/144-19:11:22,134) [nvme-reset-wq]
(root,0,0,00:00:00/144-19:11:22,135) [nvme-delete-wq]
(root,0,0,00:00:00/144-19:11:22,137) [ipv6_addrconf]
(root,0,0,00:00:00/144-19:11:22,146) [kstrp]
(root,0,0,00:00:00/144-19:11:22,147) [kworker/u17:0]
(root,0,0,00:00:00/144-19:11:22,162) [charger_manager]
(root,0,0,00:00:00/144-19:11:21,210) [scsi_eh_0]
(root,0,0,00:00:00/144-19:11:21,211) [scsi_tmf_0]
(root,0,0,00:00:00/144-19:11:21,212) [scsi_eh_1]
(root,0,0,00:00:00/144-19:11:21,213) [scsi_tmf_1]
(root,0,0,00:00:00/144-19:11:21,214) [scsi_eh_2]
(root,0,0,00:00:00/144-19:11:21,215) [scsi_tmf_2]
(root,0,0,00:00:00/144-19:11:21,216) [scsi_eh_3]
(root,0,0,00:00:00/144-19:11:21,217) [scsi_tmf_3]
(root,0,0,00:00:00/144-19:11:21,218) [scsi_eh_4]
(root,0,0,00:00:00/144-19:11:21,219) [scsi_tmf_4]
(root,0,0,00:00:00/144-19:11:21,220) [scsi_eh_5]
(root,0,0,00:00:00/144-19:11:21,221) [scsi_tmf_5]
(root,0,0,00:03:12/144-19:11:21,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:08/144-19:11:21,229) [kworker/0:1H-kblockd]
(root,0,0,00:03:53/144-19:11:21,237) [kworker/1:1H-kblockd]
(root,0,0,00:43:42/144-19:11:21,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:18/144-19:11:21,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:03/144-19:11:21,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:07/144-19:11:21,244) [kworker/2:1H-kblockd]
(root,0,0,00:03:00/144-19:11:21,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/144-19:11:21,248) [md1_raid1]
(root,0,0,00:00:29/144-19:11:21,251) [md0_raid1]
(root,0,0,01:01:29/144-19:11:21,253) [md2_raid1]
(root,0,0,00:00:00/144-19:11:20,268) [raid5wq]
(root,0,0,00:06:44/144-19:11:17,291) [jbd2/md2-8]
(root,0,0,00:00:00/144-19:11:17,292) [ext4-rsv-conver]
(root,141324,59684,00:33:44/144-19:11:17,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/144-19:11:17,348) [rpciod]
(root,0,0,00:00:00/144-19:11:17,349) [xprtiod]
(root,0,0,00:00:00/144-19:11:17,353) [spl_system_task]
(root,0,0,00:00:00/144-19:11:17,354) [spl_delay_taskq]
(root,0,0,00:00:00/144-19:11:17,355) [spl_dynamic_tas]
(root,0,0,00:00:00/144-19:11:17,356) [spl_kmem_cache]
(root,0,0,00:00:00/144-19:11:16,361) [zvol]
(root,0,0,00:00:00/144-19:11:16,362) [arc_prune]
(root,0,0,00:03:23/144-19:11:16,363) [arc_evict]
(root,0,0,00:03:09/144-19:11:16,364) [arc_reap]
(root,0,0,00:00:00/144-19:11:16,366) [dbu_evict]
(root,0,0,00:03:03/144-19:11:16,367) [dbuf_evict]
(root,22980,4024,00:16:09/144-19:11:16,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/144-19:11:16,376) [z_vdev_file]
(root,0,0,00:01:40/144-19:11:16,377) [l2arc_feed]
(root,0,0,00:00:00/08:51,429) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/144-19:11:16,485) [cryptd]
(root,3860,2148,00:00:04/144-19:11:16,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/144-19:11:16,522) [jbd2/md1-8]
(root,0,0,00:00:00/144-19:11:16,523) [ext4-rsv-conver]
(_rpc,7776,4464,00:00:22/144-19:11:14,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3532,00:00:09/144-19:11:14,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:29:32/144-19:11:14,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:04:47/144-19:11:14,571) /usr/sbin/watchdog-mux
(root,12248,4748,00:00:03/144-19:11:14,573) /usr/sbin/smartd -n
(messagebus,9048,4068,00:11:35/144-19:11:14,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:14/144-19:11:14,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4728,00:01:18/144-19:11:14,578) /lib/systemd/systemd-logind
(root,223768,3600,00:10:38/144-19:11:14,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2820,00:00:00/144-19:11:14,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/144-19:11:14,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,354192,11868,00:00:29/32-12:07:07,585) pvedaemon worker
(root,4084,1676,00:00:04/144-19:11:14,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,0,0,00:00:00/07:51,749) [kworker/6:2-events]
(root,7304,1404,00:00:00/144-19:11:13,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:05:03/144-19:11:13,768) bpfilter_umh
(root,13808,4980,00:10:05/144-19:11:13,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/144-19:11:13,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/07:27,826) [kworker/u16:1-events_unbound]
(root,878176,3268,00:31:36/144-19:11:13,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,723104,50752,02:31:36/144-19:11:13,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:40/144-19:11:13,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3676,00:00:28/144-19:11:13,1025) /usr/lib/postfix/sbin/master -w
(postfix,43948,6080,00:00:06/144-19:11:13,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:14/144-19:11:12,1061) /usr/sbin/cron -f
(root,303168,37912,13:15:27/144-19:11:11,1068) pvestatd
(root,304364,30920,05:23:37/144-19:11:11,1069) pve-firewall
(root,353760,3968,00:01:42/144-19:11:11,1093) pvedaemon
(root,336416,11008,00:12:16/144-19:11:11,1101) pve-ha-crm
(www-data,355156,144568,00:03:43/144-19:11:10,1102) pveproxy
(www-data,68840,57904,00:02:21/144-19:11:10,1109) spiceproxy
(root,335964,31812,00:20:10/144-19:11:10,1111) pve-ha-lrm
(root,5937244,3395604,7-11:44:01/144-19:11:09,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:10/144-19:11:09,1129) [kvm-nx-lpage-re]
(root,0,0,10:58:31/144-19:11:09,1148) [vhost-1125]
(root,0,0,09:16:32/144-19:11:08,1167) [vhost-1125]
(root,0,0,01:00:25/144-19:11:08,1172) [kvm-pit/1125]
(root,13956884,8521168,53-00:39:01/144-19:11:05,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:08/144-19:11:05,1188) [kvm-nx-lpage-re]
(root,0,0,00:21:05/144-19:11:05,1207) [vhost-1184]
(root,0,0,01:08:13/144-19:11:05,1212) [kvm-pit/1184]
(root,0,0,00:00:00/144-19:11:02,1214) [dio/md2]
(root,3588276,2266660,35-01:49:31/144-19:11:01,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:39/144-19:11:01,1267) [kvm-nx-lpage-re]
(root,0,0,04:44:13/144-19:11:01,1286) [vhost-1263]
(root,0,0,00:00:00/144-19:11:01,1289) [kvm-pit/1263]
(root,0,0,00:00:00/144-19:11:00,1295) [ib-comp-wq]
(root,0,0,00:00:00/144-19:11:00,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/144-19:11:00,1297) [ib_mcast]
(root,0,0,00:00:00/144-19:11:00,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/144-19:11:00,1299) [rdma_cm]
(root,0,0,00:00:00/144-19:11:00,1300) [cifsiod]
(root,0,0,00:00:00/144-19:11:00,1301) [smb3decryptd]
(root,0,0,00:00:00/144-19:11:00,1302) [cifsfileinfoput]
(root,0,0,00:00:00/144-19:11:00,1303) [cifsoplockd]
(root,0,0,00:12:33/144-19:11:00,1305) [cifsd]
(root,0,0,00:04:42/144-19:11:00,1340) [cifsd]
(root,5983188,4122952,9-12:06:38/144-19:10:57,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:47/144-19:10:57,1358) [kvm-nx-lpage-re]
(root,0,0,01:52:14/144-19:10:57,1377) [vhost-1354]
(root,0,0,00:00:00/144-19:10:57,1382) [kvm-pit/1354]
(root,21005452,16873716,10-14:23:39/144-19:10:53,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:51/144-19:10:53,1398) [kvm-nx-lpage-re]
(root,0,0,01:16:46/144-19:10:52,1417) [vhost-1394]
(root,0,0,00:00:00/144-19:10:52,1422) [kvm-pit/1394]
(root,0,0,00:00:00/05:51,1425) [kworker/7:0-events]
(root,0,0,00:00:00/05:51,1426) [kworker/7:2-events]
(root,19286688,5209768,8-02:07:01/144-19:10:49,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:28/144-19:10:49,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:42/144-19:10:48,1487) [vhost-1464]
(root,0,0,00:00:00/144-19:10:48,1492) [kvm-pit/1464]
(root,6003328,4241692,32-11:09:50/144-19:10:45,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:48/144-19:10:45,1511) [kvm-nx-lpage-re]
(root,0,0,01:25:19/144-19:10:44,1531) [vhost-1507]
(root,0,0,00:00:00/144-19:10:44,1534) [kvm-pit/1507]
(root,0,0,00:00:00/04:51,1740) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:00/03:51,2037) [kworker/4:1-cgroup_destroy]
(root,0,0,00:00:00/02:51,2333) [kworker/4:2]
(root,0,0,00:00:00/01:51,2623) [kworker/6:0-rcu_gp]
(root,13808,6616,00:00:00/01:35,2679) sshd: [accepted]
(sshd,13808,2532,00:00:00/01:35,2680) sshd: [net]
(root,13808,6748,00:00:00/00:09,3043) sshd: [accepted]
(sshd,13808,4940,00:00:00/00:09,3044) sshd: [net]
(root,14508,7608,00:00:00/00:04,3074) sshd: root [priv]
(sshd,13808,4964,00:00:00/00:04,3075) sshd: root [net]
(root,13808,6692,00:00:00/00:04,3076) sshd: [accepted]
(root,14508,7772,00:00:00/00:03,3077) sshd: root [priv]
(sshd,13808,4936,00:00:00/00:03,3078) sshd: root [net]
(root,7188,3176,00:00:00/00:00,3080) /bin/bash /usr/bin/check_mk_agent
(root,7188,3176,00:00:00/00:00,3162) /bin/bash /usr/bin/check_mk_agent
(root,41964,36476,00:00:00/00:00,3243) /usr/bin/perl /usr/bin/pvecm status
(root,39808,34224,00:00:00/00:00,3244) /usr/bin/perl /usr/bin/pvecm nodes
(root,7188,3116,00:00:00/00:00,3245) /bin/bash /usr/bin/check_mk_agent
(root,7632,2700,00:00:00/00:00,3271) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,928,00:00:00/00:00,3272) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(www-data,76988,54904,00:00:00/01:48:50,4327) spiceproxy worker
(root,86168,2256,00:00:00/01:48:50,4329) /usr/sbin/pvefw-logger
(www-data,355604,130348,00:00:00/01:48:49,4338) pveproxy worker
(www-data,355604,130352,00:00:00/01:48:49,4339) pveproxy worker
(www-data,355604,130348,00:00:00/01:48:49,4340) pveproxy worker
(root,0,0,00:00:00/01:06:51,16249) [kworker/2:2-events]
(root,362260,16020,00:01:31/91-09:17:39,18556) pvedaemon worker
(root,0,0,00:00:00/37:51,24505) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/31:09,26395) [kworker/6:1-events]
(root,362584,18940,00:01:54/118-04:12:48,27309) pvedaemon worker
(root,0,0,00:00:00/23:51,28565) [kworker/4:0-events]
(root,0,0,00:00:00/23:51,28566) [kworker/4:3-events]
(root,18730620,10452008,5-01:26:41/118-15:45:14,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:16/118-15:45:14,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:08/118-15:45:14,28619) [vhost-28596]
(root,0,0,00:56:43/118-15:45:14,28626) [kvm-pit/28596]
(root,0,0,00:00:00/21:51,29152) [kworker/3:3-events]
(root,0,0,00:00:00/17:45,30281) [kworker/0:2-events]
(postfix,43844,7880,00:00:00/16:18,30668) pickup -l -t unix -u -c
(root,0,0,00:00:00/15:39,30891) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/14:51,31137) [kworker/5:0-events]
(root,0,0,00:00:00/14:51,31138) [kworker/5:3-events]
(root,0,0,00:00:00/12:51,31717) [kworker/3:1-events]
(root,0,0,00:00:00/11:51,32012) [kworker/2:3-events]
(root,0,0,00:00:00/10:51,32299) [kworker/1:2-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-14 00:48

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c429ae6341a

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7176,00:14:28/142-19:15:03,1) /sbin/init
(root,0,0,00:00:08/142-19:15:03,2) [kthreadd]
(root,0,0,00:00:00/142-19:15:03,3) [rcu_gp]
(root,0,0,00:00:00/142-19:15:03,4) [rcu_par_gp]
(root,0,0,00:00:00/142-19:15:03,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/142-19:15:03,9) [mm_percpu_wq]
(root,0,0,00:04:08/142-19:15:03,10) [ksoftirqd/0]
(root,0,0,00:29:55/142-19:15:03,11) [rcu_sched]
(root,0,0,00:00:35/142-19:15:03,12) [migration/0]
(root,0,0,00:00:00/142-19:15:03,13) [idle_inject/0]
(root,0,0,00:00:00/142-19:15:03,14) [cpuhp/0]
(root,0,0,00:00:00/142-19:15:03,15) [cpuhp/1]
(root,0,0,00:00:00/142-19:15:03,16) [idle_inject/1]
(root,0,0,00:00:35/142-19:15:03,17) [migration/1]
(root,0,0,00:03:01/142-19:15:03,18) [ksoftirqd/1]
(root,0,0,00:00:00/142-19:15:03,20) [kworker/1:0H]
(root,0,0,00:00:00/142-19:15:03,21) [cpuhp/2]
(root,0,0,00:00:00/142-19:15:03,22) [idle_inject/2]
(root,0,0,00:00:34/142-19:15:03,23) [migration/2]
(root,0,0,00:01:53/142-19:15:03,24) [ksoftirqd/2]
(root,0,0,00:00:00/142-19:15:03,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/142-19:15:03,27) [cpuhp/3]
(root,0,0,00:00:00/142-19:15:03,28) [idle_inject/3]
(root,0,0,00:00:45/142-19:15:03,29) [migration/3]
(root,0,0,00:01:22/142-19:15:03,30) [ksoftirqd/3]
(root,0,0,00:00:00/142-19:15:03,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/142-19:15:03,33) [cpuhp/4]
(root,0,0,00:00:00/142-19:15:03,34) [idle_inject/4]
(root,0,0,00:00:34/142-19:15:03,35) [migration/4]
(root,0,0,00:01:03/142-19:15:03,36) [ksoftirqd/4]
(root,0,0,00:00:00/142-19:15:03,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/142-19:15:03,39) [cpuhp/5]
(root,0,0,00:00:00/142-19:15:03,40) [idle_inject/5]
(root,0,0,00:00:34/142-19:15:03,41) [migration/5]
(root,0,0,00:00:56/142-19:15:03,42) [ksoftirqd/5]
(root,0,0,00:00:00/142-19:15:03,44) [kworker/5:0H]
(root,0,0,00:00:00/142-19:15:03,45) [cpuhp/6]
(root,0,0,00:00:00/142-19:15:03,46) [idle_inject/6]
(root,0,0,00:00:32/142-19:15:03,47) [migration/6]
(root,0,0,00:08:36/142-19:15:03,48) [ksoftirqd/6]
(root,0,0,00:00:00/142-19:15:03,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/142-19:15:03,51) [cpuhp/7]
(root,0,0,00:00:00/142-19:15:03,52) [idle_inject/7]
(root,0,0,00:00:39/142-19:15:03,53) [migration/7]
(root,0,0,00:21:57/142-19:15:03,54) [ksoftirqd/7]
(root,0,0,00:00:00/142-19:15:03,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/142-19:15:03,57) [kdevtmpfs]
(root,0,0,00:00:00/142-19:15:03,58) [netns]
(root,0,0,00:00:00/142-19:15:03,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/142-19:15:03,60) [kauditd]
(root,0,0,00:00:04/142-19:15:03,62) [khungtaskd]
(root,0,0,00:00:00/142-19:15:03,63) [oom_reaper]
(root,0,0,00:00:00/142-19:15:03,64) [writeback]
(root,0,0,00:00:00/142-19:15:03,65) [kcompactd0]
(root,0,0,00:00:00/142-19:15:03,66) [ksmd]
(root,0,0,00:03:39/142-19:15:03,67) [khugepaged]
(root,0,0,00:00:00/142-19:15:03,113) [kintegrityd]
(root,0,0,00:00:00/142-19:15:03,114) [kblockd]
(root,0,0,00:00:00/142-19:15:03,115) [blkcg_punt_bio]
(root,0,0,00:00:00/142-19:15:03,116) [tpm_dev_wq]
(root,0,0,00:00:00/142-19:15:03,117) [ata_sff]
(root,0,0,00:00:00/142-19:15:03,118) [md]
(root,0,0,00:00:00/142-19:15:03,119) [edac-poller]
(root,0,0,00:00:00/142-19:15:03,120) [devfreq_wq]
(root,0,0,00:00:00/142-19:15:03,121) [watchdogd]
(root,0,0,00:21:24/142-19:15:03,128) [kswapd0]
(root,0,0,00:00:00/142-19:15:03,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/142-19:15:03,131) [kthrotld]
(root,0,0,00:00:00/142-19:15:03,132) [acpi_thermal_pm]
(root,0,0,00:00:00/142-19:15:03,133) [nvme-wq]
(root,0,0,00:00:00/142-19:15:03,134) [nvme-reset-wq]
(root,0,0,00:00:00/142-19:15:03,135) [nvme-delete-wq]
(root,0,0,00:00:00/142-19:15:03,137) [ipv6_addrconf]
(root,0,0,00:00:00/142-19:15:03,146) [kstrp]
(root,0,0,00:00:00/142-19:15:03,147) [kworker/u17:0]
(root,0,0,00:00:00/142-19:15:03,162) [charger_manager]
(root,0,0,00:00:00/142-19:15:02,210) [scsi_eh_0]
(root,0,0,00:00:00/142-19:15:02,211) [scsi_tmf_0]
(root,0,0,00:00:00/142-19:15:02,212) [scsi_eh_1]
(root,0,0,00:00:00/142-19:15:02,213) [scsi_tmf_1]
(root,0,0,00:00:00/142-19:15:02,214) [scsi_eh_2]
(root,0,0,00:00:00/142-19:15:02,215) [scsi_tmf_2]
(root,0,0,00:00:00/142-19:15:02,216) [scsi_eh_3]
(root,0,0,00:00:00/142-19:15:02,217) [scsi_tmf_3]
(root,0,0,00:00:00/142-19:15:02,218) [scsi_eh_4]
(root,0,0,00:00:00/142-19:15:02,219) [scsi_tmf_4]
(root,0,0,00:00:00/142-19:15:02,220) [scsi_eh_5]
(root,0,0,00:00:00/142-19:15:02,221) [scsi_tmf_5]
(root,0,0,00:03:10/142-19:15:02,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:05/142-19:15:02,229) [kworker/0:1H-kblockd]
(root,0,0,00:03:50/142-19:15:02,237) [kworker/1:1H-kblockd]
(root,0,0,00:43:07/142-19:15:02,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:15/142-19:15:02,239) [kworker/7:1H-kblockd]
(root,0,0,00:03:01/142-19:15:02,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:05/142-19:15:02,244) [kworker/2:1H-kblockd]
(root,0,0,00:02:58/142-19:15:02,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/142-19:15:02,248) [md1_raid1]
(root,0,0,00:00:29/142-19:15:02,251) [md0_raid1]
(root,0,0,01:01:00/142-19:15:02,253) [md2_raid1]
(root,0,0,00:00:00/142-19:15:01,268) [raid5wq]
(root,0,0,00:06:39/142-19:14:58,291) [jbd2/md2-8]
(root,0,0,00:00:00/142-19:14:58,292) [ext4-rsv-conver]
(root,194040,95296,00:33:08/142-19:14:58,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/142-19:14:58,348) [rpciod]
(root,0,0,00:00:00/142-19:14:58,349) [xprtiod]
(root,0,0,00:00:00/142-19:14:58,353) [spl_system_task]
(root,0,0,00:00:00/142-19:14:58,354) [spl_delay_taskq]
(root,0,0,00:00:00/142-19:14:58,355) [spl_dynamic_tas]
(root,0,0,00:00:00/142-19:14:58,356) [spl_kmem_cache]
(root,0,0,00:00:00/142-19:14:57,361) [zvol]
(root,0,0,00:00:00/142-19:14:57,362) [arc_prune]
(root,0,0,00:03:20/142-19:14:57,363) [arc_evict]
(root,0,0,00:03:07/142-19:14:57,364) [arc_reap]
(root,0,0,00:00:00/142-19:14:57,366) [dbu_evict]
(root,0,0,00:03:01/142-19:14:57,367) [dbuf_evict]
(root,22980,4024,00:15:55/142-19:14:57,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/142-19:14:57,376) [z_vdev_file]
(root,0,0,00:01:39/142-19:14:57,377) [l2arc_feed]
(root,0,0,00:00:00/142-19:14:57,485) [cryptd]
(root,3860,2148,00:00:04/142-19:14:57,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/142-19:14:57,522) [jbd2/md1-8]
(root,0,0,00:00:00/142-19:14:57,523) [ext4-rsv-conver]
(_rpc,7776,4464,00:00:21/142-19:14:55,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3532,00:00:09/142-19:14:55,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:29:11/142-19:14:55,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:04:43/142-19:14:55,571) /usr/sbin/watchdog-mux
(root,12248,4760,00:00:03/142-19:14:55,573) /usr/sbin/smartd -n
(messagebus,9048,4080,00:11:27/142-19:14:55,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:14/142-19:14:55,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4728,00:01:17/142-19:14:55,578) /lib/systemd/systemd-logind
(root,223768,3600,00:10:27/142-19:14:55,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2820,00:00:00/142-19:14:55,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/142-19:14:55,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,354192,11876,00:00:27/30-12:10:48,585) pvedaemon worker
(root,4084,1676,00:00:04/142-19:14:55,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1404,00:00:00/142-19:14:54,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:04:59/142-19:14:54,768) bpfilter_umh
(root,13808,4980,00:09:54/142-19:14:54,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/142-19:14:54,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3268,00:31:09/142-19:14:54,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,723104,50752,02:29:37/142-19:14:54,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:39/142-19:14:54,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3676,00:00:28/142-19:14:54,1025) /usr/lib/postfix/sbin/master -w
(postfix,43948,5348,00:00:06/142-19:14:54,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:14/142-19:14:53,1061) /usr/sbin/cron -f
(root,303168,37912,13:03:59/142-19:14:52,1068) pvestatd
(root,304364,30920,05:19:00/142-19:14:52,1069) pve-firewall
(root,353760,3968,00:01:41/142-19:14:52,1093) pvedaemon
(root,336416,11008,00:12:06/142-19:14:52,1101) pve-ha-crm
(www-data,355208,144620,00:03:40/142-19:14:51,1102) pveproxy
(www-data,68860,57960,00:02:19/142-19:14:51,1109) spiceproxy
(root,335964,31812,00:19:54/142-19:14:51,1111) pve-ha-lrm
(root,5928660,3389096,7-09:14:44/142-19:14:50,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:10/142-19:14:50,1129) [kvm-nx-lpage-re]
(root,0,0,10:49:40/142-19:14:50,1148) [vhost-1125]
(root,0,0,09:08:59/142-19:14:49,1167) [vhost-1125]
(root,0,0,00:59:41/142-19:14:49,1172) [kvm-pit/1125]
(root,13948292,8513412,50-21:39:33/142-19:14:46,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:04/142-19:14:46,1188) [kvm-nx-lpage-re]
(root,0,0,00:20:58/142-19:14:46,1207) [vhost-1184]
(root,0,0,01:07:20/142-19:14:46,1212) [kvm-pit/1184]
(root,0,0,00:00:00/142-19:14:43,1214) [dio/md2]
(root,3580212,2257224,34-13:38:03/142-19:14:42,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:38/142-19:14:42,1267) [kvm-nx-lpage-re]
(root,0,0,04:40:49/142-19:14:42,1286) [vhost-1263]
(root,0,0,00:00:00/142-19:14:42,1289) [kvm-pit/1263]
(root,0,0,00:00:00/142-19:14:41,1295) [ib-comp-wq]
(root,0,0,00:00:00/142-19:14:41,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/142-19:14:41,1297) [ib_mcast]
(root,0,0,00:00:00/142-19:14:41,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/142-19:14:41,1299) [rdma_cm]
(root,0,0,00:00:00/142-19:14:41,1300) [cifsiod]
(root,0,0,00:00:00/142-19:14:41,1301) [smb3decryptd]
(root,0,0,00:00:00/142-19:14:41,1302) [cifsfileinfoput]
(root,0,0,00:00:00/142-19:14:41,1303) [cifsoplockd]
(root,0,0,00:12:23/142-19:14:41,1305) [cifsd]
(root,0,0,00:04:39/142-19:14:41,1340) [cifsd]
(root,5974604,4111288,9-08:46:29/142-19:14:38,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:47/142-19:14:38,1358) [kvm-nx-lpage-re]
(root,0,0,01:50:41/142-19:14:38,1377) [vhost-1354]
(root,0,0,00:00:00/142-19:14:38,1382) [kvm-pit/1354]
(root,20996872,16866016,10-08:28:00/142-19:14:34,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:49/142-19:14:34,1398) [kvm-nx-lpage-re]
(root,0,0,01:15:27/142-19:14:33,1417) [vhost-1394]
(root,0,0,00:00:00/142-19:14:33,1422) [kvm-pit/1394]
(root,19278096,5152640,7-23:23:26/142-19:14:30,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:28/142-19:14:30,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:40/142-19:14:29,1487) [vhost-1464]
(root,0,0,00:00:00/142-19:14:29,1492) [kvm-pit/1464]
(root,5994744,4231424,32-03:35:03/142-19:14:26,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:46/142-19:14:26,1511) [kvm-nx-lpage-re]
(root,0,0,01:23:47/142-19:14:25,1531) [vhost-1507]
(root,0,0,00:00:00/142-19:14:25,1534) [kvm-pit/1507]
(root,0,0,00:00:00/59:32,5177) [kworker/4:2-rcu_gp]
(postfix,43844,7688,00:00:00/38:33,11070) pickup -l -t unix -u -c
(root,0,0,00:00:00/35:32,11896) [kworker/0:2-events]
(root,0,0,00:00:00/25:34,14639) [kworker/u16:0-events_power_efficient]
(root,0,0,00:00:00/22:32,15465) [kworker/3:2-cgroup_destroy]
(root,0,0,00:00:00/21:32,15737) [kworker/7:1-cgroup_destroy]
(root,0,0,00:00:00/20:32,16017) [kworker/2:1-events]
(root,0,0,00:00:00/19:32,16287) [kworker/5:0-events]
(root,0,0,00:00:00/18:32,16571) [kworker/1:2-events]
(root,0,0,00:00:00/18:32,16572) [kworker/1:3-events]
(root,0,0,00:00:00/14:32,17685) [kworker/3:0-events]
(root,0,0,00:00:00/14:32,17686) [kworker/7:0-events]
(root,0,0,00:00:00/13:32,17966) [kworker/4:0-events]
(root,362260,16032,00:01:29/89-09:21:20,18556) pvedaemon worker
(root,0,0,00:00:00/10:32,18796) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/08:32,19350) [kworker/6:0-events]
(root,0,0,00:00:00/08:32,19351) [kworker/6:3-cgroup_destroy]
(root,0,0,00:00:00/07:32,19621) [kworker/5:1-events]
(root,0,0,00:00:00/06:11,19970) [kworker/u16:2]
(root,0,0,00:00:00/05:32,20179) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/04:32,20455) [kworker/2:0-events]
(root,0,0,00:00:00/04:32,20456) [kworker/2:3-cgroup_destroy]
(root,0,0,00:00:00/03:32,20728) [kworker/1:0-cgroup_destroy]
(root,0,0,00:00:00/03:32,20729) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/03:11,20792) [kworker/4:1-events]
(root,0,0,00:00:00/02:32,21005) [kworker/7:2-events]
(root,13808,6712,00:00:00/01:44,21149) sshd: [accepted]
(root,0,0,00:00:00/01:32,21275) [kworker/5:2]
(root,13808,6712,00:00:00/00:39,21511) sshd: [accepted]
(root,0,0,00:00:00/00:32,21548) [kworker/3:1-events]
(root,7188,3308,00:00:00/00:00,21709) /bin/bash /usr/bin/check_mk_agent
(root,40732,35236,00:00:00/00:00,21790) /usr/bin/perl /usr/bin/pvecm status
(root,7188,3272,00:00:00/00:00,21791) /bin/bash /usr/bin/check_mk_agent
(root,7632,2744,00:00:00/00:00,21817) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,992,00:00:00/00:00,21818) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(www-data,76928,54800,00:00:00/01:52:30,22326) spiceproxy worker
(root,86168,2240,00:00:00/01:52:30,22328) /usr/sbin/pvefw-logger
(www-data,355504,130248,00:00:00/01:52:30,22331) pveproxy worker
(www-data,355636,130556,00:00:00/01:52:30,22332) pveproxy worker
(www-data,355504,130248,00:00:00/01:52:30,22333) pveproxy worker
(root,362584,18972,00:01:52/116-04:16:29,27309) pvedaemon worker
(root,18814560,10446412,4-23:15:28/116-15:48:55,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:15/116-15:48:55,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:07/116-15:48:55,28619) [vhost-28596]
(root,0,0,00:55:51/116-15:48:55,28626) [kvm-pit/28596]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-12 00:52

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c4270fea090

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,6948,00:14:13/140-16:29:11,1) /sbin/init
(root,0,0,00:00:08/140-16:29:11,2) [kthreadd]
(root,0,0,00:00:00/140-16:29:11,3) [rcu_gp]
(root,0,0,00:00:00/140-16:29:11,4) [rcu_par_gp]
(root,0,0,00:00:00/140-16:29:11,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/140-16:29:11,9) [mm_percpu_wq]
(root,0,0,00:04:06/140-16:29:11,10) [ksoftirqd/0]
(root,0,0,00:29:26/140-16:29:11,11) [rcu_sched]
(root,0,0,00:00:34/140-16:29:11,12) [migration/0]
(root,0,0,00:00:00/140-16:29:11,13) [idle_inject/0]
(root,0,0,00:00:00/140-16:29:11,14) [cpuhp/0]
(root,0,0,00:00:00/140-16:29:11,15) [cpuhp/1]
(root,0,0,00:00:00/140-16:29:11,16) [idle_inject/1]
(root,0,0,00:00:35/140-16:29:11,17) [migration/1]
(root,0,0,00:02:59/140-16:29:11,18) [ksoftirqd/1]
(root,0,0,00:00:00/140-16:29:11,20) [kworker/1:0H]
(root,0,0,00:00:00/140-16:29:11,21) [cpuhp/2]
(root,0,0,00:00:00/140-16:29:11,22) [idle_inject/2]
(root,0,0,00:00:34/140-16:29:11,23) [migration/2]
(root,0,0,00:01:52/140-16:29:11,24) [ksoftirqd/2]
(root,0,0,00:00:00/140-16:29:11,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/140-16:29:11,27) [cpuhp/3]
(root,0,0,00:00:00/140-16:29:11,28) [idle_inject/3]
(root,0,0,00:00:45/140-16:29:11,29) [migration/3]
(root,0,0,00:01:21/140-16:29:11,30) [ksoftirqd/3]
(root,0,0,00:00:00/140-16:29:11,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/140-16:29:11,33) [cpuhp/4]
(root,0,0,00:00:00/140-16:29:11,34) [idle_inject/4]
(root,0,0,00:00:33/140-16:29:11,35) [migration/4]
(root,0,0,00:01:02/140-16:29:11,36) [ksoftirqd/4]
(root,0,0,00:00:00/140-16:29:11,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/140-16:29:11,39) [cpuhp/5]
(root,0,0,00:00:00/140-16:29:11,40) [idle_inject/5]
(root,0,0,00:00:33/140-16:29:11,41) [migration/5]
(root,0,0,00:00:55/140-16:29:11,42) [ksoftirqd/5]
(root,0,0,00:00:00/140-16:29:11,44) [kworker/5:0H]
(root,0,0,00:00:00/140-16:29:11,45) [cpuhp/6]
(root,0,0,00:00:00/140-16:29:11,46) [idle_inject/6]
(root,0,0,00:00:31/140-16:29:11,47) [migration/6]
(root,0,0,00:08:28/140-16:29:11,48) [ksoftirqd/6]
(root,0,0,00:00:00/140-16:29:11,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/140-16:29:11,51) [cpuhp/7]
(root,0,0,00:00:00/140-16:29:11,52) [idle_inject/7]
(root,0,0,00:00:38/140-16:29:11,53) [migration/7]
(root,0,0,00:21:35/140-16:29:11,54) [ksoftirqd/7]
(root,0,0,00:00:00/140-16:29:11,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/140-16:29:11,57) [kdevtmpfs]
(root,0,0,00:00:00/140-16:29:11,58) [netns]
(root,0,0,00:00:00/140-16:29:11,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/140-16:29:11,60) [kauditd]
(root,0,0,00:00:04/140-16:29:11,62) [khungtaskd]
(root,0,0,00:00:00/140-16:29:11,63) [oom_reaper]
(root,0,0,00:00:00/140-16:29:11,64) [writeback]
(root,0,0,00:00:00/140-16:29:11,65) [kcompactd0]
(root,0,0,00:00:00/140-16:29:11,66) [ksmd]
(root,0,0,00:03:39/140-16:29:11,67) [khugepaged]
(root,0,0,00:00:00/140-16:29:11,113) [kintegrityd]
(root,0,0,00:00:00/140-16:29:11,114) [kblockd]
(root,0,0,00:00:00/140-16:29:11,115) [blkcg_punt_bio]
(root,0,0,00:00:00/140-16:29:11,116) [tpm_dev_wq]
(root,0,0,00:00:00/140-16:29:11,117) [ata_sff]
(root,0,0,00:00:00/140-16:29:11,118) [md]
(root,0,0,00:00:00/140-16:29:11,119) [edac-poller]
(root,0,0,00:00:00/140-16:29:11,120) [devfreq_wq]
(root,0,0,00:00:00/140-16:29:11,121) [watchdogd]
(root,0,0,00:21:05/140-16:29:11,128) [kswapd0]
(root,0,0,00:00:00/140-16:29:11,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/140-16:29:11,131) [kthrotld]
(root,0,0,00:00:00/140-16:29:11,132) [acpi_thermal_pm]
(root,0,0,00:00:00/140-16:29:11,133) [nvme-wq]
(root,0,0,00:00:00/140-16:29:11,134) [nvme-reset-wq]
(root,0,0,00:00:00/140-16:29:11,135) [nvme-delete-wq]
(root,0,0,00:00:00/140-16:29:11,137) [ipv6_addrconf]
(root,0,0,00:00:00/140-16:29:11,146) [kstrp]
(root,0,0,00:00:00/140-16:29:11,147) [kworker/u17:0]
(root,0,0,00:00:00/140-16:29:11,162) [charger_manager]
(root,0,0,00:00:00/140-16:29:10,210) [scsi_eh_0]
(root,0,0,00:00:00/140-16:29:10,211) [scsi_tmf_0]
(root,0,0,00:00:00/140-16:29:10,212) [scsi_eh_1]
(root,0,0,00:00:00/140-16:29:10,213) [scsi_tmf_1]
(root,0,0,00:00:00/140-16:29:10,214) [scsi_eh_2]
(root,0,0,00:00:00/140-16:29:10,215) [scsi_tmf_2]
(root,0,0,00:00:00/140-16:29:10,216) [scsi_eh_3]
(root,0,0,00:00:00/140-16:29:10,217) [scsi_tmf_3]
(root,0,0,00:00:00/140-16:29:10,218) [scsi_eh_4]
(root,0,0,00:00:00/140-16:29:10,219) [scsi_tmf_4]
(root,0,0,00:00:00/140-16:29:10,220) [scsi_eh_5]
(root,0,0,00:00:00/140-16:29:10,221) [scsi_tmf_5]
(root,0,0,00:03:07/140-16:29:10,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:02/140-16:29:10,229) [kworker/0:1H-kblockd]
(root,0,0,00:03:47/140-16:29:10,237) [kworker/1:1H-kblockd]
(root,0,0,00:42:32/140-16:29:10,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:12/140-16:29:10,239) [kworker/7:1H-kblockd]
(root,0,0,00:02:59/140-16:29:10,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:02/140-16:29:10,244) [kworker/2:1H-kblockd]
(root,0,0,00:02:56/140-16:29:10,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/140-16:29:10,248) [md1_raid1]
(root,0,0,00:00:29/140-16:29:10,251) [md0_raid1]
(root,0,0,01:00:28/140-16:29:10,253) [md2_raid1]
(root,0,0,00:00:00/140-16:29:09,268) [raid5wq]
(root,0,0,00:06:34/140-16:29:06,291) [jbd2/md2-8]
(root,0,0,00:00:00/140-16:29:06,292) [ext4-rsv-conver]
(root,153156,64336,00:32:22/140-16:29:06,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/140-16:29:06,348) [rpciod]
(root,0,0,00:00:00/140-16:29:06,349) [xprtiod]
(root,0,0,00:00:00/140-16:29:06,353) [spl_system_task]
(root,0,0,00:00:00/140-16:29:06,354) [spl_delay_taskq]
(root,0,0,00:00:00/140-16:29:06,355) [spl_dynamic_tas]
(root,0,0,00:00:00/140-16:29:06,356) [spl_kmem_cache]
(root,0,0,00:00:00/140-16:29:05,361) [zvol]
(root,0,0,00:00:00/140-16:29:05,362) [arc_prune]
(root,0,0,00:03:18/140-16:29:05,363) [arc_evict]
(root,0,0,00:03:05/140-16:29:05,364) [arc_reap]
(root,0,0,00:00:00/140-16:29:05,366) [dbu_evict]
(root,0,0,00:02:59/140-16:29:05,367) [dbuf_evict]
(root,22980,4024,00:15:41/140-16:29:05,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/140-16:29:05,376) [z_vdev_file]
(root,0,0,00:01:37/140-16:29:05,377) [l2arc_feed]
(root,0,0,00:00:00/140-16:29:05,485) [cryptd]
(root,3860,2148,00:00:04/140-16:29:05,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/140-16:29:05,522) [jbd2/md1-8]
(root,0,0,00:00:00/140-16:29:05,523) [ext4-rsv-conver]
(_rpc,7776,4464,00:00:21/140-16:29:03,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3532,00:00:09/140-16:29:03,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:28:48/140-16:29:03,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:04:39/140-16:29:03,571) /usr/sbin/watchdog-mux
(root,12248,4764,00:00:03/140-16:29:03,573) /usr/sbin/smartd -n
(messagebus,9048,4084,00:11:14/140-16:29:03,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:14/140-16:29:03,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4728,00:01:16/140-16:29:03,578) /lib/systemd/systemd-logind
(root,223768,3600,00:10:13/140-16:29:03,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2820,00:00:00/140-16:29:03,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/140-16:29:03,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,354192,11916,00:00:25/28-09:24:56,585) pvedaemon worker
(root,4084,1676,00:00:04/140-16:29:03,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1404,00:00:00/140-16:29:02,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:04:55/140-16:29:02,768) bpfilter_umh
(root,13808,4980,00:09:40/140-16:29:02,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/140-16:29:02,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3268,00:30:41/140-16:29:02,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,741716,60148,02:27:31/140-16:29:02,937) /usr/bin/pmxcfs
(root,86168,2108,00:00:04/23:06:38,965) /usr/sbin/pvefw-logger
(root,9600,1968,00:00:39/140-16:29:02,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(www-data,77008,54776,00:00:01/23:06:38,969) spiceproxy worker
(www-data,367632,137540,00:00:00/23:06:38,975) pveproxy worker
(www-data,367628,137336,00:00:00/23:06:38,976) pveproxy worker
(www-data,367632,137328,00:00:00/23:06:38,977) pveproxy worker
(root,43484,3676,00:00:28/140-16:29:02,1025) /usr/lib/postfix/sbin/master -w
(postfix,43948,5440,00:00:05/140-16:29:02,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:14/140-16:29:01,1061) /usr/sbin/cron -f
(root,303168,37948,12:51:57/140-16:29:00,1068) pvestatd
(root,304364,30952,05:14:11/140-16:29:00,1069) pve-firewall
(root,353760,3968,00:01:39/140-16:29:00,1093) pvedaemon
(root,336416,11052,00:11:55/140-16:29:00,1101) pve-ha-crm
(www-data,355216,142484,00:03:36/140-16:28:59,1102) pveproxy
(www-data,68848,57532,00:02:17/140-16:28:59,1109) spiceproxy
(root,335964,31860,00:19:36/140-16:28:59,1111) pve-ha-lrm
(root,5915784,3377480,7-06:36:48/140-16:28:58,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:10/140-16:28:58,1129) [kvm-nx-lpage-re]
(root,0,0,10:40:23/140-16:28:58,1148) [vhost-1125]
(root,0,0,09:01:05/140-16:28:57,1167) [vhost-1125]
(root,0,0,00:58:53/140-16:28:57,1172) [kvm-pit/1125]
(root,13939700,8507024,48-15:39:30/140-16:28:54,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:04:59/140-16:28:54,1188) [kvm-nx-lpage-re]
(root,0,0,00:20:51/140-16:28:54,1207) [vhost-1184]
(root,0,0,01:06:23/140-16:28:54,1212) [kvm-pit/1184]
(root,0,0,00:00:00/140-16:28:51,1214) [dio/md2]
(root,3566828,2244172,34-00:43:22/140-16:28:50,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:37/140-16:28:50,1267) [kvm-nx-lpage-re]
(root,0,0,04:37:09/140-16:28:50,1286) [vhost-1263]
(root,0,0,00:00:00/140-16:28:50,1289) [kvm-pit/1263]
(root,0,0,00:00:00/140-16:28:49,1295) [ib-comp-wq]
(root,0,0,00:00:00/140-16:28:49,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/140-16:28:49,1297) [ib_mcast]
(root,0,0,00:00:00/140-16:28:49,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/140-16:28:49,1299) [rdma_cm]
(root,0,0,00:00:00/140-16:28:49,1300) [cifsiod]
(root,0,0,00:00:00/140-16:28:49,1301) [smb3decryptd]
(root,0,0,00:00:00/140-16:28:49,1302) [cifsfileinfoput]
(root,0,0,00:00:00/140-16:28:49,1303) [cifsoplockd]
(root,0,0,00:12:13/140-16:28:49,1305) [cifsd]
(root,0,0,00:04:34/140-16:28:49,1340) [cifsd]
(root,5966020,4099732,9-05:17:12/140-16:28:46,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:46/140-16:28:46,1358) [kvm-nx-lpage-re]
(root,0,0,01:49:07/140-16:28:46,1377) [vhost-1354]
(root,0,0,00:00:00/140-16:28:46,1382) [kvm-pit/1354]
(root,20988292,16857576,10-03:29:36/140-16:28:42,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:46/140-16:28:42,1398) [kvm-nx-lpage-re]
(root,0,0,01:14:09/140-16:28:41,1417) [vhost-1394]
(root,0,0,00:00:00/140-16:28:41,1422) [kvm-pit/1394]
(root,19265208,5107948,7-20:27:39/140-16:28:38,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:28/140-16:28:38,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:39/140-16:28:37,1487) [vhost-1464]
(root,0,0,00:00:00/140-16:28:37,1492) [kvm-pit/1464]
(root,5986156,4222404,31-19:36:34/140-16:28:34,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:45/140-16:28:34,1511) [kvm-nx-lpage-re]
(root,0,0,01:22:08/140-16:28:33,1531) [vhost-1507]
(root,0,0,00:00:00/140-16:28:33,1534) [kvm-pit/1507]
(root,0,0,00:00:00/33:40,3636) [kworker/0:1-events]
(root,0,0,00:00:00/29:40,4785) [kworker/6:0-events]
(root,0,0,00:00:00/21:40,7049) [kworker/4:2-events]
(root,0,0,00:00:00/18:40,7887) [kworker/5:1-cgroup_destroy]
(root,0,0,00:00:00/18:05,8010) [kworker/6:2-events]
(root,0,0,00:00:00/17:58,8015) [kworker/u16:1-events_unbound]
(root,0,0,00:00:00/16:40,8461) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/16:40,8462) [kworker/3:2-events]
(root,0,0,00:00:00/15:40,8748) [kworker/7:0-events]
(root,0,0,00:00:00/15:40,8749) [kworker/7:3-events]
(root,0,0,00:00:00/11:50,9833) [kworker/u16:0-events_power_efficient]
(root,0,0,00:00:00/09:40,10426) [kworker/5:0-events]
(root,0,0,00:00:00/08:40,10701) [kworker/5:2-cgroup_destroy]
(root,0,0,00:00:00/07:40,10989) [kworker/1:0-cgroup_destroy]
(root,0,0,00:00:00/07:40,10990) [kworker/1:3-events]
(root,0,0,00:00:00/06:40,11269) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/06:40,11270) [kworker/2:3-events]
(root,0,0,00:00:00/06:31,11307) [kworker/0:2-events]
(root,0,0,00:00:00/04:55,11714) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/03:40,12131) [kworker/7:1-cgroup_destroy]
(root,0,0,00:00:00/03:40,12132) [kworker/7:2-cgroup_destroy]
(root,0,0,00:00:00/02:49,12381) [kworker/6:1-md]
(root,0,0,00:00:00/02:40,12418) [kworker/6:3-cgroup_destroy]
(root,0,0,00:00:00/01:40,12699) [kworker/1:1-md]
(root,0,0,00:00:00/00:40,12989) [kworker/0:0-cgroup_destroy]
(root,14792,8000,00:00:00/00:04,13118) sshd: unknown [priv]
(sshd,13808,4876,00:00:00/00:04,13119) sshd: unknown [net]
(root,7188,3172,00:00:00/00:00,13204) /bin/bash /usr/bin/check_mk_agent
(root,7188,3256,00:00:00/00:00,13286) /bin/bash /usr/bin/check_mk_agent
(root,11336,8332,00:00:00/00:00,13291) /usr/bin/perl /usr/bin/pvecm nodes
(root,7632,2728,00:00:00/00:00,13313) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,984,00:00:00/00:00,13314) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362260,16076,00:01:27/87-06:35:28,18556) pvedaemon worker
(postfix,43844,7712,00:00:00/01:30:21,20002) pickup -l -t unix -u -c
(root,362584,19036,00:01:50/114-01:30:37,27309) pvedaemon worker
(root,18726824,10437288,4-20:56:49/114-13:03:03,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:14/114-13:03:03,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:07/114-13:03:03,28619) [vhost-28596]
(root,0,0,00:54:54/114-13:03:03,28626) [kvm-pit/28596]
(root,0,0,00:00:00/47:40,31908) [kworker/4:1-cgroup_destroy]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-09 22:06

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c4242faadd3

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7152,00:14:00/138-19:08:02,1) /sbin/init
(root,0,0,00:00:08/138-19:08:02,2) [kthreadd]
(root,0,0,00:00:00/138-19:08:02,3) [rcu_gp]
(root,0,0,00:00:00/138-19:08:02,4) [rcu_par_gp]
(root,0,0,00:00:00/138-19:08:02,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/138-19:08:02,9) [mm_percpu_wq]
(root,0,0,00:04:04/138-19:08:02,10) [ksoftirqd/0]
(root,0,0,00:29:01/138-19:08:02,11) [rcu_sched]
(root,0,0,00:00:34/138-19:08:02,12) [migration/0]
(root,0,0,00:00:00/138-19:08:02,13) [idle_inject/0]
(root,0,0,00:00:00/138-19:08:02,14) [cpuhp/0]
(root,0,0,00:00:00/138-19:08:02,15) [cpuhp/1]
(root,0,0,00:00:00/138-19:08:02,16) [idle_inject/1]
(root,0,0,00:00:34/138-19:08:02,17) [migration/1]
(root,0,0,00:02:57/138-19:08:02,18) [ksoftirqd/1]
(root,0,0,00:00:00/138-19:08:02,20) [kworker/1:0H]
(root,0,0,00:00:00/138-19:08:02,21) [cpuhp/2]
(root,0,0,00:00:00/138-19:08:02,22) [idle_inject/2]
(root,0,0,00:00:33/138-19:08:02,23) [migration/2]
(root,0,0,00:01:51/138-19:08:02,24) [ksoftirqd/2]
(root,0,0,00:00:00/138-19:08:02,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/138-19:08:02,27) [cpuhp/3]
(root,0,0,00:00:00/138-19:08:02,28) [idle_inject/3]
(root,0,0,00:00:44/138-19:08:02,29) [migration/3]
(root,0,0,00:01:20/138-19:08:02,30) [ksoftirqd/3]
(root,0,0,00:00:00/138-19:08:02,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/138-19:08:02,33) [cpuhp/4]
(root,0,0,00:00:00/138-19:08:02,34) [idle_inject/4]
(root,0,0,00:00:33/138-19:08:02,35) [migration/4]
(root,0,0,00:01:01/138-19:08:02,36) [ksoftirqd/4]
(root,0,0,00:00:00/138-19:08:02,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/138-19:08:02,39) [cpuhp/5]
(root,0,0,00:00:00/138-19:08:02,40) [idle_inject/5]
(root,0,0,00:00:33/138-19:08:02,41) [migration/5]
(root,0,0,00:00:54/138-19:08:02,42) [ksoftirqd/5]
(root,0,0,00:00:00/138-19:08:02,44) [kworker/5:0H]
(root,0,0,00:00:00/138-19:08:02,45) [cpuhp/6]
(root,0,0,00:00:00/138-19:08:02,46) [idle_inject/6]
(root,0,0,00:00:31/138-19:08:02,47) [migration/6]
(root,0,0,00:08:21/138-19:08:02,48) [ksoftirqd/6]
(root,0,0,00:00:00/138-19:08:02,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/138-19:08:02,51) [cpuhp/7]
(root,0,0,00:00:00/138-19:08:02,52) [idle_inject/7]
(root,0,0,00:00:38/138-19:08:02,53) [migration/7]
(root,0,0,00:21:15/138-19:08:02,54) [ksoftirqd/7]
(root,0,0,00:00:00/138-19:08:02,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/138-19:08:02,57) [kdevtmpfs]
(root,0,0,00:00:00/138-19:08:02,58) [netns]
(root,0,0,00:00:00/138-19:08:02,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/138-19:08:02,60) [kauditd]
(root,0,0,00:00:04/138-19:08:02,62) [khungtaskd]
(root,0,0,00:00:00/138-19:08:02,63) [oom_reaper]
(root,0,0,00:00:00/138-19:08:02,64) [writeback]
(root,0,0,00:00:00/138-19:08:02,65) [kcompactd0]
(root,0,0,00:00:00/138-19:08:02,66) [ksmd]
(root,0,0,00:03:38/138-19:08:02,67) [khugepaged]
(root,0,0,00:00:00/138-19:08:02,113) [kintegrityd]
(root,0,0,00:00:00/138-19:08:02,114) [kblockd]
(root,0,0,00:00:00/138-19:08:02,115) [blkcg_punt_bio]
(root,0,0,00:00:00/138-19:08:02,116) [tpm_dev_wq]
(root,0,0,00:00:00/138-19:08:02,117) [ata_sff]
(root,0,0,00:00:00/138-19:08:02,118) [md]
(root,0,0,00:00:00/138-19:08:02,119) [edac-poller]
(root,0,0,00:00:00/138-19:08:02,120) [devfreq_wq]
(root,0,0,00:00:00/138-19:08:02,121) [watchdogd]
(root,0,0,00:20:46/138-19:08:02,128) [kswapd0]
(root,0,0,00:00:00/138-19:08:02,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/138-19:08:02,131) [kthrotld]
(root,0,0,00:00:00/138-19:08:02,132) [acpi_thermal_pm]
(root,0,0,00:00:00/138-19:08:02,133) [nvme-wq]
(root,0,0,00:00:00/138-19:08:02,134) [nvme-reset-wq]
(root,0,0,00:00:00/138-19:08:02,135) [nvme-delete-wq]
(root,0,0,00:00:00/138-19:08:02,137) [ipv6_addrconf]
(root,0,0,00:00:00/138-19:08:02,146) [kstrp]
(root,0,0,00:00:00/138-19:08:02,147) [kworker/u17:0]
(root,0,0,00:00:00/138-19:08:02,162) [charger_manager]
(root,0,0,00:00:00/138-19:08:01,210) [scsi_eh_0]
(root,0,0,00:00:00/138-19:08:01,211) [scsi_tmf_0]
(root,0,0,00:00:00/138-19:08:01,212) [scsi_eh_1]
(root,0,0,00:00:00/138-19:08:01,213) [scsi_tmf_1]
(root,0,0,00:00:00/138-19:08:01,214) [scsi_eh_2]
(root,0,0,00:00:00/138-19:08:01,215) [scsi_tmf_2]
(root,0,0,00:00:00/138-19:08:01,216) [scsi_eh_3]
(root,0,0,00:00:00/138-19:08:01,217) [scsi_tmf_3]
(root,0,0,00:00:00/138-19:08:01,218) [scsi_eh_4]
(root,0,0,00:00:00/138-19:08:01,219) [scsi_tmf_4]
(root,0,0,00:00:00/138-19:08:01,220) [scsi_eh_5]
(root,0,0,00:00:00/138-19:08:01,221) [scsi_tmf_5]
(root,0,0,00:03:05/138-19:08:01,228) [kworker/3:1H-kblockd]
(root,0,0,00:04:00/138-19:08:01,229) [kworker/0:1H-kblockd]
(root,0,0,00:03:45/138-19:08:01,237) [kworker/1:1H-kblockd]
(root,0,0,00:42:00/138-19:08:01,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:09/138-19:08:01,239) [kworker/7:1H-kblockd]
(root,0,0,00:02:57/138-19:08:01,243) [kworker/4:1H-kblockd]
(root,0,0,00:03:00/138-19:08:01,244) [kworker/2:1H-kblockd]
(root,0,0,00:02:54/138-19:08:01,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/138-19:08:01,248) [md1_raid1]
(root,0,0,00:00:29/138-19:08:01,251) [md0_raid1]
(root,0,0,01:00:00/138-19:08:01,253) [md2_raid1]
(root,0,0,00:00:00/138-19:08:00,268) [raid5wq]
(root,0,0,00:06:29/138-19:07:57,291) [jbd2/md2-8]
(root,0,0,00:00:00/138-19:07:57,292) [ext4-rsv-conver]
(root,173476,79940,00:31:45/138-19:07:57,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/138-19:07:57,348) [rpciod]
(root,0,0,00:00:00/138-19:07:57,349) [xprtiod]
(root,0,0,00:00:00/138-19:07:57,353) [spl_system_task]
(root,0,0,00:00:00/138-19:07:57,354) [spl_delay_taskq]
(root,0,0,00:00:00/138-19:07:57,355) [spl_dynamic_tas]
(root,0,0,00:00:00/138-19:07:57,356) [spl_kmem_cache]
(root,0,0,00:00:00/138-19:07:56,361) [zvol]
(root,0,0,00:00:00/138-19:07:56,362) [arc_prune]
(root,0,0,00:03:15/138-19:07:56,363) [arc_evict]
(root,0,0,00:03:02/138-19:07:56,364) [arc_reap]
(root,0,0,00:00:00/138-19:07:56,366) [dbu_evict]
(root,0,0,00:02:56/138-19:07:56,367) [dbuf_evict]
(root,22980,4024,00:15:27/138-19:07:56,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/138-19:07:56,376) [z_vdev_file]
(root,0,0,00:01:36/138-19:07:56,377) [l2arc_feed]
(root,0,0,00:00:00/138-19:07:56,485) [cryptd]
(root,3860,2148,00:00:04/138-19:07:56,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/138-19:07:56,522) [jbd2/md1-8]
(root,0,0,00:00:00/138-19:07:56,523) [ext4-rsv-conver]
(_rpc,7776,4464,00:00:20/138-19:07:54,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3532,00:00:09/138-19:07:54,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:28:27/138-19:07:54,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:04:36/138-19:07:54,571) /usr/sbin/watchdog-mux
(root,12248,4764,00:00:03/138-19:07:54,573) /usr/sbin/smartd -n
(messagebus,9048,4084,00:10:59/138-19:07:54,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:14/138-19:07:54,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4728,00:01:15/138-19:07:54,578) /lib/systemd/systemd-logind
(root,223768,3608,00:10:02/138-19:07:54,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2820,00:00:00/138-19:07:54,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/138-19:07:54,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,354192,12024,00:00:24/26-12:03:47,585) pvedaemon worker
(root,4084,1676,00:00:04/138-19:07:54,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1404,00:00:00/138-19:07:53,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:04:51/138-19:07:53,768) bpfilter_umh
(root,13808,4980,00:09:28/138-19:07:53,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/138-19:07:53,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3268,00:30:15/138-19:07:53,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,723104,49856,02:25:37/138-19:07:53,937) /usr/bin/pmxcfs
(root,9600,1968,00:00:38/138-19:07:53,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3680,00:00:27/138-19:07:53,1025) /usr/lib/postfix/sbin/master -w
(postfix,43948,5524,00:00:05/138-19:07:53,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:13/138-19:07:52,1061) /usr/sbin/cron -f
(root,303168,38124,12:41:01/138-19:07:51,1068) pvestatd
(root,304364,31120,05:09:40/138-19:07:51,1069) pve-firewall
(root,353760,3968,00:01:38/138-19:07:51,1093) pvedaemon
(root,336416,11224,00:11:45/138-19:07:51,1101) pve-ha-crm
(www-data,355116,144372,00:03:33/138-19:07:50,1102) pveproxy
(www-data,68836,57796,00:02:16/138-19:07:50,1109) spiceproxy
(root,335964,32036,00:19:21/138-19:07:50,1111) pve-ha-lrm
(root,5911492,3376104,7-04:14:56/138-19:07:49,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:10/138-19:07:49,1129) [kvm-nx-lpage-re]
(root,0,0,10:31:57/138-19:07:49,1148) [vhost-1125]
(root,0,0,00:00:00/20:31,1161) [kworker/7:1-cgroup_destroy]
(root,0,0,08:54:02/138-19:07:48,1167) [vhost-1125]
(root,0,0,00:58:11/138-19:07:48,1172) [kvm-pit/1125]
(root,13931108,8500144,46-15:27:45/138-19:07:45,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:04:55/138-19:07:45,1188) [kvm-nx-lpage-re]
(root,0,0,00:20:45/138-19:07:45,1207) [vhost-1184]
(root,0,0,01:05:32/138-19:07:45,1212) [kvm-pit/1184]
(root,0,0,00:00:00/138-19:07:42,1214) [dio/md2]
(root,3563052,2241368,33-13:18:24/138-19:07:41,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:37/138-19:07:41,1267) [kvm-nx-lpage-re]
(root,0,0,04:34:01/138-19:07:41,1286) [vhost-1263]
(root,0,0,00:00:00/138-19:07:41,1289) [kvm-pit/1263]
(root,0,0,00:00:00/138-19:07:40,1295) [ib-comp-wq]
(root,0,0,00:00:00/138-19:07:40,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/138-19:07:40,1297) [ib_mcast]
(root,0,0,00:00:00/138-19:07:40,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/138-19:07:40,1299) [rdma_cm]
(root,0,0,00:00:00/138-19:07:40,1300) [cifsiod]
(root,0,0,00:00:00/138-19:07:40,1301) [smb3decryptd]
(root,0,0,00:00:00/138-19:07:40,1302) [cifsfileinfoput]
(root,0,0,00:00:00/138-19:07:40,1303) [cifsoplockd]
(root,0,0,00:12:02/138-19:07:40,1305) [cifsd]
(root,0,0,00:04:31/138-19:07:40,1340) [cifsd]
(root,5957432,4092408,9-02:08:51/138-19:07:37,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:45/138-19:07:37,1358) [kvm-nx-lpage-re]
(root,0,0,01:47:40/138-19:07:37,1377) [vhost-1354]
(root,0,0,00:00:00/138-19:07:37,1382) [kvm-pit/1354]
(root,20979712,16850588,10-00:10:49/138-19:07:33,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:44/138-19:07:33,1398) [kvm-nx-lpage-re]
(root,0,0,01:13:02/138-19:07:32,1417) [vhost-1394]
(root,0,0,00:00:00/138-19:07:32,1422) [kvm-pit/1394]
(root,19260912,5060280,7-17:55:10/138-19:07:29,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:27/138-19:07:29,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:38/138-19:07:28,1487) [vhost-1464]
(root,0,0,00:00:00/138-19:07:28,1492) [kvm-pit/1464]
(root,5977572,4214688,31-12:27:46/138-19:07:25,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:43/138-19:07:25,1511) [kvm-nx-lpage-re]
(root,0,0,00:00:00/19:31,1512) [kworker/4:0-events]
(root,0,0,01:20:31/138-19:07:24,1531) [vhost-1507]
(root,0,0,00:00:00/138-19:07:24,1534) [kvm-pit/1507]
(root,0,0,00:00:00/17:31,2076) [kworker/3:0-events]
(root,0,0,00:00:00/14:31,2925) [kworker/0:2-events]
(root,0,0,00:00:00/11:31,3774) [kworker/7:2-events]
(root,0,0,00:00:00/10:31,4053) [kworker/4:1-events]
(root,0,0,00:00:00/09:32,4319) [kworker/u16:2-events_unbound]
(root,0,0,00:00:00/08:31,4626) [kworker/6:1-events]
(root,0,0,00:00:00/08:31,4629) [kworker/6:3-events]
(root,0,0,00:00:00/07:31,4909) [kworker/1:1-events]
(root,0,0,00:00:00/07:31,4911) [kworker/1:3]
(root,0,0,00:00:00/06:31,5200) [kworker/5:1-cgroup_destroy]
(root,0,0,00:00:00/04:32,5767) [kworker/3:2-events]
(root,0,0,00:00:00/04:31,5768) [kworker/3:3-cgroup_destroy]
(root,0,0,00:00:00/03:31,6046) [kworker/u16:0-flush-9:2]
(root,0,0,00:00:00/03:31,6061) [kworker/4:2-cgroup_destroy]
(root,0,0,00:00:00/01:31,6638) [kworker/6:0-md]
(root,0,0,00:00:00/01:31,6639) [kworker/6:2-cgroup_destroy]
(root,0,0,00:00:00/00:31,6925) [kworker/7:0-events]
(root,14508,7736,00:00:00/00:05,6989) sshd: root [priv]
(sshd,13808,4952,00:00:00/00:04,6990) sshd: root [net]
(root,7188,3188,00:00:00/00:00,7107) /bin/bash /usr/bin/check_mk_agent
(root,7632,2620,00:00:00/00:00,7139) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,988,00:00:00/00:00,7140) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(www-data,76904,55032,00:00:00/01:45:29,9696) spiceproxy worker
(root,86168,2288,00:00:00/01:45:29,9698) /usr/sbin/pvefw-logger
(www-data,355568,130292,00:00:00/01:45:29,9708) pveproxy worker
(www-data,355568,130292,00:00:00/01:45:29,9709) pveproxy worker
(www-data,355568,130292,00:00:00/01:45:29,9710) pveproxy worker
(root,362260,16268,00:01:25/85-09:14:19,18556) pvedaemon worker
(root,0,0,00:00:00/01:10:31,19674) [kworker/2:2-events]
(postfix,43844,7676,00:00:00/01:07:35,20469) pickup -l -t unix -u -c
(root,362584,19256,00:01:48/112-04:09:28,27309) pvedaemon worker
(root,0,0,00:00:00/41:31,27670) [kworker/2:0-events]
(root,18712080,10428700,4-18:51:32/112-15:41:54,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:13/112-15:41:54,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:06/112-15:41:54,28619) [vhost-28596]
(root,0,0,00:54:04/112-15:41:54,28626) [kvm-pit/28596]
(root,0,0,00:00:00/31:31,30503) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/31:31,30507) [kworker/3:1-events]
(root,0,0,00:00:00/26:31,31897) [kworker/5:3-events]
(root,0,0,00:00:00/23:31,32718) [kworker/0:1-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-08 00:45

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c424527922d

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,6952,00:13:44/136-17:09:34,1) /sbin/init
(root,0,0,00:00:07/136-17:09:34,2) [kthreadd]
(root,0,0,00:00:00/136-17:09:34,3) [rcu_gp]
(root,0,0,00:00:00/136-17:09:34,4) [rcu_par_gp]
(root,0,0,00:00:00/136-17:09:34,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/136-17:09:34,9) [mm_percpu_wq]
(root,0,0,00:04:02/136-17:09:34,10) [ksoftirqd/0]
(root,0,0,00:28:34/136-17:09:34,11) [rcu_sched]
(root,0,0,00:00:33/136-17:09:34,12) [migration/0]
(root,0,0,00:00:00/136-17:09:34,13) [idle_inject/0]
(root,0,0,00:00:00/136-17:09:34,14) [cpuhp/0]
(root,0,0,00:00:00/136-17:09:34,15) [cpuhp/1]
(root,0,0,00:00:00/136-17:09:34,16) [idle_inject/1]
(root,0,0,00:00:33/136-17:09:34,17) [migration/1]
(root,0,0,00:02:56/136-17:09:34,18) [ksoftirqd/1]
(root,0,0,00:00:00/136-17:09:34,20) [kworker/1:0H]
(root,0,0,00:00:00/136-17:09:34,21) [cpuhp/2]
(root,0,0,00:00:00/136-17:09:34,22) [idle_inject/2]
(root,0,0,00:00:32/136-17:09:34,23) [migration/2]
(root,0,0,00:01:50/136-17:09:34,24) [ksoftirqd/2]
(root,0,0,00:00:00/136-17:09:34,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/136-17:09:34,27) [cpuhp/3]
(root,0,0,00:00:00/136-17:09:34,28) [idle_inject/3]
(root,0,0,00:00:43/136-17:09:34,29) [migration/3]
(root,0,0,00:01:19/136-17:09:34,30) [ksoftirqd/3]
(root,0,0,00:00:00/136-17:09:34,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/136-17:09:34,33) [cpuhp/4]
(root,0,0,00:00:00/136-17:09:34,34) [idle_inject/4]
(root,0,0,00:00:32/136-17:09:34,35) [migration/4]
(root,0,0,00:01:01/136-17:09:34,36) [ksoftirqd/4]
(root,0,0,00:00:00/136-17:09:34,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/136-17:09:34,39) [cpuhp/5]
(root,0,0,00:00:00/136-17:09:34,40) [idle_inject/5]
(root,0,0,00:00:32/136-17:09:34,41) [migration/5]
(root,0,0,00:00:54/136-17:09:34,42) [ksoftirqd/5]
(root,0,0,00:00:00/136-17:09:34,44) [kworker/5:0H]
(root,0,0,00:00:00/136-17:09:34,45) [cpuhp/6]
(root,0,0,00:00:00/136-17:09:34,46) [idle_inject/6]
(root,0,0,00:00:30/136-17:09:34,47) [migration/6]
(root,0,0,00:08:13/136-17:09:34,48) [ksoftirqd/6]
(root,0,0,00:00:00/136-17:09:34,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/136-17:09:34,51) [cpuhp/7]
(root,0,0,00:00:00/136-17:09:34,52) [idle_inject/7]
(root,0,0,00:00:37/136-17:09:34,53) [migration/7]
(root,0,0,00:20:53/136-17:09:34,54) [ksoftirqd/7]
(root,0,0,00:00:00/136-17:09:34,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/136-17:09:34,57) [kdevtmpfs]
(root,0,0,00:00:00/136-17:09:34,58) [netns]
(root,0,0,00:00:00/136-17:09:34,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/136-17:09:34,60) [kauditd]
(root,0,0,00:00:04/136-17:09:34,62) [khungtaskd]
(root,0,0,00:00:00/136-17:09:34,63) [oom_reaper]
(root,0,0,00:00:00/136-17:09:34,64) [writeback]
(root,0,0,00:00:00/136-17:09:34,65) [kcompactd0]
(root,0,0,00:00:00/136-17:09:34,66) [ksmd]
(root,0,0,00:03:37/136-17:09:34,67) [khugepaged]
(root,0,0,00:00:00/136-17:09:34,113) [kintegrityd]
(root,0,0,00:00:00/136-17:09:34,114) [kblockd]
(root,0,0,00:00:00/136-17:09:34,115) [blkcg_punt_bio]
(root,0,0,00:00:00/136-17:09:34,116) [tpm_dev_wq]
(root,0,0,00:00:00/136-17:09:34,117) [ata_sff]
(root,0,0,00:00:00/136-17:09:34,118) [md]
(root,0,0,00:00:00/136-17:09:34,119) [edac-poller]
(root,0,0,00:00:00/136-17:09:34,120) [devfreq_wq]
(root,0,0,00:00:00/136-17:09:34,121) [watchdogd]
(root,0,0,00:20:27/136-17:09:34,128) [kswapd0]
(root,0,0,00:00:00/136-17:09:34,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/136-17:09:34,131) [kthrotld]
(root,0,0,00:00:00/136-17:09:34,132) [acpi_thermal_pm]
(root,0,0,00:00:00/136-17:09:34,133) [nvme-wq]
(root,0,0,00:00:00/136-17:09:34,134) [nvme-reset-wq]
(root,0,0,00:00:00/136-17:09:34,135) [nvme-delete-wq]
(root,0,0,00:00:00/136-17:09:34,137) [ipv6_addrconf]
(root,0,0,00:00:00/136-17:09:34,146) [kstrp]
(root,0,0,00:00:00/136-17:09:34,147) [kworker/u17:0]
(root,0,0,00:00:00/136-17:09:34,162) [charger_manager]
(root,0,0,00:00:00/136-17:09:33,210) [scsi_eh_0]
(root,0,0,00:00:00/136-17:09:33,211) [scsi_tmf_0]
(root,0,0,00:00:00/136-17:09:33,212) [scsi_eh_1]
(root,0,0,00:00:00/136-17:09:33,213) [scsi_tmf_1]
(root,0,0,00:00:00/136-17:09:33,214) [scsi_eh_2]
(root,0,0,00:00:00/136-17:09:33,215) [scsi_tmf_2]
(root,0,0,00:00:00/136-17:09:33,216) [scsi_eh_3]
(root,0,0,00:00:00/136-17:09:33,217) [scsi_tmf_3]
(root,0,0,00:00:00/136-17:09:33,218) [scsi_eh_4]
(root,0,0,00:00:00/136-17:09:33,219) [scsi_tmf_4]
(root,0,0,00:00:00/136-17:09:33,220) [scsi_eh_5]
(root,0,0,00:00:00/136-17:09:33,221) [scsi_tmf_5]
(root,0,0,00:03:03/136-17:09:33,228) [kworker/3:1H-kblockd]
(root,0,0,00:03:57/136-17:09:33,229) [kworker/0:1H-kblockd]
(root,0,0,00:03:42/136-17:09:33,237) [kworker/1:1H-kblockd]
(root,0,0,00:41:25/136-17:09:33,238) [kworker/6:1H-kblockd]
(root,0,0,00:04:06/136-17:09:33,239) [kworker/7:1H-kblockd]
(root,0,0,00:02:55/136-17:09:33,243) [kworker/4:1H-kblockd]
(root,0,0,00:02:58/136-17:09:33,244) [kworker/2:1H-kblockd]
(root,0,0,00:02:52/136-17:09:33,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:01/136-17:09:33,248) [md1_raid1]
(root,0,0,00:00:29/136-17:09:33,251) [md0_raid1]
(root,0,0,00:59:29/136-17:09:33,253) [md2_raid1]
(root,0,0,00:00:00/136-17:09:32,268) [raid5wq]
(root,0,0,00:06:23/136-17:09:29,291) [jbd2/md2-8]
(root,0,0,00:00:00/136-17:09:29,292) [ext4-rsv-conver]
(root,115300,41236,00:31:03/136-17:09:29,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/136-17:09:29,348) [rpciod]
(root,0,0,00:00:00/136-17:09:29,349) [xprtiod]
(root,0,0,00:00:00/136-17:09:29,353) [spl_system_task]
(root,0,0,00:00:00/136-17:09:29,354) [spl_delay_taskq]
(root,0,0,00:00:00/136-17:09:29,355) [spl_dynamic_tas]
(root,0,0,00:00:00/136-17:09:29,356) [spl_kmem_cache]
(root,0,0,00:00:00/136-17:09:28,361) [zvol]
(root,0,0,00:00:00/136-17:09:28,362) [arc_prune]
(root,0,0,00:03:13/136-17:09:28,363) [arc_evict]
(root,0,0,00:03:00/136-17:09:28,364) [arc_reap]
(root,0,0,00:00:00/136-17:09:28,366) [dbu_evict]
(root,0,0,00:02:54/136-17:09:28,367) [dbuf_evict]
(root,22980,4024,00:15:13/136-17:09:28,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/136-17:09:28,376) [z_vdev_file]
(root,0,0,00:01:35/136-17:09:28,377) [l2arc_feed]
(root,0,0,00:00:00/136-17:09:28,485) [cryptd]
(root,3860,2148,00:00:04/136-17:09:28,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/136-17:09:28,522) [jbd2/md1-8]
(root,0,0,00:00:00/136-17:09:28,523) [ext4-rsv-conver]
(_rpc,7776,4464,00:00:20/136-17:09:26,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,3532,00:00:09/136-17:09:26,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:28:05/136-17:09:26,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:04:32/136-17:09:26,571) /usr/sbin/watchdog-mux
(root,12248,4768,00:00:03/136-17:09:26,573) /usr/sbin/smartd -n
(messagebus,9048,4084,00:10:37/136-17:09:26,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,224732,2100,00:00:13/136-17:09:26,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4728,00:01:14/136-17:09:26,578) /lib/systemd/systemd-logind
(root,223768,3600,00:09:49/136-17:09:26,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,2820,00:00:00/136-17:09:26,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/136-17:09:26,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,354192,12052,00:00:22/24-10:05:19,585) pvedaemon worker
(root,4084,1676,00:00:04/136-17:09:26,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1408,00:00:00/136-17:09:25,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:04:47/136-17:09:25,768) bpfilter_umh
(root,13808,4980,00:09:16/136-17:09:25,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/136-17:09:25,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3268,00:29:47/136-17:09:25,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,741716,59252,02:23:33/136-17:09:25,937) /usr/bin/pmxcfs
(root,9600,1972,00:00:38/136-17:09:25,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,3680,00:00:27/136-17:09:25,1025) /usr/lib/postfix/sbin/master -w
(postfix,43948,5532,00:00:05/136-17:09:25,1027) qmgr -l -t unix -u
(root,8832,2260,00:00:13/136-17:09:24,1061) /usr/sbin/cron -f
(root,303168,38156,12:28:57/136-17:09:23,1068) pvestatd
(root,304364,31156,05:04:43/136-17:09:23,1069) pve-firewall
(root,353760,3968,00:01:37/136-17:09:23,1093) pvedaemon
(root,336416,11256,00:11:35/136-17:09:23,1101) pve-ha-crm
(www-data,355140,142700,00:03:29/136-17:09:22,1102) pveproxy
(www-data,68856,57616,00:02:13/136-17:09:22,1109) spiceproxy
(root,335964,32068,00:19:04/136-17:09:22,1111) pve-ha-lrm
(root,5898612,3375936,7-01:38:18/136-17:09:21,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:10/136-17:09:21,1129) [kvm-nx-lpage-re]
(root,0,0,10:22:36/136-17:09:21,1148) [vhost-1125]
(root,0,0,08:46:12/136-17:09:20,1167) [vhost-1125]
(root,0,0,00:57:24/136-17:09:20,1172) [kvm-pit/1125]
(root,13922516,8496196,44-10:07:14/136-17:09:17,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:04:51/136-17:09:17,1188) [kvm-nx-lpage-re]
(root,0,0,00:20:38/136-17:09:17,1207) [vhost-1184]
(root,0,0,01:04:36/136-17:09:17,1212) [kvm-pit/1184]
(root,0,0,00:00:00/136-17:09:14,1214) [dio/md2]
(root,3549668,2234888,33-00:40:37/136-17:09:13,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:36/136-17:09:13,1267) [kvm-nx-lpage-re]
(root,0,0,04:30:38/136-17:09:13,1286) [vhost-1263]
(root,0,0,00:00:00/136-17:09:13,1289) [kvm-pit/1263]
(root,0,0,00:00:00/136-17:09:12,1295) [ib-comp-wq]
(root,0,0,00:00:00/136-17:09:12,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/136-17:09:12,1297) [ib_mcast]
(root,0,0,00:00:00/136-17:09:12,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/136-17:09:12,1299) [rdma_cm]
(root,0,0,00:00:00/136-17:09:12,1300) [cifsiod]
(root,0,0,00:00:00/136-17:09:12,1301) [smb3decryptd]
(root,0,0,00:00:00/136-17:09:12,1302) [cifsfileinfoput]
(root,0,0,00:00:00/136-17:09:12,1303) [cifsoplockd]
(root,0,0,00:11:52/136-17:09:12,1305) [cifsd]
(root,0,0,00:04:27/136-17:09:12,1340) [cifsd]
(root,5949364,4092340,8-22:43:30/136-17:09:09,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:44/136-17:09:09,1358) [kvm-nx-lpage-re]
(root,0,0,01:46:05/136-17:09:09,1377) [vhost-1354]
(root,0,0,00:00:00/136-17:09:09,1382) [kvm-pit/1354]
(root,20971136,16849368,9-20:16:41/136-17:09:05,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:41/136-17:09:05,1398) [kvm-nx-lpage-re]
(root,0,0,01:11:54/136-17:09:04,1417) [vhost-1394]
(root,0,0,00:00:00/136-17:09:04,1422) [kvm-pit/1394]
(root,19248024,5040852,7-15:01:38/136-17:09:01,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:27/136-17:09:01,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:37/136-17:09:00,1487) [vhost-1464]
(root,0,0,00:00:00/136-17:09:00,1492) [kvm-pit/1464]
(root,5968988,4213272,31-04:33:41/136-17:08:57,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:41/136-17:08:57,1511) [kvm-nx-lpage-re]
(root,0,0,01:18:29/136-17:08:56,1531) [vhost-1507]
(root,0,0,00:00:00/136-17:08:56,1534) [kvm-pit/1507]
(root,0,0,00:00:00/51:03,5031) [kworker/1:1-events]
(root,0,0,00:00:00/48:20,5835) [kworker/6:2-dio/md2]
(root,0,0,00:00:00/34:15,10111) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/34:03,10170) [kworker/3:2-cgroup_destroy]
(root,0,0,00:00:00/33:03,10468) [kworker/5:0-events]
(root,0,0,00:00:00/24:03,13234) [kworker/4:3-events]
(root,0,0,00:00:00/23:03,13531) [kworker/3:1-events]
(root,0,0,00:00:00/22:03,13830) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/18:03,15006) [kworker/4:0-events]
(root,0,0,00:00:00/17:03,15301) [kworker/7:2-events]
(root,0,0,00:00:00/17:03,15304) [kworker/7:3-events]
(root,0,0,00:00:00/13:03,16503) [kworker/6:0-events]
(root,0,0,00:00:00/12:03,16813) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/11:03,17112) [kworker/0:1-events]
(root,0,0,00:00:00/09:03,17706) [kworker/2:0-events]
(root,0,0,00:00:00/09:03,17707) [kworker/2:2-events]
(root,0,0,00:00:00/08:03,18020) [kworker/5:2-events]
(root,362260,16328,00:01:23/83-07:15:51,18556) pvedaemon worker
(root,0,0,00:00:00/06:19,18560) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/04:33,19144) [kworker/6:1]
(root,0,0,00:00:00/04:03,19255) [kworker/4:1-events]
(root,0,0,00:00:00/03:03,19574) [kworker/7:0-events]
(root,0,0,00:00:00/03:03,19575) [kworker/7:1-cgroup_destroy]
(root,13808,6696,00:00:00/01:03,20192) sshd: [accepted]
(root,0,0,00:00:00/01:03,20193) [kworker/4:2-cgroup_destroy]
(root,14508,7808,00:00:00/00:08,20489) sshd: root [priv]
(sshd,13808,4868,00:00:00/00:08,20490) sshd: root [net]
(root,22980,2592,00:00:00/00:03,20523) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:03,20524) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:03,20525) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:03,20526) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:03,20527) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:03,20528) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:03,20529) /lib/systemd/systemd-udevd
(root,22980,2544,00:00:00/00:03,20530) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:03,20531) /lib/systemd/systemd-udevd
(root,22980,2520,00:00:00/00:03,20532) /lib/systemd/systemd-udevd
(root,22980,2516,00:00:00/00:03,20533) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:03,20534) /lib/systemd/systemd-udevd
(root,22980,2564,00:00:00/00:03,20535) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/00:03,20536) [kworker/2:1-events]
(root,0,0,00:00:00/00:03,20537) [kworker/2:3-cgroup_destroy]
(root,14792,8052,00:00:00/00:03,20538) sshd: unknown [priv]
(sshd,13808,4936,00:00:00/00:03,20539) sshd: unknown [net]
(root,13808,6672,00:00:00/00:01,20540) sshd: [accepted]
(sshd,13808,2520,00:00:00/00:01,20541) sshd: [net]
(root,13808,6692,00:00:00/00:01,20542) sshd: [accepted]
(sshd,13808,2480,00:00:00/00:01,20543) sshd: [net]
(root,7188,3224,00:00:00/00:00,20601) /bin/bash /usr/bin/check_mk_agent
(root,7632,2616,00:00:00/00:00,20627) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,1000,00:00:00/00:00,20628) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362584,19320,00:01:46/110-02:11:00,27309) pvedaemon worker
(www-data,77028,55000,00:00:01/23:47:01,28376) spiceproxy worker
(root,86168,2128,00:00:05/23:47:01,28378) /usr/sbin/pvefw-logger
(www-data,367688,137880,00:00:00/23:47:01,28388) pveproxy worker
(www-data,367836,137584,00:00:00/23:47:01,28389) pveproxy worker
(www-data,367816,137564,00:00:00/23:47:01,28390) pveproxy worker
(root,18695276,10425672,4-16:34:39/110-13:43:26,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:12/110-13:43:26,28600) [kvm-nx-lpage-re]
(root,0,0,00:02:05/110-13:43:26,28619) [vhost-28596]
(root,0,0,00:53:09/110-13:43:26,28626) [kvm-pit/28596]
(postfix,43844,7680,00:00:00/01:07:46,32453) pickup -l -t unix -u -c

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-05 22:47

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c422ee09660

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,8068,00:08:55/89-17:48:45,1) /sbin/init
(root,0,0,00:00:05/89-17:48:45,2) [kthreadd]
(root,0,0,00:00:00/89-17:48:45,3) [rcu_gp]
(root,0,0,00:00:00/89-17:48:45,4) [rcu_par_gp]
(root,0,0,00:00:00/89-17:48:45,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/89-17:48:45,9) [mm_percpu_wq]
(root,0,0,00:02:57/89-17:48:45,10) [ksoftirqd/0]
(root,0,0,00:19:14/89-17:48:45,11) [rcu_sched]
(root,0,0,00:00:21/89-17:48:45,12) [migration/0]
(root,0,0,00:00:00/89-17:48:45,13) [idle_inject/0]
(root,0,0,00:00:00/89-17:48:45,14) [cpuhp/0]
(root,0,0,00:00:00/89-17:48:45,15) [cpuhp/1]
(root,0,0,00:00:00/89-17:48:45,16) [idle_inject/1]
(root,0,0,00:00:22/89-17:48:45,17) [migration/1]
(root,0,0,00:02:06/89-17:48:45,18) [ksoftirqd/1]
(root,0,0,00:00:00/89-17:48:45,20) [kworker/1:0H]
(root,0,0,00:00:00/89-17:48:45,21) [cpuhp/2]
(root,0,0,00:00:00/89-17:48:45,22) [idle_inject/2]
(root,0,0,00:00:21/89-17:48:45,23) [migration/2]
(root,0,0,00:01:17/89-17:48:45,24) [ksoftirqd/2]
(root,0,0,00:00:00/89-17:48:45,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/89-17:48:45,27) [cpuhp/3]
(root,0,0,00:00:00/89-17:48:45,28) [idle_inject/3]
(root,0,0,00:00:28/89-17:48:45,29) [migration/3]
(root,0,0,00:00:54/89-17:48:45,30) [ksoftirqd/3]
(root,0,0,00:00:00/89-17:48:45,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/89-17:48:45,33) [cpuhp/4]
(root,0,0,00:00:00/89-17:48:45,34) [idle_inject/4]
(root,0,0,00:00:21/89-17:48:45,35) [migration/4]
(root,0,0,00:00:41/89-17:48:45,36) [ksoftirqd/4]
(root,0,0,00:00:00/89-17:48:45,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/89-17:48:45,39) [cpuhp/5]
(root,0,0,00:00:00/89-17:48:45,40) [idle_inject/5]
(root,0,0,00:00:21/89-17:48:45,41) [migration/5]
(root,0,0,00:00:37/89-17:48:45,42) [ksoftirqd/5]
(root,0,0,00:00:00/89-17:48:45,44) [kworker/5:0H]
(root,0,0,00:00:00/89-17:48:45,45) [cpuhp/6]
(root,0,0,00:00:00/89-17:48:45,46) [idle_inject/6]
(root,0,0,00:00:20/89-17:48:45,47) [migration/6]
(root,0,0,00:05:35/89-17:48:45,48) [ksoftirqd/6]
(root,0,0,00:00:00/89-17:48:45,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/89-17:48:45,51) [cpuhp/7]
(root,0,0,00:00:00/89-17:48:45,52) [idle_inject/7]
(root,0,0,00:00:24/89-17:48:45,53) [migration/7]
(root,0,0,00:13:20/89-17:48:45,54) [ksoftirqd/7]
(root,0,0,00:00:00/89-17:48:45,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/89-17:48:45,57) [kdevtmpfs]
(root,0,0,00:00:00/89-17:48:45,58) [netns]
(root,0,0,00:00:00/89-17:48:45,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/89-17:48:45,60) [kauditd]
(root,0,0,00:00:02/89-17:48:45,62) [khungtaskd]
(root,0,0,00:00:00/89-17:48:45,63) [oom_reaper]
(root,0,0,00:00:00/89-17:48:45,64) [writeback]
(root,0,0,00:00:00/89-17:48:45,65) [kcompactd0]
(root,0,0,00:00:00/89-17:48:45,66) [ksmd]
(root,0,0,00:03:23/89-17:48:45,67) [khugepaged]
(root,0,0,00:00:00/89-17:48:45,113) [kintegrityd]
(root,0,0,00:00:00/89-17:48:45,114) [kblockd]
(root,0,0,00:00:00/89-17:48:45,115) [blkcg_punt_bio]
(root,0,0,00:00:00/89-17:48:45,116) [tpm_dev_wq]
(root,0,0,00:00:00/89-17:48:45,117) [ata_sff]
(root,0,0,00:00:00/89-17:48:45,118) [md]
(root,0,0,00:00:00/89-17:48:45,119) [edac-poller]
(root,0,0,00:00:00/89-17:48:45,120) [devfreq_wq]
(root,0,0,00:00:00/89-17:48:45,121) [watchdogd]
(root,0,0,00:13:07/89-17:48:45,128) [kswapd0]
(root,0,0,00:00:00/89-17:48:45,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/89-17:48:45,131) [kthrotld]
(root,0,0,00:00:00/89-17:48:45,132) [acpi_thermal_pm]
(root,0,0,00:00:00/89-17:48:45,133) [nvme-wq]
(root,0,0,00:00:00/89-17:48:45,134) [nvme-reset-wq]
(root,0,0,00:00:00/89-17:48:45,135) [nvme-delete-wq]
(root,0,0,00:00:00/89-17:48:45,137) [ipv6_addrconf]
(root,0,0,00:00:00/89-17:48:45,146) [kstrp]
(root,0,0,00:00:00/89-17:48:45,147) [kworker/u17:0]
(root,0,0,00:00:00/89-17:48:45,162) [charger_manager]
(root,0,0,00:00:00/89-17:48:44,210) [scsi_eh_0]
(root,0,0,00:00:00/89-17:48:44,211) [scsi_tmf_0]
(root,0,0,00:00:00/89-17:48:44,212) [scsi_eh_1]
(root,0,0,00:00:00/89-17:48:44,213) [scsi_tmf_1]
(root,0,0,00:00:00/89-17:48:44,214) [scsi_eh_2]
(root,0,0,00:00:00/89-17:48:44,215) [scsi_tmf_2]
(root,0,0,00:00:00/89-17:48:44,216) [scsi_eh_3]
(root,0,0,00:00:00/89-17:48:44,217) [scsi_tmf_3]
(root,0,0,00:00:00/89-17:48:44,218) [scsi_eh_4]
(root,0,0,00:00:00/89-17:48:44,219) [scsi_tmf_4]
(root,0,0,00:00:00/89-17:48:44,220) [scsi_eh_5]
(root,0,0,00:00:00/89-17:48:44,221) [scsi_tmf_5]
(root,0,0,00:02:04/89-17:48:44,228) [kworker/3:1H-kblockd]
(root,0,0,00:02:42/89-17:48:44,229) [kworker/0:1H-kblockd]
(root,0,0,00:02:31/89-17:48:44,237) [kworker/1:1H-kblockd]
(root,0,0,00:28:34/89-17:48:44,238) [kworker/6:1H-kblockd]
(root,0,0,00:02:48/89-17:48:44,239) [kworker/7:1H-kblockd]
(root,0,0,00:01:59/89-17:48:44,243) [kworker/4:1H-kblockd]
(root,0,0,00:02:00/89-17:48:44,244) [kworker/2:1H-kblockd]
(root,0,0,00:01:58/89-17:48:44,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:00/89-17:48:44,248) [md1_raid1]
(root,0,0,00:00:16/89-17:48:44,251) [md0_raid1]
(root,0,0,00:35:09/89-17:48:44,253) [md2_raid1]
(root,0,0,00:00:00/89-17:48:43,268) [raid5wq]
(root,0,0,00:04:23/89-17:48:40,291) [jbd2/md2-8]
(root,0,0,00:00:00/89-17:48:40,292) [ext4-rsv-conver]
(root,221332,122596,00:21:32/89-17:48:40,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/89-17:48:40,348) [rpciod]
(root,0,0,00:00:00/89-17:48:40,349) [xprtiod]
(root,0,0,00:00:00/89-17:48:40,353) [spl_system_task]
(root,0,0,00:00:00/89-17:48:40,354) [spl_delay_taskq]
(root,0,0,00:00:00/89-17:48:40,355) [spl_dynamic_tas]
(root,0,0,00:00:00/89-17:48:40,356) [spl_kmem_cache]
(root,0,0,00:00:00/89-17:48:39,361) [zvol]
(root,0,0,00:00:00/89-17:48:39,362) [arc_prune]
(root,0,0,00:02:10/89-17:48:39,363) [arc_evict]
(root,0,0,00:02:01/89-17:48:39,364) [arc_reap]
(root,0,0,00:00:00/89-17:48:39,366) [dbu_evict]
(root,0,0,00:01:58/89-17:48:39,367) [dbuf_evict]
(root,22980,4784,00:09:48/89-17:48:39,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/89-17:48:39,376) [z_vdev_file]
(root,0,0,00:01:03/89-17:48:39,377) [l2arc_feed]
(root,0,0,00:00:00/89-17:48:39,485) [cryptd]
(root,3860,2412,00:00:02/89-17:48:39,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/89-17:48:39,522) [jbd2/md1-8]
(root,0,0,00:00:00/89-17:48:39,523) [ext4-rsv-conver]
(_rpc,7588,4272,00:00:12/89-17:48:37,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,4844,00:00:06/89-17:48:37,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:19:20/89-17:48:37,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:03:02/89-17:48:37,571) /usr/sbin/watchdog-mux
(root,12248,5012,00:00:02/89-17:48:37,573) /usr/sbin/smartd -n
(messagebus,9048,4128,00:05:59/89-17:48:37,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,150864,2100,00:00:09/89-17:48:37,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4756,00:00:48/89-17:48:37,578) /lib/systemd/systemd-logind
(root,223768,3848,00:06:52/89-17:48:37,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,3532,00:00:00/89-17:48:37,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/89-17:48:37,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1700,00:00:03/89-17:48:37,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2124,00:00:00/89-17:48:36,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:03:11/89-17:48:36,768) bpfilter_umh
(root,13808,5588,00:06:23/89-17:48:36,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/89-17:48:36,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3344,00:19:00/89-17:48:36,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,729308,55964,01:35:48/89-17:48:36,937) /usr/bin/pmxcfs
(root,9600,2008,00:00:24/89-17:48:36,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4188,00:00:18/89-17:48:36,1025) /usr/lib/postfix/sbin/master -w
(postfix,43948,6928,00:00:03/89-17:48:36,1027) qmgr -l -t unix -u
(root,8832,2292,00:00:09/89-17:48:35,1061) /usr/sbin/cron -f
(root,303168,38872,08:06:11/89-17:48:34,1068) pvestatd
(root,304364,31820,03:18:12/89-17:48:34,1069) pve-firewall
(root,353760,3304,00:01:03/89-17:48:34,1093) pvedaemon
(root,336416,12112,00:07:36/89-17:48:34,1101) pve-ha-crm
(www-data,355144,145372,00:02:17/89-17:48:33,1102) pveproxy
(www-data,68836,58032,00:01:27/89-17:48:33,1109) spiceproxy
(root,335964,32836,00:12:31/89-17:48:33,1111) pve-ha-lrm
(root,5701156,3068184,4-16:05:25/89-17:48:32,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:06/89-17:48:32,1129) [kvm-nx-lpage-re]
(root,0,0,06:59:45/89-17:48:32,1148) [vhost-1125]
(root,0,0,05:55:11/89-17:48:31,1167) [vhost-1125]
(root,0,0,00:38:32/89-17:48:31,1172) [kvm-pit/1125]
(root,13720604,8398240,11-18:32:46/89-17:48:28,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:03:07/89-17:48:28,1188) [kvm-nx-lpage-re]
(root,0,0,00:17:42/89-17:48:28,1207) [vhost-1184]
(root,0,0,00:42:52/89-17:48:28,1212) [kvm-pit/1184]
(root,0,0,00:00:00/89-17:48:25,1214) [dio/md2]
(root,3352352,2099712,21-10:21:03/89-17:48:24,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:20/89-17:48:24,1267) [kvm-nx-lpage-re]
(root,0,0,03:06:21/89-17:48:24,1286) [vhost-1263]
(root,0,0,00:00:00/89-17:48:24,1289) [kvm-pit/1263]
(root,0,0,00:00:00/89-17:48:23,1295) [ib-comp-wq]
(root,0,0,00:00:00/89-17:48:23,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/89-17:48:23,1297) [ib_mcast]
(root,0,0,00:00:00/89-17:48:23,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/89-17:48:23,1299) [rdma_cm]
(root,0,0,00:00:00/89-17:48:23,1300) [cifsiod]
(root,0,0,00:00:00/89-17:48:23,1301) [smb3decryptd]
(root,0,0,00:00:00/89-17:48:23,1302) [cifsfileinfoput]
(root,0,0,00:00:00/89-17:48:23,1303) [cifsoplockd]
(root,0,0,00:07:46/89-17:48:23,1305) [cifsd]
(root,0,0,00:02:59/89-17:48:23,1340) [cifsd]
(root,5673368,3817972,5-20:09:11/89-17:48:20,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:28/89-17:48:20,1358) [kvm-nx-lpage-re]
(root,0,0,01:10:53/89-17:48:20,1377) [vhost-1354]
(root,0,0,00:00:00/89-17:48:20,1382) [kvm-pit/1354]
(root,20769528,16718668,6-13:03:57/89-17:48:16,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:49/89-17:48:16,1398) [kvm-nx-lpage-re]
(root,0,0,00:49:45/89-17:48:15,1417) [vhost-1394]
(root,0,0,00:00:00/89-17:48:15,1422) [kvm-pit/1394]
(root,19050408,3895680,4-23:26:03/89-17:48:12,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:17/89-17:48:12,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:07/89-17:48:11,1487) [vhost-1464]
(root,0,0,00:00:00/89-17:48:11,1492) [kvm-pit/1464]
(root,5767244,4119852,23-23:19:12/89-17:48:08,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:04/89-17:48:08,1511) [kvm-nx-lpage-re]
(root,0,0,00:44:05/89-17:48:07,1531) [vhost-1507]
(root,0,0,00:00:00/89-17:48:07,1534) [kvm-pit/1507]
(postfix,43844,7760,00:00:00/01:32:11,6078) pickup -l -t unix -u -c
(root,86168,2152,00:00:00/01:26:13,7690) /usr/sbin/pvefw-logger
(www-data,76876,54992,00:00:00/01:26:13,7698) spiceproxy worker
(www-data,355596,130444,00:00:00/01:26:13,7700) pveproxy worker
(www-data,355596,130308,00:00:00/01:26:13,7701) pveproxy worker
(www-data,355596,130440,00:00:00/01:26:13,7702) pveproxy worker
(root,0,0,00:00:00/01:08:14,12625) [kworker/3:2-events]
(root,0,0,00:00:00/51:14,17442) [kworker/0:1-cgroup_destroy]
(root,362260,10496,00:00:39/36-07:55:02,18556) pvedaemon worker
(root,362392,13168,00:00:41/36-07:53:47,19034) pvedaemon worker
(root,0,0,00:00:00/37:14,21310) [kworker/0:2-events]
(root,0,0,00:00:00/36:14,21580) [kworker/4:1-events]
(root,0,0,00:00:09/36:12,21582) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/35:14,21848) [kworker/6:1-cgroup_destroy]
(root,0,0,00:00:00/33:14,22382) [kworker/1:2-events]
(root,0,0,00:00:00/25:14,24523) [kworker/5:2-events]
(root,0,0,00:00:00/25:14,24524) [kworker/5:3-cgroup_destroy]
(root,0,0,00:00:00/20:14,25857) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/15:14,27210) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:00/15:14,27211) [kworker/2:2-events]
(root,362584,10968,00:01:03/63-02:50:11,27309) pvedaemon worker
(root,0,0,00:00:00/14:14,27480) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/13:14,27753) [kworker/6:3-cgroup_destroy]
(root,0,0,00:00:00/12:14,28022) [kworker/1:0-events]
(root,0,0,00:00:00/11:02,28324) [kworker/u16:0-events_power_efficient]
(root,18473108,10288388,2-18:21:07/63-14:22:37,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:03/63-14:22:37,28600) [kvm-nx-lpage-re]
(root,0,0,00:01:37/63-14:22:37,28619) [vhost-28596]
(root,0,0,00:31:13/63-14:22:37,28626) [kvm-pit/28596]
(root,0,0,00:00:00/07:14,29388) [kworker/7:0-cgroup_destroy]
(root,0,0,00:00:00/07:14,29389) [kworker/7:2-events]
(root,0,0,00:00:00/05:14,29931) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/04:22,30165) [kworker/u16:1-flush-9:2]
(root,0,0,00:00:00/04:14,30204) [kworker/4:2-cgroup_destroy]
(root,0,0,00:00:00/04:14,30205) [kworker/4:3-events]
(root,0,0,00:00:00/03:14,30474) [kworker/6:0-events]
(root,0,0,00:00:00/03:14,30476) [kworker/3:1-events]
(root,0,0,00:00:00/01:14,31010) [kworker/5:0]
(root,0,0,00:00:00/00:14,31283) [kworker/1:3]
(root,7188,3260,00:00:00/00:00,31386) /bin/bash /usr/bin/check_mk_agent
(root,7632,2740,00:00:00/00:00,31412) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,992,00:00:00/00:00,31413) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-19 23:26

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42e07e802f

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,8028,00:08:45/87-17:21:12,1) /sbin/init
(root,0,0,00:00:05/87-17:21:12,2) [kthreadd]
(root,0,0,00:00:00/87-17:21:12,3) [rcu_gp]
(root,0,0,00:00:00/87-17:21:12,4) [rcu_par_gp]
(root,0,0,00:00:00/87-17:21:12,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/87-17:21:12,9) [mm_percpu_wq]
(root,0,0,00:02:53/87-17:21:12,10) [ksoftirqd/0]
(root,0,0,00:18:52/87-17:21:12,11) [rcu_sched]
(root,0,0,00:00:21/87-17:21:12,12) [migration/0]
(root,0,0,00:00:00/87-17:21:12,13) [idle_inject/0]
(root,0,0,00:00:00/87-17:21:12,14) [cpuhp/0]
(root,0,0,00:00:00/87-17:21:12,15) [cpuhp/1]
(root,0,0,00:00:00/87-17:21:12,16) [idle_inject/1]
(root,0,0,00:00:21/87-17:21:12,17) [migration/1]
(root,0,0,00:02:03/87-17:21:12,18) [ksoftirqd/1]
(root,0,0,00:00:00/87-17:21:12,20) [kworker/1:0H]
(root,0,0,00:00:00/87-17:21:12,21) [cpuhp/2]
(root,0,0,00:00:00/87-17:21:12,22) [idle_inject/2]
(root,0,0,00:00:21/87-17:21:12,23) [migration/2]
(root,0,0,00:01:16/87-17:21:12,24) [ksoftirqd/2]
(root,0,0,00:00:00/87-17:21:12,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/87-17:21:12,27) [cpuhp/3]
(root,0,0,00:00:00/87-17:21:12,28) [idle_inject/3]
(root,0,0,00:00:28/87-17:21:12,29) [migration/3]
(root,0,0,00:00:53/87-17:21:12,30) [ksoftirqd/3]
(root,0,0,00:00:00/87-17:21:12,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/87-17:21:12,33) [cpuhp/4]
(root,0,0,00:00:00/87-17:21:12,34) [idle_inject/4]
(root,0,0,00:00:20/87-17:21:12,35) [migration/4]
(root,0,0,00:00:40/87-17:21:12,36) [ksoftirqd/4]
(root,0,0,00:00:00/87-17:21:12,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/87-17:21:12,39) [cpuhp/5]
(root,0,0,00:00:00/87-17:21:12,40) [idle_inject/5]
(root,0,0,00:00:20/87-17:21:12,41) [migration/5]
(root,0,0,00:00:36/87-17:21:12,42) [ksoftirqd/5]
(root,0,0,00:00:00/87-17:21:12,44) [kworker/5:0H]
(root,0,0,00:00:00/87-17:21:12,45) [cpuhp/6]
(root,0,0,00:00:00/87-17:21:12,46) [idle_inject/6]
(root,0,0,00:00:19/87-17:21:12,47) [migration/6]
(root,0,0,00:05:29/87-17:21:12,48) [ksoftirqd/6]
(root,0,0,00:00:00/87-17:21:12,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/87-17:21:12,51) [cpuhp/7]
(root,0,0,00:00:00/87-17:21:12,52) [idle_inject/7]
(root,0,0,00:00:23/87-17:21:12,53) [migration/7]
(root,0,0,00:13:03/87-17:21:12,54) [ksoftirqd/7]
(root,0,0,00:00:00/87-17:21:12,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/87-17:21:12,57) [kdevtmpfs]
(root,0,0,00:00:00/87-17:21:12,58) [netns]
(root,0,0,00:00:00/87-17:21:12,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/87-17:21:12,60) [kauditd]
(root,0,0,00:00:02/87-17:21:12,62) [khungtaskd]
(root,0,0,00:00:00/87-17:21:12,63) [oom_reaper]
(root,0,0,00:00:00/87-17:21:12,64) [writeback]
(root,0,0,00:00:00/87-17:21:12,65) [kcompactd0]
(root,0,0,00:00:00/87-17:21:12,66) [ksmd]
(root,0,0,00:03:23/87-17:21:12,67) [khugepaged]
(root,0,0,00:00:00/87-17:21:12,113) [kintegrityd]
(root,0,0,00:00:00/87-17:21:12,114) [kblockd]
(root,0,0,00:00:00/87-17:21:12,115) [blkcg_punt_bio]
(root,0,0,00:00:00/87-17:21:12,116) [tpm_dev_wq]
(root,0,0,00:00:00/87-17:21:12,117) [ata_sff]
(root,0,0,00:00:00/87-17:21:12,118) [md]
(root,0,0,00:00:00/87-17:21:12,119) [edac-poller]
(root,0,0,00:00:00/87-17:21:12,120) [devfreq_wq]
(root,0,0,00:00:00/87-17:21:12,121) [watchdogd]
(root,0,0,00:12:51/87-17:21:12,128) [kswapd0]
(root,0,0,00:00:00/87-17:21:12,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/87-17:21:12,131) [kthrotld]
(root,0,0,00:00:00/87-17:21:12,132) [acpi_thermal_pm]
(root,0,0,00:00:00/87-17:21:12,133) [nvme-wq]
(root,0,0,00:00:00/87-17:21:12,134) [nvme-reset-wq]
(root,0,0,00:00:00/87-17:21:12,135) [nvme-delete-wq]
(root,0,0,00:00:00/87-17:21:12,137) [ipv6_addrconf]
(root,0,0,00:00:00/87-17:21:12,146) [kstrp]
(root,0,0,00:00:00/87-17:21:12,147) [kworker/u17:0]
(root,0,0,00:00:00/87-17:21:12,162) [charger_manager]
(root,0,0,00:00:00/87-17:21:11,210) [scsi_eh_0]
(root,0,0,00:00:00/87-17:21:11,211) [scsi_tmf_0]
(root,0,0,00:00:00/87-17:21:11,212) [scsi_eh_1]
(root,0,0,00:00:00/87-17:21:11,213) [scsi_tmf_1]
(root,0,0,00:00:00/87-17:21:11,214) [scsi_eh_2]
(root,0,0,00:00:00/87-17:21:11,215) [scsi_tmf_2]
(root,0,0,00:00:00/87-17:21:11,216) [scsi_eh_3]
(root,0,0,00:00:00/87-17:21:11,217) [scsi_tmf_3]
(root,0,0,00:00:00/87-17:21:11,218) [scsi_eh_4]
(root,0,0,00:00:00/87-17:21:11,219) [scsi_tmf_4]
(root,0,0,00:00:00/87-17:21:11,220) [scsi_eh_5]
(root,0,0,00:00:00/87-17:21:11,221) [scsi_tmf_5]
(root,0,0,00:02:02/87-17:21:11,228) [kworker/3:1H-kblockd]
(root,0,0,00:02:39/87-17:21:11,229) [kworker/0:1H-kblockd]
(root,0,0,00:02:29/87-17:21:11,237) [kworker/1:1H-kblockd]
(root,0,0,00:28:04/87-17:21:11,238) [kworker/6:1H-kblockd]
(root,0,0,00:02:45/87-17:21:11,239) [kworker/7:1H-kblockd]
(root,0,0,00:01:57/87-17:21:11,243) [kworker/4:1H-kblockd]
(root,0,0,00:01:58/87-17:21:11,244) [kworker/2:1H-kblockd]
(root,0,0,00:01:56/87-17:21:11,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:00/87-17:21:11,248) [md1_raid1]
(root,0,0,00:00:16/87-17:21:11,251) [md0_raid1]
(root,0,0,00:34:36/87-17:21:11,253) [md2_raid1]
(root,0,0,00:00:00/87-17:21:10,268) [raid5wq]
(root,0,0,00:04:17/87-17:21:07,291) [jbd2/md2-8]
(root,0,0,00:00:00/87-17:21:07,292) [ext4-rsv-conver]
(root,98236,25580,00:21:20/87-17:21:07,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/87-17:21:07,348) [rpciod]
(root,0,0,00:00:00/87-17:21:07,349) [xprtiod]
(root,0,0,00:00:00/87-17:21:07,353) [spl_system_task]
(root,0,0,00:00:00/87-17:21:07,354) [spl_delay_taskq]
(root,0,0,00:00:00/87-17:21:07,355) [spl_dynamic_tas]
(root,0,0,00:00:00/87-17:21:07,356) [spl_kmem_cache]
(root,0,0,00:00:00/87-17:21:06,361) [zvol]
(root,0,0,00:00:00/87-17:21:06,362) [arc_prune]
(root,0,0,00:02:07/87-17:21:06,363) [arc_evict]
(root,0,0,00:01:59/87-17:21:06,364) [arc_reap]
(root,0,0,00:00:00/87-17:21:06,366) [dbu_evict]
(root,0,0,00:01:55/87-17:21:06,367) [dbuf_evict]
(root,22980,4784,00:09:34/87-17:21:06,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/87-17:21:06,376) [z_vdev_file]
(root,0,0,00:01:02/87-17:21:06,377) [l2arc_feed]
(root,0,0,00:00:00/87-17:21:06,485) [cryptd]
(root,3860,2412,00:00:02/87-17:21:06,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/87-17:21:06,522) [jbd2/md1-8]
(root,0,0,00:00:00/87-17:21:06,523) [ext4-rsv-conver]
(_rpc,7588,4272,00:00:12/87-17:21:04,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,4912,00:00:05/87-17:21:04,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:18:57/87-17:21:04,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:02:58/87-17:21:04,571) /usr/sbin/watchdog-mux
(root,12248,5012,00:00:02/87-17:21:04,573) /usr/sbin/smartd -n
(messagebus,9048,4128,00:05:53/87-17:21:04,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,150864,2100,00:00:08/87-17:21:04,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4832,00:00:47/87-17:21:04,578) /lib/systemd/systemd-logind
(root,223768,3856,00:06:48/87-17:21:04,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,3532,00:00:00/87-17:21:04,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/87-17:21:04,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1700,00:00:03/87-17:21:04,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2124,00:00:00/87-17:21:03,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:03:06/87-17:21:03,768) bpfilter_umh
(root,13808,5588,00:06:20/87-17:21:03,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/87-17:21:03,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3344,00:18:31/87-17:21:03,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,729308,55976,01:33:41/87-17:21:03,937) /usr/bin/pmxcfs
(root,9600,2008,00:00:24/87-17:21:03,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4188,00:00:17/87-17:21:03,1025) /usr/lib/postfix/sbin/master -w
(postfix,43948,6928,00:00:03/87-17:21:03,1027) qmgr -l -t unix -u
(postfix,43844,8048,00:00:00/01:23:14,1029) pickup -l -t unix -u -c
(root,8832,2292,00:00:08/87-17:21:02,1061) /usr/sbin/cron -f
(root,303168,38872,07:55:16/87-17:21:01,1068) pvestatd
(root,304364,31820,03:13:55/87-17:21:01,1069) pve-firewall
(root,353760,3304,00:01:01/87-17:21:01,1093) pvedaemon
(root,336416,12112,00:07:25/87-17:21:01,1101) pve-ha-crm
(www-data,355180,145356,00:02:13/87-17:21:00,1102) pveproxy
(www-data,68844,58016,00:01:25/87-17:21:00,1109) spiceproxy
(root,335964,32836,00:12:14/87-17:21:00,1111) pve-ha-lrm
(root,5688280,3059664,4-13:39:04/87-17:20:59,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:06/87-17:20:59,1129) [kvm-nx-lpage-re]
(root,0,0,06:50:42/87-17:20:59,1148) [vhost-1125]
(root,0,0,05:47:16/87-17:20:58,1167) [vhost-1125]
(root,0,0,00:37:37/87-17:20:58,1172) [kvm-pit/1125]
(root,13712012,8395368,11-13:42:06/87-17:20:55,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:03:03/87-17:20:55,1188) [kvm-nx-lpage-re]
(root,0,0,00:17:34/87-17:20:55,1207) [vhost-1184]
(root,0,0,00:41:52/87-17:20:55,1212) [kvm-pit/1184]
(root,0,0,00:00:00/87-17:20:52,1214) [dio/md2]
(root,3339484,2073160,20-22:45:41/87-17:20:51,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:19/87-17:20:51,1267) [kvm-nx-lpage-re]
(root,0,0,03:02:09/87-17:20:51,1286) [vhost-1263]
(root,0,0,00:00:00/87-17:20:51,1289) [kvm-pit/1263]
(root,0,0,00:00:00/87-17:20:50,1295) [ib-comp-wq]
(root,0,0,00:00:00/87-17:20:50,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/87-17:20:50,1297) [ib_mcast]
(root,0,0,00:00:00/87-17:20:50,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/87-17:20:50,1299) [rdma_cm]
(root,0,0,00:00:00/87-17:20:50,1300) [cifsiod]
(root,0,0,00:00:00/87-17:20:50,1301) [smb3decryptd]
(root,0,0,00:00:00/87-17:20:50,1302) [cifsfileinfoput]
(root,0,0,00:00:00/87-17:20:50,1303) [cifsoplockd]
(root,0,0,00:07:35/87-17:20:50,1305) [cifsd]
(root,0,0,00:02:55/87-17:20:50,1340) [cifsd]
(root,5664784,3779776,5-16:59:23/87-17:20:47,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:27/87-17:20:47,1358) [kvm-nx-lpage-re]
(root,0,0,01:09:22/87-17:20:47,1377) [vhost-1354]
(root,0,0,00:00:00/87-17:20:47,1382) [kvm-pit/1354]
(root,20760948,16713380,6-10:05:21/87-17:20:43,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:46/87-17:20:43,1398) [kvm-nx-lpage-re]
(root,0,0,00:48:50/87-17:20:42,1417) [vhost-1394]
(root,0,0,00:00:00/87-17:20:42,1422) [kvm-pit/1394]
(root,19037520,3824676,4-20:44:08/87-17:20:39,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:17/87-17:20:39,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:06/87-17:20:38,1487) [vhost-1464]
(root,0,0,00:00:00/87-17:20:38,1492) [kvm-pit/1464]
(root,5758656,4119948,23-16:07:17/87-17:20:35,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:03/87-17:20:35,1511) [kvm-nx-lpage-re]
(root,0,0,00:42:32/87-17:20:34,1531) [vhost-1507]
(root,0,0,00:00:00/87-17:20:34,1534) [kvm-pit/1507]
(www-data,76888,55116,00:00:00/58:40,7590) spiceproxy worker
(root,86168,2260,00:00:00/58:40,7592) /usr/sbin/pvefw-logger
(www-data,355476,129660,00:00:00/58:40,7600) pveproxy worker
(www-data,355476,129608,00:00:00/58:40,7601) pveproxy worker
(www-data,355476,130076,00:00:00/58:40,7602) pveproxy worker
(root,0,0,00:00:00/47:41,10515) [kworker/7:1-cgroup_destroy]
(root,0,0,00:00:00/45:41,11043) [kworker/1:0-cgroup_destroy]
(root,0,0,00:00:00/33:41,14238) [kworker/5:0-cgroup_destroy]
(root,0,0,00:00:00/33:41,14239) [kworker/0:1-events]
(root,0,0,00:00:00/29:41,15277) [kworker/7:2-events]
(root,0,0,00:00:00/28:41,15540) [kworker/0:3-events]
(root,0,0,00:00:00/27:41,15803) [kworker/6:1-cgroup_destroy]
(root,0,0,00:00:00/26:41,16064) [kworker/2:1-events]
(root,0,0,00:00:00/25:36,16344) [kworker/u16:0-events_power_efficient]
(root,0,0,00:00:00/24:41,16587) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/18:41,18148) [kworker/1:1-events]
(root,362260,10524,00:00:37/34-07:27:29,18556) pvedaemon worker
(root,0,0,00:00:00/15:41,18935) [kworker/6:3-events]
(root,362392,13196,00:00:39/34-07:26:14,19034) pvedaemon worker
(root,0,0,00:00:00/13:41,19459) [kworker/4:1-events]
(root,0,0,00:00:00/11:41,19974) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/10:41,20233) [kworker/5:1-events]
(root,0,0,00:00:00/10:30,20262) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/07:41,21009) [kworker/3:2-cgroup_destroy]
(root,0,0,00:00:00/07:41,21010) [kworker/3:3-events]
(root,0,0,00:00:00/06:41,21270) [kworker/4:2-cgroup_destroy]
(root,0,0,00:00:00/04:41,21791) [kworker/4:3-events]
(root,0,0,00:00:00/03:50,22016) [kworker/u16:2-flush-9:2]
(root,0,0,00:00:00/03:41,22052) [kworker/6:0-cgroup_destroy]
(root,0,0,00:00:00/03:41,22053) [kworker/6:2-events]
(root,0,0,00:00:00/00:41,22836) [kworker/2:0-events]
(root,0,0,00:00:00/00:41,22837) [kworker/2:3]
(root,7188,3236,00:00:00/00:00,23114) /bin/bash /usr/bin/check_mk_agent
(root,45020,39332,00:00:00/00:00,23195) /usr/bin/perl /usr/bin/pvecm status
(root,7188,3256,00:00:00/00:00,23196) /bin/bash /usr/bin/check_mk_agent
(root,7632,2660,00:00:00/00:00,23222) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,928,00:00:00/00:00,23223) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362584,10996,00:01:01/61-02:22:38,27309) pvedaemon worker
(root,18480976,10280844,2-16:29:11/61-13:55:04,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:03/61-13:55:04,28600) [kvm-nx-lpage-re]
(root,0,0,00:01:36/61-13:55:04,28619) [vhost-28596]
(root,0,0,00:30:12/61-13:55:04,28626) [kvm-pit/28596]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-17 22:58

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c422a83869f

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,8064,00:08:33/85-16:26:12,1) /sbin/init
(root,0,0,00:00:05/85-16:26:12,2) [kthreadd]
(root,0,0,00:00:00/85-16:26:12,3) [rcu_gp]
(root,0,0,00:00:00/85-16:26:12,4) [rcu_par_gp]
(root,0,0,00:00:00/85-16:26:12,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/85-16:26:12,9) [mm_percpu_wq]
(root,0,0,00:02:49/85-16:26:12,10) [ksoftirqd/0]
(root,0,0,00:18:28/85-16:26:12,11) [rcu_sched]
(root,0,0,00:00:21/85-16:26:12,12) [migration/0]
(root,0,0,00:00:00/85-16:26:12,13) [idle_inject/0]
(root,0,0,00:00:00/85-16:26:12,14) [cpuhp/0]
(root,0,0,00:00:00/85-16:26:12,15) [cpuhp/1]
(root,0,0,00:00:00/85-16:26:12,16) [idle_inject/1]
(root,0,0,00:00:21/85-16:26:12,17) [migration/1]
(root,0,0,00:02:00/85-16:26:12,18) [ksoftirqd/1]
(root,0,0,00:00:00/85-16:26:12,20) [kworker/1:0H]
(root,0,0,00:00:00/85-16:26:12,21) [cpuhp/2]
(root,0,0,00:00:00/85-16:26:12,22) [idle_inject/2]
(root,0,0,00:00:20/85-16:26:12,23) [migration/2]
(root,0,0,00:01:14/85-16:26:12,24) [ksoftirqd/2]
(root,0,0,00:00:00/85-16:26:12,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/85-16:26:12,27) [cpuhp/3]
(root,0,0,00:00:00/85-16:26:12,28) [idle_inject/3]
(root,0,0,00:00:27/85-16:26:12,29) [migration/3]
(root,0,0,00:00:52/85-16:26:12,30) [ksoftirqd/3]
(root,0,0,00:00:00/85-16:26:12,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/85-16:26:12,33) [cpuhp/4]
(root,0,0,00:00:00/85-16:26:12,34) [idle_inject/4]
(root,0,0,00:00:20/85-16:26:12,35) [migration/4]
(root,0,0,00:00:40/85-16:26:12,36) [ksoftirqd/4]
(root,0,0,00:00:00/85-16:26:12,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/85-16:26:12,39) [cpuhp/5]
(root,0,0,00:00:00/85-16:26:12,40) [idle_inject/5]
(root,0,0,00:00:20/85-16:26:12,41) [migration/5]
(root,0,0,00:00:35/85-16:26:12,42) [ksoftirqd/5]
(root,0,0,00:00:00/85-16:26:12,44) [kworker/5:0H]
(root,0,0,00:00:00/85-16:26:12,45) [cpuhp/6]
(root,0,0,00:00:00/85-16:26:12,46) [idle_inject/6]
(root,0,0,00:00:19/85-16:26:12,47) [migration/6]
(root,0,0,00:05:23/85-16:26:12,48) [ksoftirqd/6]
(root,0,0,00:00:00/85-16:26:12,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/85-16:26:12,51) [cpuhp/7]
(root,0,0,00:00:00/85-16:26:12,52) [idle_inject/7]
(root,0,0,00:00:23/85-16:26:12,53) [migration/7]
(root,0,0,00:12:47/85-16:26:12,54) [ksoftirqd/7]
(root,0,0,00:00:00/85-16:26:12,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/85-16:26:12,57) [kdevtmpfs]
(root,0,0,00:00:00/85-16:26:12,58) [netns]
(root,0,0,00:00:00/85-16:26:12,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/85-16:26:12,60) [kauditd]
(root,0,0,00:00:02/85-16:26:12,62) [khungtaskd]
(root,0,0,00:00:00/85-16:26:12,63) [oom_reaper]
(root,0,0,00:00:00/85-16:26:12,64) [writeback]
(root,0,0,00:00:00/85-16:26:12,65) [kcompactd0]
(root,0,0,00:00:00/85-16:26:12,66) [ksmd]
(root,0,0,00:03:22/85-16:26:12,67) [khugepaged]
(root,0,0,00:00:00/85-16:26:12,113) [kintegrityd]
(root,0,0,00:00:00/85-16:26:12,114) [kblockd]
(root,0,0,00:00:00/85-16:26:12,115) [blkcg_punt_bio]
(root,0,0,00:00:00/85-16:26:12,116) [tpm_dev_wq]
(root,0,0,00:00:00/85-16:26:12,117) [ata_sff]
(root,0,0,00:00:00/85-16:26:12,118) [md]
(root,0,0,00:00:00/85-16:26:12,119) [edac-poller]
(root,0,0,00:00:00/85-16:26:12,120) [devfreq_wq]
(root,0,0,00:00:00/85-16:26:12,121) [watchdogd]
(root,0,0,00:12:35/85-16:26:12,128) [kswapd0]
(root,0,0,00:00:00/85-16:26:12,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/85-16:26:12,131) [kthrotld]
(root,0,0,00:00:00/85-16:26:12,132) [acpi_thermal_pm]
(root,0,0,00:00:00/85-16:26:12,133) [nvme-wq]
(root,0,0,00:00:00/85-16:26:12,134) [nvme-reset-wq]
(root,0,0,00:00:00/85-16:26:12,135) [nvme-delete-wq]
(root,0,0,00:00:00/85-16:26:12,137) [ipv6_addrconf]
(root,0,0,00:00:00/85-16:26:12,146) [kstrp]
(root,0,0,00:00:00/85-16:26:12,147) [kworker/u17:0]
(root,0,0,00:00:00/85-16:26:12,162) [charger_manager]
(root,0,0,00:00:00/85-16:26:11,210) [scsi_eh_0]
(root,0,0,00:00:00/85-16:26:11,211) [scsi_tmf_0]
(root,0,0,00:00:00/85-16:26:11,212) [scsi_eh_1]
(root,0,0,00:00:00/85-16:26:11,213) [scsi_tmf_1]
(root,0,0,00:00:00/85-16:26:11,214) [scsi_eh_2]
(root,0,0,00:00:00/85-16:26:11,215) [scsi_tmf_2]
(root,0,0,00:00:00/85-16:26:11,216) [scsi_eh_3]
(root,0,0,00:00:00/85-16:26:11,217) [scsi_tmf_3]
(root,0,0,00:00:00/85-16:26:11,218) [scsi_eh_4]
(root,0,0,00:00:00/85-16:26:11,219) [scsi_tmf_4]
(root,0,0,00:00:00/85-16:26:11,220) [scsi_eh_5]
(root,0,0,00:00:00/85-16:26:11,221) [scsi_tmf_5]
(root,0,0,00:02:00/85-16:26:11,228) [kworker/3:1H-kblockd]
(root,0,0,00:02:36/85-16:26:11,229) [kworker/0:1H-kblockd]
(root,0,0,00:02:26/85-16:26:11,237) [kworker/1:1H-kblockd]
(root,0,0,00:27:33/85-16:26:11,238) [kworker/6:1H-kblockd]
(root,0,0,00:02:42/85-16:26:11,239) [kworker/7:1H-kblockd]
(root,0,0,00:01:55/85-16:26:11,243) [kworker/4:1H-kblockd]
(root,0,0,00:01:56/85-16:26:11,244) [kworker/2:1H-kblockd]
(root,0,0,00:01:54/85-16:26:11,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:00/85-16:26:11,248) [md1_raid1]
(root,0,0,00:00:16/85-16:26:11,251) [md0_raid1]
(root,0,0,00:34:02/85-16:26:11,253) [md2_raid1]
(root,0,0,00:00:00/85-16:26:10,268) [raid5wq]
(root,0,0,00:04:12/85-16:26:07,291) [jbd2/md2-8]
(root,0,0,00:00:00/85-16:26:07,292) [ext4-rsv-conver]
(root,81892,13464,00:20:59/85-16:26:07,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/85-16:26:07,348) [rpciod]
(root,0,0,00:00:00/85-16:26:07,349) [xprtiod]
(root,0,0,00:00:00/85-16:26:07,353) [spl_system_task]
(root,0,0,00:00:00/85-16:26:07,354) [spl_delay_taskq]
(root,0,0,00:00:00/85-16:26:07,355) [spl_dynamic_tas]
(root,0,0,00:00:00/85-16:26:07,356) [spl_kmem_cache]
(root,0,0,00:00:00/85-16:26:06,361) [zvol]
(root,0,0,00:00:00/85-16:26:06,362) [arc_prune]
(root,0,0,00:02:04/85-16:26:06,363) [arc_evict]
(root,0,0,00:01:56/85-16:26:06,364) [arc_reap]
(root,0,0,00:00:00/85-16:26:06,366) [dbu_evict]
(root,0,0,00:01:52/85-16:26:06,367) [dbuf_evict]
(root,22980,4784,00:09:21/85-16:26:06,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/85-16:26:06,376) [z_vdev_file]
(root,0,0,00:01:00/85-16:26:06,377) [l2arc_feed]
(root,0,0,00:00:00/85-16:26:06,485) [cryptd]
(root,3860,2412,00:00:02/85-16:26:06,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/85-16:26:06,522) [jbd2/md1-8]
(root,0,0,00:00:00/85-16:26:06,523) [ext4-rsv-conver]
(_rpc,7588,4272,00:00:11/85-16:26:04,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,4912,00:00:05/85-16:26:04,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:18:33/85-16:26:04,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:02:54/85-16:26:04,571) /usr/sbin/watchdog-mux
(root,12248,5012,00:00:02/85-16:26:04,573) /usr/sbin/smartd -n
(messagebus,9048,4128,00:05:43/85-16:26:04,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,150864,2100,00:00:08/85-16:26:04,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4832,00:00:46/85-16:26:04,578) /lib/systemd/systemd-logind
(root,223768,3856,00:06:41/85-16:26:04,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,3532,00:00:00/85-16:26:04,580) /usr/sbin/zed -F
(root,275828,1068,00:00:00/85-16:26:04,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1700,00:00:03/85-16:26:04,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2124,00:00:00/85-16:26:03,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:03:02/85-16:26:03,768) bpfilter_umh
(root,13808,5588,00:06:14/85-16:26:03,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/85-16:26:03,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3344,00:18:03/85-16:26:03,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,723104,52812,01:31:33/85-16:26:03,937) /usr/bin/pmxcfs
(root,9600,2008,00:00:23/85-16:26:03,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4192,00:00:17/85-16:26:03,1025) /usr/lib/postfix/sbin/master -w
(postfix,43948,6936,00:00:03/85-16:26:03,1027) qmgr -l -t unix -u
(root,8832,2292,00:00:08/85-16:26:02,1061) /usr/sbin/cron -f
(root,303168,38868,07:44:31/85-16:26:01,1068) pvestatd
(root,304364,31820,03:09:36/85-16:26:01,1069) pve-firewall
(root,353760,3304,00:01:00/85-16:26:01,1093) pvedaemon
(root,336416,12112,00:07:15/85-16:26:01,1101) pve-ha-crm
(www-data,355276,145248,00:02:10/85-16:26:00,1102) pveproxy
(www-data,68860,58052,00:01:23/85-16:26:00,1109) spiceproxy
(root,335964,32836,00:11:57/85-16:26:00,1111) pve-ha-lrm
(root,5679696,3057300,4-11:11:33/85-16:25:59,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:06/85-16:25:59,1129) [kvm-nx-lpage-re]
(root,0,0,06:41:34/85-16:25:59,1148) [vhost-1125]
(root,0,0,05:39:16/85-16:25:58,1167) [vhost-1125]
(root,0,0,00:36:42/85-16:25:58,1172) [kvm-pit/1125]
(root,13703420,8391316,11-09:51:34/85-16:25:55,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:02:58/85-16:25:55,1188) [kvm-nx-lpage-re]
(root,0,0,00:17:24/85-16:25:55,1207) [vhost-1184]
(root,0,0,00:40:53/85-16:25:55,1212) [kvm-pit/1184]
(root,0,0,00:00:00/85-16:25:52,1214) [dio/md2]
(root,3331548,2069980,20-11:12:57/85-16:25:51,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:19/85-16:25:51,1267) [kvm-nx-lpage-re]
(root,0,0,02:58:01/85-16:25:51,1286) [vhost-1263]
(root,0,0,00:00:00/85-16:25:51,1289) [kvm-pit/1263]
(root,0,0,00:00:00/85-16:25:50,1295) [ib-comp-wq]
(root,0,0,00:00:00/85-16:25:50,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/85-16:25:50,1297) [ib_mcast]
(root,0,0,00:00:00/85-16:25:50,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/85-16:25:50,1299) [rdma_cm]
(root,0,0,00:00:00/85-16:25:50,1300) [cifsiod]
(root,0,0,00:00:00/85-16:25:50,1301) [smb3decryptd]
(root,0,0,00:00:00/85-16:25:50,1302) [cifsfileinfoput]
(root,0,0,00:00:00/85-16:25:50,1303) [cifsoplockd]
(root,0,0,00:07:24/85-16:25:50,1305) [cifsd]
(root,0,0,00:02:51/85-16:25:50,1340) [cifsd]
(root,5656200,3768840,5-13:48:47/85-16:25:47,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:26/85-16:25:47,1358) [kvm-nx-lpage-re]
(root,0,0,01:07:51/85-16:25:47,1377) [vhost-1354]
(root,0,0,00:00:00/85-16:25:47,1382) [kvm-pit/1354]
(root,20752368,16719688,6-06:31:13/85-16:25:43,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:43/85-16:25:43,1398) [kvm-nx-lpage-re]
(root,0,0,00:47:47/85-16:25:42,1417) [vhost-1394]
(root,0,0,00:00:00/85-16:25:42,1422) [kvm-pit/1394]
(root,19028928,3769264,4-18:01:50/85-16:25:39,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:16/85-16:25:39,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:04/85-16:25:38,1487) [vhost-1464]
(root,0,0,00:00:00/85-16:25:38,1492) [kvm-pit/1464]
(root,5750072,4116496,23-08:54:08/85-16:25:35,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:01/85-16:25:35,1511) [kvm-nx-lpage-re]
(root,0,0,00:41:00/85-16:25:34,1531) [vhost-1507]
(root,0,0,00:00:00/85-16:25:34,1534) [kvm-pit/1507]
(root,0,0,00:00:00/01:03:26,6568) [kworker/2:1-events]
(postfix,43844,7812,00:00:00/46:43,11173) pickup -l -t unix -u -c
(root,0,0,00:00:00/40:41,12774) [kworker/0:2-events]
(root,0,0,00:00:00/36:41,13829) [kworker/6:3-dio/md2]
(root,0,0,00:00:00/28:41,15935) [kworker/5:2-events]
(root,0,0,00:00:00/26:41,16456) [kworker/3:1-events]
(root,0,0,00:00:00/22:41,17513) [kworker/4:2-events]
(root,0,0,00:00:00/21:41,17775) [kworker/7:3-events]
(root,0,0,00:00:00/19:41,18316) [kworker/3:0-memcg_kmem_cache]
(root,362260,10524,00:00:35/32-06:32:29,18556) pvedaemon worker
(root,0,0,00:00:00/18:36,18629) [kworker/5:0-events]
(root,0,0,00:00:00/18:32,18640) [kworker/2:0-cgroup_destroy]
(root,362392,13196,00:00:37/32-06:31:14,19034) pvedaemon worker
(root,0,0,00:00:00/15:07,19639) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/14:41,19716) [kworker/0:0-events]
(root,0,0,00:00:00/13:50,19961) [kworker/4:0-events]
(root,0,0,00:00:00/10:41,20826) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/10:41,20827) [kworker/1:3-events]
(root,0,0,00:00:00/09:41,21101) [kworker/6:0-dio/md2]
(root,0,0,00:00:00/09:41,21102) [kworker/6:2-dio/md2]
(root,0,0,00:00:00/07:41,21652) [kworker/7:0-cgroup_destroy]
(root,0,0,00:00:00/06:41,21930) [kworker/u16:0-flush-9:2]
(root,0,0,00:00:00/04:41,22484) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/04:41,22485) [kworker/2:3-events]
(root,0,0,00:00:00/03:41,22771) [kworker/3:2]
(root,0,0,00:00:00/03:40,22774) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/03:40,22779) [kworker/5:1-events]
(www-data,69396,53068,00:00:00/03:39,22788) spiceproxy worker
(root,86168,2224,00:00:00/03:39,22790) /usr/sbin/pvefw-logger
(root,0,0,00:00:00/03:39,22798) [kworker/5:3-cgroup_destroy]
(root,0,0,00:00:00/03:39,22799) [kworker/4:1-rcu_gp]
(www-data,355572,130424,00:00:00/03:39,22800) pveproxy worker
(www-data,355572,130420,00:00:00/03:39,22801) pveproxy worker
(www-data,355572,130424,00:00:00/03:39,22802) pveproxy worker
(root,0,0,00:00:00/01:53,23312) [kworker/6:1-dio/md2]
(root,0,0,00:00:00/01:53,23313) [kworker/6:4-dio/md2]
(root,0,0,00:00:00/01:53,23314) [kworker/6:5-dio/md2]
(root,0,0,00:00:00/01:53,23315) [kworker/6:6-events]
(root,0,0,00:00:00/01:53,23316) [kworker/6:7-dio/md2]
(root,0,0,00:00:00/00:01,23835) [kworker/u16:2]
(root,7188,3268,00:00:00/00:00,23874) /bin/bash /usr/bin/check_mk_agent
(root,7632,2692,00:00:00/00:00,23900) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,996,00:00:00/00:00,23901) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362584,10996,00:00:59/59-01:27:38,27309) pvedaemon worker
(root,18405580,10277188,2-14:35:33/59-13:00:04,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:03/59-13:00:04,28600) [kvm-nx-lpage-re]
(root,0,0,00:01:34/59-13:00:04,28619) [vhost-28596]
(root,0,0,00:29:10/59-13:00:04,28626) [kvm-pit/28596]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-15 22:03

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42db26b76d

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,8000,00:08:24/83-17:11:26,1) /sbin/init
(root,0,0,00:00:04/83-17:11:26,2) [kthreadd]
(root,0,0,00:00:00/83-17:11:26,3) [rcu_gp]
(root,0,0,00:00:00/83-17:11:26,4) [rcu_par_gp]
(root,0,0,00:00:00/83-17:11:26,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/83-17:11:26,9) [mm_percpu_wq]
(root,0,0,00:02:45/83-17:11:26,10) [ksoftirqd/0]
(root,0,0,00:18:06/83-17:11:26,11) [rcu_sched]
(root,0,0,00:00:20/83-17:11:26,12) [migration/0]
(root,0,0,00:00:00/83-17:11:26,13) [idle_inject/0]
(root,0,0,00:00:00/83-17:11:26,14) [cpuhp/0]
(root,0,0,00:00:00/83-17:11:26,15) [cpuhp/1]
(root,0,0,00:00:00/83-17:11:26,16) [idle_inject/1]
(root,0,0,00:00:20/83-17:11:26,17) [migration/1]
(root,0,0,00:01:58/83-17:11:26,18) [ksoftirqd/1]
(root,0,0,00:00:00/83-17:11:26,20) [kworker/1:0H]
(root,0,0,00:00:00/83-17:11:26,21) [cpuhp/2]
(root,0,0,00:00:00/83-17:11:26,22) [idle_inject/2]
(root,0,0,00:00:20/83-17:11:26,23) [migration/2]
(root,0,0,00:01:12/83-17:11:26,24) [ksoftirqd/2]
(root,0,0,00:00:00/83-17:11:26,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/83-17:11:26,27) [cpuhp/3]
(root,0,0,00:00:00/83-17:11:26,28) [idle_inject/3]
(root,0,0,00:00:26/83-17:11:26,29) [migration/3]
(root,0,0,00:00:51/83-17:11:26,30) [ksoftirqd/3]
(root,0,0,00:00:00/83-17:11:26,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/83-17:11:26,33) [cpuhp/4]
(root,0,0,00:00:00/83-17:11:26,34) [idle_inject/4]
(root,0,0,00:00:20/83-17:11:26,35) [migration/4]
(root,0,0,00:00:39/83-17:11:26,36) [ksoftirqd/4]
(root,0,0,00:00:00/83-17:11:26,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/83-17:11:26,39) [cpuhp/5]
(root,0,0,00:00:00/83-17:11:26,40) [idle_inject/5]
(root,0,0,00:00:20/83-17:11:26,41) [migration/5]
(root,0,0,00:00:35/83-17:11:26,42) [ksoftirqd/5]
(root,0,0,00:00:00/83-17:11:26,44) [kworker/5:0H]
(root,0,0,00:00:00/83-17:11:26,45) [cpuhp/6]
(root,0,0,00:00:00/83-17:11:26,46) [idle_inject/6]
(root,0,0,00:00:19/83-17:11:26,47) [migration/6]
(root,0,0,00:05:17/83-17:11:26,48) [ksoftirqd/6]
(root,0,0,00:00:00/83-17:11:26,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/83-17:11:26,51) [cpuhp/7]
(root,0,0,00:00:00/83-17:11:26,52) [idle_inject/7]
(root,0,0,00:00:22/83-17:11:26,53) [migration/7]
(root,0,0,00:12:31/83-17:11:26,54) [ksoftirqd/7]
(root,0,0,00:00:00/83-17:11:26,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/83-17:11:26,57) [kdevtmpfs]
(root,0,0,00:00:00/83-17:11:26,58) [netns]
(root,0,0,00:00:00/83-17:11:26,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/83-17:11:26,60) [kauditd]
(root,0,0,00:00:02/83-17:11:26,62) [khungtaskd]
(root,0,0,00:00:00/83-17:11:26,63) [oom_reaper]
(root,0,0,00:00:00/83-17:11:26,64) [writeback]
(root,0,0,00:00:00/83-17:11:26,65) [kcompactd0]
(root,0,0,00:00:00/83-17:11:26,66) [ksmd]
(root,0,0,00:03:21/83-17:11:26,67) [khugepaged]
(root,0,0,00:00:00/83-17:11:26,113) [kintegrityd]
(root,0,0,00:00:00/83-17:11:26,114) [kblockd]
(root,0,0,00:00:00/83-17:11:26,115) [blkcg_punt_bio]
(root,0,0,00:00:00/83-17:11:26,116) [tpm_dev_wq]
(root,0,0,00:00:00/83-17:11:26,117) [ata_sff]
(root,0,0,00:00:00/83-17:11:26,118) [md]
(root,0,0,00:00:00/83-17:11:26,119) [edac-poller]
(root,0,0,00:00:00/83-17:11:26,120) [devfreq_wq]
(root,0,0,00:00:00/83-17:11:26,121) [watchdogd]
(root,0,0,00:12:19/83-17:11:26,128) [kswapd0]
(root,0,0,00:00:00/83-17:11:26,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/83-17:11:26,131) [kthrotld]
(root,0,0,00:00:00/83-17:11:26,132) [acpi_thermal_pm]
(root,0,0,00:00:00/83-17:11:26,133) [nvme-wq]
(root,0,0,00:00:00/83-17:11:26,134) [nvme-reset-wq]
(root,0,0,00:00:00/83-17:11:26,135) [nvme-delete-wq]
(root,0,0,00:00:00/83-17:11:26,137) [ipv6_addrconf]
(root,0,0,00:00:00/83-17:11:26,146) [kstrp]
(root,0,0,00:00:00/83-17:11:26,147) [kworker/u17:0]
(root,0,0,00:00:00/83-17:11:26,162) [charger_manager]
(root,0,0,00:00:00/83-17:11:25,210) [scsi_eh_0]
(root,0,0,00:00:00/83-17:11:25,211) [scsi_tmf_0]
(root,0,0,00:00:00/83-17:11:25,212) [scsi_eh_1]
(root,0,0,00:00:00/83-17:11:25,213) [scsi_tmf_1]
(root,0,0,00:00:00/83-17:11:25,214) [scsi_eh_2]
(root,0,0,00:00:00/83-17:11:25,215) [scsi_tmf_2]
(root,0,0,00:00:00/83-17:11:25,216) [scsi_eh_3]
(root,0,0,00:00:00/83-17:11:25,217) [scsi_tmf_3]
(root,0,0,00:00:00/83-17:11:25,218) [scsi_eh_4]
(root,0,0,00:00:00/83-17:11:25,219) [scsi_tmf_4]
(root,0,0,00:00:00/83-17:11:25,220) [scsi_eh_5]
(root,0,0,00:00:00/83-17:11:25,221) [scsi_tmf_5]
(root,0,0,00:01:58/83-17:11:25,228) [kworker/3:1H-kblockd]
(root,0,0,00:02:33/83-17:11:25,229) [kworker/0:1H-kblockd]
(root,0,0,00:02:23/83-17:11:25,237) [kworker/1:1H-kblockd]
(root,0,0,00:27:03/83-17:11:25,238) [kworker/6:1H-kblockd]
(root,0,0,00:02:39/83-17:11:25,239) [kworker/7:1H-kblockd]
(root,0,0,00:01:53/83-17:11:25,243) [kworker/4:1H-kblockd]
(root,0,0,00:01:54/83-17:11:25,244) [kworker/2:1H-kblockd]
(root,0,0,00:01:52/83-17:11:25,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:00/83-17:11:25,248) [md1_raid1]
(root,0,0,00:00:16/83-17:11:25,251) [md0_raid1]
(root,0,0,00:33:30/83-17:11:25,253) [md2_raid1]
(root,0,0,00:00:00/83-17:11:24,268) [raid5wq]
(root,0,0,00:04:07/83-17:11:21,291) [jbd2/md2-8]
(root,0,0,00:00:00/83-17:11:21,292) [ext4-rsv-conver]
(root,155408,71892,00:20:47/83-17:11:21,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/83-17:11:21,348) [rpciod]
(root,0,0,00:00:00/83-17:11:21,349) [xprtiod]
(root,0,0,00:00:00/83-17:11:21,353) [spl_system_task]
(root,0,0,00:00:00/83-17:11:21,354) [spl_delay_taskq]
(root,0,0,00:00:00/83-17:11:21,355) [spl_dynamic_tas]
(root,0,0,00:00:00/83-17:11:21,356) [spl_kmem_cache]
(root,0,0,00:00:00/83-17:11:20,361) [zvol]
(root,0,0,00:00:00/83-17:11:20,362) [arc_prune]
(root,0,0,00:02:01/83-17:11:20,363) [arc_evict]
(root,0,0,00:01:53/83-17:11:20,364) [arc_reap]
(root,0,0,00:00:00/83-17:11:20,366) [dbu_evict]
(root,0,0,00:01:50/83-17:11:20,367) [dbuf_evict]
(root,22980,4784,00:09:08/83-17:11:20,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/83-17:11:20,376) [z_vdev_file]
(root,0,0,00:00:59/83-17:11:20,377) [l2arc_feed]
(root,0,0,00:00:00/06:30,454) [kworker/6:0-events]
(root,0,0,00:00:00/83-17:11:20,485) [cryptd]
(root,3860,2412,00:00:02/83-17:11:20,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/83-17:11:20,522) [jbd2/md1-8]
(root,0,0,00:00:00/83-17:11:20,523) [ext4-rsv-conver]
(root,0,0,00:00:00/05:55,547) [kworker/0:1-cgroup_destroy]
(_rpc,7588,4284,00:00:11/83-17:11:18,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,4916,00:00:05/83-17:11:18,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:18:10/83-17:11:18,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:02:50/83-17:11:18,571) /usr/sbin/watchdog-mux
(root,12248,5024,00:00:01/83-17:11:18,573) /usr/sbin/smartd -n
(messagebus,9048,4052,00:05:39/83-17:11:18,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,150864,2100,00:00:08/83-17:11:18,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4836,00:00:45/83-17:11:18,578) /lib/systemd/systemd-logind
(root,223768,3868,00:06:38/83-17:11:18,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,3532,00:00:00/83-17:11:18,580) /usr/sbin/zed -F
(root,275828,1072,00:00:00/83-17:11:18,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1700,00:00:03/83-17:11:18,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2124,00:00:00/83-17:11:17,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:02:57/83-17:11:17,768) bpfilter_umh
(root,13808,5732,00:06:10/83-17:11:17,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/83-17:11:17,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/04:55,838) [kworker/3:2-cgroup_destroy]
(root,878176,3344,00:17:34/83-17:11:17,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,729308,55944,01:29:29/83-17:11:17,937) /usr/bin/pmxcfs
(root,9600,2008,00:00:23/83-17:11:17,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4192,00:00:16/83-17:11:17,1025) /usr/lib/postfix/sbin/master -w
(postfix,43948,6940,00:00:03/83-17:11:17,1027) qmgr -l -t unix -u
(root,8832,2292,00:00:08/83-17:11:16,1061) /usr/sbin/cron -f
(root,303168,38872,07:34:11/83-17:11:15,1068) pvestatd
(root,304364,31820,03:05:25/83-17:11:15,1069) pve-firewall
(root,0,0,00:00:00/04:10,1085) [kworker/u16:1-events_power_efficient]
(root,353760,3304,00:00:59/83-17:11:15,1093) pvedaemon
(root,336416,12112,00:07:05/83-17:11:15,1101) pve-ha-crm
(www-data,355136,145464,00:02:07/83-17:11:14,1102) pveproxy
(www-data,68836,57952,00:01:21/83-17:11:14,1109) spiceproxy
(root,335964,32836,00:11:40/83-17:11:14,1111) pve-ha-lrm
(root,5671112,3051528,4-08:51:47/83-17:11:13,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:06/83-17:11:13,1129) [kvm-nx-lpage-re]
(root,0,0,00:00:00/03:55,1132) [kworker/7:0-cgroup_destroy]
(root,0,0,00:00:00/03:55,1133) [kworker/7:1-events]
(root,0,0,06:33:20/83-17:11:13,1148) [vhost-1125]
(root,0,0,00:00:00/03:49,1163) [kworker/5:2]
(root,0,0,05:32:07/83-17:11:12,1167) [vhost-1125]
(root,0,0,00:35:50/83-17:11:12,1172) [kvm-pit/1125]
(root,13694828,8391160,11-04:54:45/83-17:11:09,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:02:54/83-17:11:09,1188) [kvm-nx-lpage-re]
(root,0,0,00:17:14/83-17:11:09,1207) [vhost-1184]
(root,0,0,00:39:55/83-17:11:09,1212) [kvm-pit/1184]
(root,0,0,00:00:00/83-17:11:06,1214) [dio/md2]
(root,3323032,2047672,20-00:12:30/83-17:11:05,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:18/83-17:11:05,1267) [kvm-nx-lpage-re]
(root,0,0,02:54:21/83-17:11:05,1286) [vhost-1263]
(root,0,0,00:00:00/83-17:11:05,1289) [kvm-pit/1263]
(root,0,0,00:00:00/83-17:11:04,1295) [ib-comp-wq]
(root,0,0,00:00:00/83-17:11:04,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/83-17:11:04,1297) [ib_mcast]
(root,0,0,00:00:00/83-17:11:04,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/83-17:11:04,1299) [rdma_cm]
(root,0,0,00:00:00/83-17:11:04,1300) [cifsiod]
(root,0,0,00:00:00/83-17:11:04,1301) [smb3decryptd]
(root,0,0,00:00:00/83-17:11:04,1302) [cifsfileinfoput]
(root,0,0,00:00:00/83-17:11:04,1303) [cifsoplockd]
(root,0,0,00:07:13/83-17:11:04,1305) [cifsd]
(root,0,0,00:02:47/83-17:11:04,1340) [cifsd]
(root,5647612,3761840,5-10:45:47/83-17:11:01,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:26/83-17:11:01,1358) [kvm-nx-lpage-re]
(root,0,0,01:06:27/83-17:11:01,1377) [vhost-1354]
(root,0,0,00:00:00/83-17:11:01,1382) [kvm-pit/1354]
(root,20743792,16700080,6-03:14:46/83-17:10:57,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:40/83-17:10:57,1398) [kvm-nx-lpage-re]
(root,0,0,00:46:57/83-17:10:56,1417) [vhost-1394]
(root,0,0,00:00:00/83-17:10:56,1422) [kvm-pit/1394]
(root,0,0,00:00:00/02:55,1457) [kworker/0:2-events]
(root,19020336,3694908,4-15:24:33/83-17:10:53,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:16/83-17:10:53,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:03/83-17:10:52,1487) [vhost-1464]
(root,0,0,00:00:00/83-17:10:52,1492) [kvm-pit/1464]
(root,5741488,4116328,23-01:55:14/83-17:10:49,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:00/83-17:10:49,1511) [kvm-nx-lpage-re]
(root,0,0,00:39:31/83-17:10:48,1531) [vhost-1507]
(root,0,0,00:00:00/83-17:10:48,1534) [kvm-pit/1507]
(root,0,0,00:00:00/01:55,1737) [kworker/3:3-events]
(root,0,0,00:00:00/00:55,2004) [kworker/6:1-dio/md2]
(root,0,0,00:00:00/00:55,2005) [kworker/6:2]
(root,13808,6676,00:00:00/00:08,2238) sshd: [accepted]
(root,13808,6792,00:00:00/00:04,2239) sshd: [accepted]
(root,13808,6824,00:00:00/00:01,2265) sshd: [accepted]
(sshd,13808,4928,00:00:00/00:01,2266) sshd: [net]
(root,7188,3252,00:00:00/00:00,2315) /bin/bash /usr/bin/check_mk_agent
(root,7632,2752,00:00:00/00:00,2341) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,992,00:00:00/00:00,2342) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362260,10548,00:00:33/30-07:17:43,18556) pvedaemon worker
(root,0,0,00:00:00/58:02,18824) [kworker/u16:0-events_power_efficient]
(root,362392,13252,00:00:35/30-07:16:28,19034) pvedaemon worker
(root,86168,2144,00:00:00/48:53,21275) /usr/sbin/pvefw-logger
(www-data,76732,54644,00:00:00/48:53,21283) spiceproxy worker
(www-data,355584,130476,00:00:00/48:53,21284) pveproxy worker
(www-data,355584,130476,00:00:00/48:53,21285) pveproxy worker
(www-data,355584,130476,00:00:00/48:53,21286) pveproxy worker
(root,0,0,00:00:00/33:55,25266) [kworker/3:1-cgroup_destroy]
(root,362584,11052,00:00:57/57-02:12:52,27309) pvedaemon worker
(root,0,0,00:00:00/23:55,28008) [kworker/3:0-events]
(root,0,0,00:00:00/21:55,28555) [kworker/4:0-cgroup_destroy]
(root,18450456,10282524,2-12:46:34/57-13:45:18,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:03/57-13:45:18,28600) [kvm-nx-lpage-re]
(root,0,0,00:01:34/57-13:45:18,28619) [vhost-28596]
(root,0,0,00:28:11/57-13:45:18,28626) [kvm-pit/28596]
(root,0,0,00:00:00/20:55,28845) [kworker/1:0-events]
(root,0,0,00:00:00/13:55,30873) [kworker/6:3-cgroup_destroy]
(root,0,0,00:00:00/12:58,31130) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/11:55,31400) [kworker/0:0-events]
(root,0,0,00:00:00/11:55,31401) [kworker/0:3-cgroup_destroy]
(root,0,0,00:00:00/10:55,31667) [kworker/5:0-events]
(root,0,0,00:00:00/10:55,31668) [kworker/5:1-events]
(postfix,43844,7668,00:00:00/10:28,31841) pickup -l -t unix -u -c
(root,0,0,00:00:00/09:55,31934) [kworker/7:2-events]
(root,0,0,00:00:00/09:55,31935) [kworker/7:3-cgroup_destroy]
(root,0,0,00:00:00/08:55,32203) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/08:55,32204) [kworker/2:3-events]
(root,0,0,00:00:00/06:55,32733) [kworker/1:1-events]
(root,0,0,00:00:00/06:55,32734) [kworker/4:1-md]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-13 22:48

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c427a7a12dc

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,8040,00:08:13/81-17:03:07,1) /sbin/init
(root,0,0,00:00:04/81-17:03:07,2) [kthreadd]
(root,0,0,00:00:00/81-17:03:07,3) [rcu_gp]
(root,0,0,00:00:00/81-17:03:07,4) [rcu_par_gp]
(root,0,0,00:00:00/81-17:03:07,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/81-17:03:07,9) [mm_percpu_wq]
(root,0,0,00:02:41/81-17:03:07,10) [ksoftirqd/0]
(root,0,0,00:17:42/81-17:03:07,11) [rcu_sched]
(root,0,0,00:00:20/81-17:03:07,12) [migration/0]
(root,0,0,00:00:00/81-17:03:07,13) [idle_inject/0]
(root,0,0,00:00:00/81-17:03:07,14) [cpuhp/0]
(root,0,0,00:00:00/81-17:03:07,15) [cpuhp/1]
(root,0,0,00:00:00/81-17:03:07,16) [idle_inject/1]
(root,0,0,00:00:20/81-17:03:07,17) [migration/1]
(root,0,0,00:01:55/81-17:03:07,18) [ksoftirqd/1]
(root,0,0,00:00:00/81-17:03:07,20) [kworker/1:0H]
(root,0,0,00:00:00/81-17:03:07,21) [cpuhp/2]
(root,0,0,00:00:00/81-17:03:07,22) [idle_inject/2]
(root,0,0,00:00:19/81-17:03:07,23) [migration/2]
(root,0,0,00:01:11/81-17:03:07,24) [ksoftirqd/2]
(root,0,0,00:00:00/81-17:03:07,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/81-17:03:07,27) [cpuhp/3]
(root,0,0,00:00:00/81-17:03:07,28) [idle_inject/3]
(root,0,0,00:00:26/81-17:03:07,29) [migration/3]
(root,0,0,00:00:50/81-17:03:07,30) [ksoftirqd/3]
(root,0,0,00:00:00/81-17:03:07,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/81-17:03:07,33) [cpuhp/4]
(root,0,0,00:00:00/81-17:03:07,34) [idle_inject/4]
(root,0,0,00:00:19/81-17:03:07,35) [migration/4]
(root,0,0,00:00:38/81-17:03:07,36) [ksoftirqd/4]
(root,0,0,00:00:00/81-17:03:07,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/81-17:03:07,39) [cpuhp/5]
(root,0,0,00:00:00/81-17:03:07,40) [idle_inject/5]
(root,0,0,00:00:19/81-17:03:07,41) [migration/5]
(root,0,0,00:00:34/81-17:03:07,42) [ksoftirqd/5]
(root,0,0,00:00:00/81-17:03:07,44) [kworker/5:0H]
(root,0,0,00:00:00/81-17:03:07,45) [cpuhp/6]
(root,0,0,00:00:00/81-17:03:07,46) [idle_inject/6]
(root,0,0,00:00:18/81-17:03:07,47) [migration/6]
(root,0,0,00:05:11/81-17:03:07,48) [ksoftirqd/6]
(root,0,0,00:00:00/81-17:03:07,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/81-17:03:07,51) [cpuhp/7]
(root,0,0,00:00:00/81-17:03:07,52) [idle_inject/7]
(root,0,0,00:00:22/81-17:03:07,53) [migration/7]
(root,0,0,00:12:13/81-17:03:07,54) [ksoftirqd/7]
(root,0,0,00:00:00/81-17:03:07,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/81-17:03:07,57) [kdevtmpfs]
(root,0,0,00:00:00/81-17:03:07,58) [netns]
(root,0,0,00:00:00/81-17:03:07,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/81-17:03:07,60) [kauditd]
(root,0,0,00:00:02/81-17:03:07,62) [khungtaskd]
(root,0,0,00:00:00/81-17:03:07,63) [oom_reaper]
(root,0,0,00:00:00/81-17:03:07,64) [writeback]
(root,0,0,00:00:00/81-17:03:07,65) [kcompactd0]
(root,0,0,00:00:00/81-17:03:07,66) [ksmd]
(root,0,0,00:03:21/81-17:03:07,67) [khugepaged]
(root,0,0,00:00:00/81-17:03:07,113) [kintegrityd]
(root,0,0,00:00:00/81-17:03:07,114) [kblockd]
(root,0,0,00:00:00/81-17:03:07,115) [blkcg_punt_bio]
(root,0,0,00:00:00/81-17:03:07,116) [tpm_dev_wq]
(root,0,0,00:00:00/81-17:03:07,117) [ata_sff]
(root,0,0,00:00:00/81-17:03:07,118) [md]
(root,0,0,00:00:00/81-17:03:07,119) [edac-poller]
(root,0,0,00:00:00/81-17:03:07,120) [devfreq_wq]
(root,0,0,00:00:00/81-17:03:07,121) [watchdogd]
(root,0,0,00:12:02/81-17:03:07,128) [kswapd0]
(root,0,0,00:00:00/81-17:03:07,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/81-17:03:07,131) [kthrotld]
(root,0,0,00:00:00/81-17:03:07,132) [acpi_thermal_pm]
(root,0,0,00:00:00/81-17:03:07,133) [nvme-wq]
(root,0,0,00:00:00/81-17:03:07,134) [nvme-reset-wq]
(root,0,0,00:00:00/81-17:03:07,135) [nvme-delete-wq]
(root,0,0,00:00:00/81-17:03:07,137) [ipv6_addrconf]
(root,0,0,00:00:00/81-17:03:07,146) [kstrp]
(root,0,0,00:00:00/81-17:03:07,147) [kworker/u17:0]
(root,0,0,00:00:00/81-17:03:07,162) [charger_manager]
(root,0,0,00:00:00/81-17:03:06,210) [scsi_eh_0]
(root,0,0,00:00:00/81-17:03:06,211) [scsi_tmf_0]
(root,0,0,00:00:00/81-17:03:06,212) [scsi_eh_1]
(root,0,0,00:00:00/81-17:03:06,213) [scsi_tmf_1]
(root,0,0,00:00:00/81-17:03:06,214) [scsi_eh_2]
(root,0,0,00:00:00/81-17:03:06,215) [scsi_tmf_2]
(root,0,0,00:00:00/81-17:03:06,216) [scsi_eh_3]
(root,0,0,00:00:00/81-17:03:06,217) [scsi_tmf_3]
(root,0,0,00:00:00/81-17:03:06,218) [scsi_eh_4]
(root,0,0,00:00:00/81-17:03:06,219) [scsi_tmf_4]
(root,0,0,00:00:00/81-17:03:06,220) [scsi_eh_5]
(root,0,0,00:00:00/81-17:03:06,221) [scsi_tmf_5]
(root,0,0,00:01:56/81-17:03:06,228) [kworker/3:1H-kblockd]
(root,0,0,00:02:30/81-17:03:06,229) [kworker/0:1H-kblockd]
(root,0,0,00:02:21/81-17:03:06,237) [kworker/1:1H-kblockd]
(root,0,0,00:26:32/81-17:03:06,238) [kworker/6:1H-kblockd]
(root,0,0,00:02:36/81-17:03:06,239) [kworker/7:1H-kblockd]
(root,0,0,00:01:51/81-17:03:06,243) [kworker/4:1H-kblockd]
(root,0,0,00:01:52/81-17:03:06,244) [kworker/2:1H-kblockd]
(root,0,0,00:01:50/81-17:03:06,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:00/81-17:03:06,248) [md1_raid1]
(root,0,0,00:00:16/81-17:03:06,251) [md0_raid1]
(root,0,0,00:32:56/81-17:03:06,253) [md2_raid1]
(root,0,0,00:00:00/81-17:03:05,268) [raid5wq]
(root,0,0,00:04:02/81-17:03:02,291) [jbd2/md2-8]
(root,0,0,00:00:00/81-17:03:02,292) [ext4-rsv-conver]
(root,164028,74340,00:20:25/81-17:03:02,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/81-17:03:02,348) [rpciod]
(root,0,0,00:00:00/81-17:03:02,349) [xprtiod]
(root,0,0,00:00:00/81-17:03:02,353) [spl_system_task]
(root,0,0,00:00:00/81-17:03:02,354) [spl_delay_taskq]
(root,0,0,00:00:00/81-17:03:02,355) [spl_dynamic_tas]
(root,0,0,00:00:00/81-17:03:02,356) [spl_kmem_cache]
(root,0,0,00:00:00/81-17:03:01,361) [zvol]
(root,0,0,00:00:00/81-17:03:01,362) [arc_prune]
(root,0,0,00:01:58/81-17:03:01,363) [arc_evict]
(root,0,0,00:01:51/81-17:03:01,364) [arc_reap]
(root,0,0,00:00:00/81-17:03:01,366) [dbu_evict]
(root,0,0,00:01:47/81-17:03:01,367) [dbuf_evict]
(root,22980,4784,00:08:55/81-17:03:01,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/81-17:03:01,376) [z_vdev_file]
(root,0,0,00:00:57/81-17:03:01,377) [l2arc_feed]
(root,0,0,00:00:00/81-17:03:01,485) [cryptd]
(root,3860,2412,00:00:02/81-17:03:01,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/81-17:03:01,522) [jbd2/md1-8]
(root,0,0,00:00:00/81-17:03:01,523) [ext4-rsv-conver]
(_rpc,7588,4284,00:00:11/81-17:02:59,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,4980,00:00:05/81-17:02:59,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:17:46/81-17:02:59,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:02:46/81-17:02:59,571) /usr/sbin/watchdog-mux
(root,12248,5024,00:00:01/81-17:02:59,573) /usr/sbin/smartd -n
(messagebus,9048,4052,00:05:33/81-17:02:59,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,150864,2100,00:00:08/81-17:02:59,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4916,00:00:44/81-17:02:59,578) /lib/systemd/systemd-logind
(root,223768,3868,00:06:31/81-17:02:59,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,3532,00:00:00/81-17:02:59,580) /usr/sbin/zed -F
(root,275828,1072,00:00:00/81-17:02:59,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1700,00:00:03/81-17:02:59,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2124,00:00:00/81-17:02:58,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:02:53/81-17:02:58,768) bpfilter_umh
(root,13808,5732,00:06:04/81-17:02:58,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/81-17:02:58,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3344,00:17:06/81-17:02:58,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,729308,55940,01:27:22/81-17:02:58,937) /usr/bin/pmxcfs
(root,9600,2008,00:00:22/81-17:02:58,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4192,00:00:16/81-17:02:58,1025) /usr/lib/postfix/sbin/master -w
(postfix,43948,6944,00:00:03/81-17:02:58,1027) qmgr -l -t unix -u
(root,8832,2292,00:00:08/81-17:02:57,1061) /usr/sbin/cron -f
(root,303168,38872,07:23:36/81-17:02:56,1068) pvestatd
(root,304364,31820,03:00:59/81-17:02:56,1069) pve-firewall
(root,353760,3304,00:00:57/81-17:02:56,1093) pvedaemon
(root,336416,12112,00:06:55/81-17:02:56,1101) pve-ha-crm
(www-data,355172,145368,00:02:04/81-17:02:55,1102) pveproxy
(www-data,68852,57924,00:01:19/81-17:02:55,1109) spiceproxy
(root,335964,32836,00:11:23/81-17:02:55,1111) pve-ha-lrm
(root,5662524,3045448,4-06:25:02/81-17:02:54,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:06/81-17:02:54,1129) [kvm-nx-lpage-re]
(root,0,0,06:24:01/81-17:02:54,1148) [vhost-1125]
(root,0,0,05:23:58/81-17:02:53,1167) [vhost-1125]
(root,0,0,00:34:56/81-17:02:53,1172) [kvm-pit/1125]
(root,13686236,8383424,11-00:37:05/81-17:02:50,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:02:50/81-17:02:50,1188) [kvm-nx-lpage-re]
(root,0,0,00:17:05/81-17:02:50,1207) [vhost-1184]
(root,0,0,00:38:56/81-17:02:50,1212) [kvm-pit/1184]
(root,0,0,00:00:00/81-17:02:47,1214) [dio/md2]
(root,3314328,2041056,19-12:49:44/81-17:02:46,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:18/81-17:02:46,1267) [kvm-nx-lpage-re]
(root,0,0,02:50:21/81-17:02:46,1286) [vhost-1263]
(root,0,0,00:00:00/81-17:02:46,1289) [kvm-pit/1263]
(root,0,0,00:00:00/81-17:02:45,1295) [ib-comp-wq]
(root,0,0,00:00:00/81-17:02:45,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/81-17:02:45,1297) [ib_mcast]
(root,0,0,00:00:00/81-17:02:45,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/81-17:02:45,1299) [rdma_cm]
(root,0,0,00:00:00/81-17:02:45,1300) [cifsiod]
(root,0,0,00:00:00/81-17:02:45,1301) [smb3decryptd]
(root,0,0,00:00:00/81-17:02:45,1302) [cifsfileinfoput]
(root,0,0,00:00:00/81-17:02:45,1303) [cifsoplockd]
(root,0,0,00:07:02/81-17:02:45,1305) [cifsd]
(root,0,0,00:02:43/81-17:02:45,1340) [cifsd]
(root,5639028,3759076,5-07:35:49/81-17:02:42,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:25/81-17:02:42,1358) [kvm-nx-lpage-re]
(root,0,0,01:04:51/81-17:02:42,1377) [vhost-1354]
(root,0,0,00:00:00/81-17:02:42,1382) [kvm-pit/1354]
(root,20735536,16694880,5-23:49:46/81-17:02:38,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:37/81-17:02:38,1398) [kvm-nx-lpage-re]
(root,0,0,00:45:52/81-17:02:37,1417) [vhost-1394]
(root,0,0,00:00:00/81-17:02:37,1422) [kvm-pit/1394]
(root,19011744,3670528,4-12:44:45/81-17:02:34,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:15/81-17:02:34,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:02/81-17:02:33,1487) [vhost-1464]
(root,0,0,00:00:00/81-17:02:33,1492) [kvm-pit/1464]
(root,5732904,4115272,22-18:42:51/81-17:02:30,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:58/81-17:02:30,1511) [kvm-nx-lpage-re]
(root,0,0,00:37:48/81-17:02:29,1531) [vhost-1507]
(root,0,0,00:00:00/81-17:02:29,1534) [kvm-pit/1507]
(www-data,76776,54812,00:00:00/40:34,1666) spiceproxy worker
(root,86168,2220,00:00:00/40:34,1669) /usr/sbin/pvefw-logger
(www-data,355468,130240,00:00:00/40:34,1678) pveproxy worker
(www-data,355468,130240,00:00:00/40:34,1680) pveproxy worker
(www-data,355604,130532,00:00:00/40:34,1681) pveproxy worker
(root,0,0,00:00:00/36:36,2755) [kworker/6:3-events]
(root,0,0,00:00:00/35:50,2965) [kworker/u16:0-flush-9:2]
(root,0,0,00:00:00/30:36,4336) [kworker/4:3-cgroup_destroy]
(root,0,0,00:00:00/26:36,5433) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/21:36,6751) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/21:36,6752) [kworker/1:3-mm_percpu_wq]
(postfix,43844,7888,00:00:00/20:42,6994) pickup -l -t unix -u -c
(root,0,0,00:00:00/20:36,7021) [kworker/3:2-events]
(root,0,0,00:00:00/17:36,7819) [kworker/5:3-cgroup_destroy]
(root,0,0,00:00:00/17:19,7862) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/13:36,8889) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/12:36,9158) [kworker/7:1-events]
(root,0,0,00:00:00/12:36,9159) [kworker/7:2-rcu_gp]
(root,0,0,00:00:00/11:36,9425) [kworker/6:0-cgroup_destroy]
(root,0,0,00:00:00/09:36,9961) [kworker/4:0-events]
(root,0,0,00:00:00/08:36,10232) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:00/08:36,10233) [kworker/5:1-events]
(root,0,0,00:00:00/07:36,10504) [kworker/2:3-events]
(root,0,0,00:00:00/07:09,10663) [kworker/7:0-events]
(root,0,0,00:00:00/04:36,11312) [kworker/6:1-events]
(root,0,0,00:00:00/03:36,11596) [kworker/7:3-events]
(root,0,0,00:00:00/02:36,11897) [kworker/4:1-events]
(root,0,0,00:00:00/02:36,11898) [kworker/4:2-cgroup_destroy]
(root,0,0,00:00:00/02:13,12060) [kworker/u16:1-events_unbound]
(root,0,0,00:00:00/01:36,12239) [kworker/3:0-events]
(root,14508,7736,00:00:00/00:03,12741) sshd: root [priv]
(sshd,13808,4992,00:00:00/00:03,12742) sshd: root [net]
(root,7188,3232,00:00:00/00:00,12769) /bin/bash /usr/bin/check_mk_agent
(root,7632,2620,00:00:00/00:00,12795) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,1000,00:00:00/00:00,12796) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362260,10548,00:00:31/28-07:09:24,18556) pvedaemon worker
(root,362392,13252,00:00:33/28-07:08:09,19034) pvedaemon worker
(root,362584,11052,00:00:56/55-02:04:33,27309) pvedaemon worker
(root,18436736,10285460,2-10:54:50/55-13:36:59,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:02/55-13:36:59,28600) [kvm-nx-lpage-re]
(root,0,0,00:01:33/55-13:36:59,28619) [vhost-28596]
(root,0,0,00:27:10/55-13:36:59,28626) [kvm-pit/28596]
(root,0,0,00:00:00/45:36,32594) [kworker/0:0-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-11 22:40

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42d1b4e909

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7948,00:08:02/79-18:48:05,1) /sbin/init
(root,0,0,00:00:04/79-18:48:05,2) [kthreadd]
(root,0,0,00:00:00/79-18:48:05,3) [rcu_gp]
(root,0,0,00:00:00/79-18:48:05,4) [rcu_par_gp]
(root,0,0,00:00:00/79-18:48:05,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/79-18:48:05,9) [mm_percpu_wq]
(root,0,0,00:02:37/79-18:48:05,10) [ksoftirqd/0]
(root,0,0,00:17:19/79-18:48:05,11) [rcu_sched]
(root,0,0,00:00:19/79-18:48:05,12) [migration/0]
(root,0,0,00:00:00/79-18:48:05,13) [idle_inject/0]
(root,0,0,00:00:00/79-18:48:05,14) [cpuhp/0]
(root,0,0,00:00:00/79-18:48:05,15) [cpuhp/1]
(root,0,0,00:00:00/79-18:48:05,16) [idle_inject/1]
(root,0,0,00:00:20/79-18:48:05,17) [migration/1]
(root,0,0,00:01:52/79-18:48:05,18) [ksoftirqd/1]
(root,0,0,00:00:00/79-18:48:05,20) [kworker/1:0H]
(root,0,0,00:00:00/79-18:48:05,21) [cpuhp/2]
(root,0,0,00:00:00/79-18:48:05,22) [idle_inject/2]
(root,0,0,00:00:19/79-18:48:05,23) [migration/2]
(root,0,0,00:01:09/79-18:48:05,24) [ksoftirqd/2]
(root,0,0,00:00:00/79-18:48:05,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/79-18:48:05,27) [cpuhp/3]
(root,0,0,00:00:00/79-18:48:05,28) [idle_inject/3]
(root,0,0,00:00:25/79-18:48:05,29) [migration/3]
(root,0,0,00:00:49/79-18:48:05,30) [ksoftirqd/3]
(root,0,0,00:00:00/79-18:48:05,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/79-18:48:05,33) [cpuhp/4]
(root,0,0,00:00:00/79-18:48:05,34) [idle_inject/4]
(root,0,0,00:00:19/79-18:48:05,35) [migration/4]
(root,0,0,00:00:37/79-18:48:05,36) [ksoftirqd/4]
(root,0,0,00:00:00/79-18:48:05,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/79-18:48:05,39) [cpuhp/5]
(root,0,0,00:00:00/79-18:48:05,40) [idle_inject/5]
(root,0,0,00:00:19/79-18:48:05,41) [migration/5]
(root,0,0,00:00:33/79-18:48:05,42) [ksoftirqd/5]
(root,0,0,00:00:00/79-18:48:05,44) [kworker/5:0H]
(root,0,0,00:00:00/79-18:48:05,45) [cpuhp/6]
(root,0,0,00:00:00/79-18:48:05,46) [idle_inject/6]
(root,0,0,00:00:18/79-18:48:05,47) [migration/6]
(root,0,0,00:05:06/79-18:48:05,48) [ksoftirqd/6]
(root,0,0,00:00:00/79-18:48:05,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/79-18:48:05,51) [cpuhp/7]
(root,0,0,00:00:00/79-18:48:05,52) [idle_inject/7]
(root,0,0,00:00:21/79-18:48:05,53) [migration/7]
(root,0,0,00:11:59/79-18:48:05,54) [ksoftirqd/7]
(root,0,0,00:00:00/79-18:48:05,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/79-18:48:05,57) [kdevtmpfs]
(root,0,0,00:00:00/79-18:48:05,58) [netns]
(root,0,0,00:00:00/79-18:48:05,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/79-18:48:05,60) [kauditd]
(root,0,0,00:00:02/79-18:48:05,62) [khungtaskd]
(root,0,0,00:00:00/79-18:48:05,63) [oom_reaper]
(root,0,0,00:00:00/79-18:48:05,64) [writeback]
(root,0,0,00:00:00/79-18:48:05,65) [kcompactd0]
(root,0,0,00:00:00/79-18:48:05,66) [ksmd]
(root,0,0,00:03:20/79-18:48:05,67) [khugepaged]
(root,0,0,00:00:00/79-18:48:05,113) [kintegrityd]
(root,0,0,00:00:00/79-18:48:05,114) [kblockd]
(root,0,0,00:00:00/79-18:48:05,115) [blkcg_punt_bio]
(root,0,0,00:00:00/79-18:48:05,116) [tpm_dev_wq]
(root,0,0,00:00:00/79-18:48:05,117) [ata_sff]
(root,0,0,00:00:00/79-18:48:05,118) [md]
(root,0,0,00:00:00/79-18:48:05,119) [edac-poller]
(root,0,0,00:00:00/79-18:48:05,120) [devfreq_wq]
(root,0,0,00:00:00/79-18:48:05,121) [watchdogd]
(root,0,0,00:11:51/79-18:48:05,128) [kswapd0]
(root,0,0,00:00:00/79-18:48:05,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/79-18:48:05,131) [kthrotld]
(root,0,0,00:00:00/79-18:48:05,132) [acpi_thermal_pm]
(root,0,0,00:00:00/79-18:48:05,133) [nvme-wq]
(root,0,0,00:00:00/79-18:48:05,134) [nvme-reset-wq]
(root,0,0,00:00:00/79-18:48:05,135) [nvme-delete-wq]
(root,0,0,00:00:00/79-18:48:05,137) [ipv6_addrconf]
(root,0,0,00:00:00/79-18:48:05,146) [kstrp]
(root,0,0,00:00:00/79-18:48:05,147) [kworker/u17:0]
(root,0,0,00:00:00/79-18:48:05,162) [charger_manager]
(root,0,0,00:00:00/79-18:48:04,210) [scsi_eh_0]
(root,0,0,00:00:00/79-18:48:04,211) [scsi_tmf_0]
(root,0,0,00:00:00/79-18:48:04,212) [scsi_eh_1]
(root,0,0,00:00:00/79-18:48:04,213) [scsi_tmf_1]
(root,0,0,00:00:00/79-18:48:04,214) [scsi_eh_2]
(root,0,0,00:00:00/79-18:48:04,215) [scsi_tmf_2]
(root,0,0,00:00:00/79-18:48:04,216) [scsi_eh_3]
(root,0,0,00:00:00/79-18:48:04,217) [scsi_tmf_3]
(root,0,0,00:00:00/79-18:48:04,218) [scsi_eh_4]
(root,0,0,00:00:00/79-18:48:04,219) [scsi_tmf_4]
(root,0,0,00:00:00/79-18:48:04,220) [scsi_eh_5]
(root,0,0,00:00:00/79-18:48:04,221) [scsi_tmf_5]
(root,0,0,00:01:54/79-18:48:04,228) [kworker/3:1H-kblockd]
(root,0,0,00:02:27/79-18:48:04,229) [kworker/0:1H-kblockd]
(root,0,0,00:02:18/79-18:48:04,237) [kworker/1:1H-kblockd]
(root,0,0,00:26:02/79-18:48:04,238) [kworker/6:1H-kblockd]
(root,0,0,00:02:33/79-18:48:04,239) [kworker/7:1H-kblockd]
(root,0,0,00:01:49/79-18:48:04,243) [kworker/4:1H-kblockd]
(root,0,0,00:01:50/79-18:48:04,244) [kworker/2:1H-kblockd]
(root,0,0,00:01:48/79-18:48:04,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:00/79-18:48:04,248) [md1_raid1]
(root,0,0,00:00:16/79-18:48:04,251) [md0_raid1]
(root,0,0,00:32:26/79-18:48:04,253) [md2_raid1]
(root,0,0,00:00:00/79-18:48:03,268) [raid5wq]
(root,0,0,00:03:56/79-18:48:00,291) [jbd2/md2-8]
(root,0,0,00:00:00/79-18:48:00,292) [ext4-rsv-conver]
(root,122456,54088,00:20:04/79-18:48:00,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/79-18:48:00,348) [rpciod]
(root,0,0,00:00:00/79-18:48:00,349) [xprtiod]
(root,0,0,00:00:00/79-18:48:00,353) [spl_system_task]
(root,0,0,00:00:00/79-18:48:00,354) [spl_delay_taskq]
(root,0,0,00:00:00/79-18:48:00,355) [spl_dynamic_tas]
(root,0,0,00:00:00/79-18:48:00,356) [spl_kmem_cache]
(root,0,0,00:00:00/79-18:47:59,361) [zvol]
(root,0,0,00:00:00/79-18:47:59,362) [arc_prune]
(root,0,0,00:01:55/79-18:47:59,363) [arc_evict]
(root,0,0,00:01:48/79-18:47:59,364) [arc_reap]
(root,0,0,00:00:00/79-18:47:59,366) [dbu_evict]
(root,0,0,00:01:45/79-18:47:59,367) [dbuf_evict]
(root,22980,4784,00:08:42/79-18:47:59,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/79-18:47:59,376) [z_vdev_file]
(root,0,0,00:00:56/79-18:47:59,377) [l2arc_feed]
(root,0,0,00:00:00/79-18:47:59,485) [cryptd]
(root,3860,2412,00:00:02/79-18:47:59,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/79-18:47:59,522) [jbd2/md1-8]
(root,0,0,00:00:00/79-18:47:59,523) [ext4-rsv-conver]
(_rpc,7588,4284,00:00:10/79-18:47:57,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,4980,00:00:05/79-18:47:57,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:17:25/79-18:47:57,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:02:42/79-18:47:57,571) /usr/sbin/watchdog-mux
(root,12248,5024,00:00:01/79-18:47:57,573) /usr/sbin/smartd -n
(messagebus,9048,4052,00:05:24/79-18:47:57,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,150864,2100,00:00:08/79-18:47:57,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4916,00:00:43/79-18:47:57,578) /lib/systemd/systemd-logind
(root,223768,3868,00:06:24/79-18:47:57,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,3532,00:00:00/79-18:47:57,580) /usr/sbin/zed -F
(root,275828,1072,00:00:00/79-18:47:57,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1700,00:00:03/79-18:47:57,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2124,00:00:00/79-18:47:56,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:02:49/79-18:47:56,768) bpfilter_umh
(root,13808,5732,00:05:58/79-18:47:56,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/79-18:47:56,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3344,00:16:38/79-18:47:56,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,747920,65272,01:25:21/79-18:47:56,937) /usr/bin/pmxcfs
(root,9600,2008,00:00:22/79-18:47:56,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4196,00:00:16/79-18:47:56,1025) /usr/lib/postfix/sbin/master -w
(postfix,43948,6948,00:00:03/79-18:47:56,1027) qmgr -l -t unix -u
(root,8832,2292,00:00:08/79-18:47:55,1061) /usr/sbin/cron -f
(root,303168,38876,07:13:22/79-18:47:54,1068) pvestatd
(root,304364,31820,02:56:43/79-18:47:54,1069) pve-firewall
(root,353760,3304,00:00:56/79-18:47:54,1093) pvedaemon
(root,336416,12112,00:06:45/79-18:47:54,1101) pve-ha-crm
(www-data,355280,140852,00:02:01/79-18:47:53,1102) pveproxy
(www-data,68920,56548,00:01:17/79-18:47:53,1109) spiceproxy
(root,335964,32836,00:11:07/79-18:47:53,1111) pve-ha-lrm
(root,5658232,3037512,4-04:03:31/79-18:47:52,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:05/79-18:47:52,1129) [kvm-nx-lpage-re]
(root,0,0,06:14:58/79-18:47:52,1148) [vhost-1125]
(root,0,0,05:15:58/79-18:47:51,1167) [vhost-1125]
(root,0,0,00:34:05/79-18:47:51,1172) [kvm-pit/1125]
(root,13681940,8384688,10-16:18:51/79-18:47:48,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:02:45/79-18:47:48,1188) [kvm-nx-lpage-re]
(root,0,0,00:16:52/79-18:47:48,1207) [vhost-1184]
(root,0,0,00:38:00/79-18:47:48,1212) [kvm-pit/1184]
(root,0,0,00:00:00/79-18:47:45,1214) [dio/md2]
(root,3310036,2044016,19-01:51:19/79-18:47:44,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:17/79-18:47:44,1267) [kvm-nx-lpage-re]
(root,0,0,02:46:36/79-18:47:44,1286) [vhost-1263]
(root,0,0,00:00:00/79-18:47:44,1289) [kvm-pit/1263]
(root,0,0,00:00:00/79-18:47:43,1295) [ib-comp-wq]
(root,0,0,00:00:00/79-18:47:43,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/79-18:47:43,1297) [ib_mcast]
(root,0,0,00:00:00/79-18:47:43,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/79-18:47:43,1299) [rdma_cm]
(root,0,0,00:00:00/79-18:47:43,1300) [cifsiod]
(root,0,0,00:00:00/79-18:47:43,1301) [smb3decryptd]
(root,0,0,00:00:00/79-18:47:43,1302) [cifsfileinfoput]
(root,0,0,00:00:00/79-18:47:43,1303) [cifsoplockd]
(root,0,0,00:06:53/79-18:47:43,1305) [cifsd]
(root,0,0,00:02:40/79-18:47:43,1340) [cifsd]
(root,5634736,3750648,5-04:23:55/79-18:47:40,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:24/79-18:47:40,1358) [kvm-nx-lpage-re]
(root,0,0,01:02:49/79-18:47:40,1377) [vhost-1354]
(root,0,0,00:00:00/79-18:47:40,1382) [kvm-pit/1354]
(root,20730924,16698720,5-20:38:19/79-18:47:36,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:34/79-18:47:36,1398) [kvm-nx-lpage-re]
(root,0,0,00:44:56/79-18:47:35,1417) [vhost-1394]
(root,0,0,00:00:00/79-18:47:35,1422) [kvm-pit/1394]
(root,19007448,3593776,4-10:10:53/79-18:47:32,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:15/79-18:47:32,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:00/79-18:47:31,1487) [vhost-1464]
(root,0,0,00:00:00/79-18:47:31,1492) [kvm-pit/1464]
(root,5728612,4113908,22-11:51:30/79-18:47:28,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:57/79-18:47:28,1511) [kvm-nx-lpage-re]
(root,0,0,00:36:22/79-18:47:27,1531) [vhost-1507]
(root,0,0,00:00:00/79-18:47:27,1534) [kvm-pit/1507]
(root,0,0,00:00:00/54:34,6826) [kworker/6:3-dio/md2]
(root,0,0,00:00:00/45:34,9613) [kworker/1:1-md]
(postfix,43844,7664,00:00:00/45:07,9787) pickup -l -t unix -u -c
(root,0,0,00:00:00/38:34,11773) [kworker/7:0-cifsiod]
(root,0,0,00:04:40/32:45,13493) [kworker/u16:1-flush-cifs-1]
(root,0,0,00:00:00/30:34,14087) [kworker/4:3-events]
(www-data,76944,54204,00:00:00/02:25:32,14864) spiceproxy worker
(root,86168,2088,00:00:00/02:25:32,14866) /usr/sbin/pvefw-logger
(www-data,355576,127248,00:00:00/02:25:32,14872) pveproxy worker
(www-data,367700,136496,00:00:00/02:25:32,14873) pveproxy worker
(www-data,355576,127744,00:00:00/02:25:32,14874) pveproxy worker
(root,0,0,00:00:00/25:34,15431) [kworker/3:2-events]
(root,9796,2388,00:00:00/25:33,15432) /usr/sbin/CRON -f
(root,2380,756,00:00:00/25:33,15433) /bin/sh -c vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,330228,116308,00:00:00/25:33,15434) /usr/bin/perl -T /usr/bin/vzdump 101 103 104 106 110 --node node01 --mailnotification always --mode snapshot --storage Backup03 --quiet 1 --mailto rzbackup@ago-it.de --compress lzo
(root,339652,102508,00:00:09/25:33,15436) task UPID:node01:00003C4C:2913FAF0:66DF8C02:vzdump::root@pam:
(root,0,0,00:00:00/24:34,15709) [kworker/4:1-events]
(root,0,0,00:00:00/19:34,17042) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/17:34,17568) [kworker/0:3-cgroup_destroy]
(root,0,0,00:00:00/16:34,17833) [kworker/7:2-events]
(root,0,0,00:00:00/15:34,18101) [kworker/1:2-cifsiod]
(root,0,0,00:00:14/15:29,18113) [kworker/u16:0-flush-9:2]
(root,362260,10552,00:00:29/26-08:54:22,18556) pvedaemon worker
(root,362392,13256,00:00:31/26-08:53:07,19034) pvedaemon worker
(root,0,0,00:00:00/10:34,19427) [kworker/2:0-events]
(root,0,0,00:00:00/10:34,19428) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/09:34,19698) [kworker/0:0-events]
(root,0,0,00:00:00/08:50,19904) [kworker/u16:3-events_power_efficient]
(root,0,0,00:00:00/08:34,19957) [kworker/5:1-events]
(root,0,0,00:00:00/08:34,19958) [kworker/5:2]
(root,0,0,00:00:00/07:34,20223) [kworker/6:1-events]
(root,0,0,00:00:00/04:34,21020) [kworker/1:0-cifsiod]
(root,0,0,00:00:00/04:34,21021) [kworker/2:2-events]
(root,0,0,00:00:00/03:34,21284) [kworker/2:3]
(root,0,0,00:00:00/02:34,21547) [kworker/3:1-events]
(root,0,0,00:00:00/02:34,21548) [kworker/7:1]
(root,5212,1792,00:00:24/01:35,21810) lzop
(root,0,0,00:00:00/01:34,21818) [kworker/3:3]
(root,0,0,00:00:00/00:34,22081) [kworker/4:0-events]
(root,0,0,00:00:00/00:34,22082) [kworker/4:2-cgroup_destroy]
(root,7188,3196,00:00:00/00:00,22351) /bin/bash /usr/bin/check_mk_agent
(root,7632,2668,00:00:00/00:00,22377) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,996,00:00:00/00:00,22378) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362584,11056,00:00:54/53-03:49:31,27309) pvedaemon worker
(root,18437408,10274704,2-09:08:41/53-15:21:57,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:02/53-15:21:57,28600) [kvm-nx-lpage-re]
(root,0,0,00:01:32/53-15:21:57,28619) [vhost-28596]
(root,0,0,00:26:13/53-15:21:57,28626) [kvm-pit/28596]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-10 00:25

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42e0f995d8

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170224,7720,00:08:00/79-12:31:15,1) /sbin/init
(root,0,0,00:00:04/79-12:31:15,2) [kthreadd]
(root,0,0,00:00:00/79-12:31:15,3) [rcu_gp]
(root,0,0,00:00:00/79-12:31:15,4) [rcu_par_gp]
(root,0,0,00:00:00/79-12:31:15,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/79-12:31:15,9) [mm_percpu_wq]
(root,0,0,00:02:36/79-12:31:15,10) [ksoftirqd/0]
(root,0,0,00:17:16/79-12:31:15,11) [rcu_sched]
(root,0,0,00:00:19/79-12:31:15,12) [migration/0]
(root,0,0,00:00:00/79-12:31:15,13) [idle_inject/0]
(root,0,0,00:00:00/79-12:31:15,14) [cpuhp/0]
(root,0,0,00:00:00/79-12:31:15,15) [cpuhp/1]
(root,0,0,00:00:00/79-12:31:15,16) [idle_inject/1]
(root,0,0,00:00:19/79-12:31:15,17) [migration/1]
(root,0,0,00:01:52/79-12:31:15,18) [ksoftirqd/1]
(root,0,0,00:00:00/79-12:31:15,20) [kworker/1:0H]
(root,0,0,00:00:00/79-12:31:15,21) [cpuhp/2]
(root,0,0,00:00:00/79-12:31:15,22) [idle_inject/2]
(root,0,0,00:00:19/79-12:31:15,23) [migration/2]
(root,0,0,00:01:09/79-12:31:15,24) [ksoftirqd/2]
(root,0,0,00:00:00/79-12:31:15,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/79-12:31:15,27) [cpuhp/3]
(root,0,0,00:00:00/79-12:31:15,28) [idle_inject/3]
(root,0,0,00:00:25/79-12:31:15,29) [migration/3]
(root,0,0,00:00:49/79-12:31:15,30) [ksoftirqd/3]
(root,0,0,00:00:00/79-12:31:15,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/79-12:31:15,33) [cpuhp/4]
(root,0,0,00:00:00/79-12:31:15,34) [idle_inject/4]
(root,0,0,00:00:19/79-12:31:15,35) [migration/4]
(root,0,0,00:00:37/79-12:31:15,36) [ksoftirqd/4]
(root,0,0,00:00:00/79-12:31:15,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/79-12:31:15,39) [cpuhp/5]
(root,0,0,00:00:00/79-12:31:15,40) [idle_inject/5]
(root,0,0,00:00:19/79-12:31:15,41) [migration/5]
(root,0,0,00:00:33/79-12:31:15,42) [ksoftirqd/5]
(root,0,0,00:00:00/79-12:31:15,44) [kworker/5:0H]
(root,0,0,00:00:00/79-12:31:15,45) [cpuhp/6]
(root,0,0,00:00:00/79-12:31:15,46) [idle_inject/6]
(root,0,0,00:00:18/79-12:31:15,47) [migration/6]
(root,0,0,00:05:05/79-12:31:15,48) [ksoftirqd/6]
(root,0,0,00:00:00/79-12:31:15,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/79-12:31:15,51) [cpuhp/7]
(root,0,0,00:00:00/79-12:31:15,52) [idle_inject/7]
(root,0,0,00:00:21/79-12:31:15,53) [migration/7]
(root,0,0,00:11:55/79-12:31:15,54) [ksoftirqd/7]
(root,0,0,00:00:00/79-12:31:15,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/79-12:31:15,57) [kdevtmpfs]
(root,0,0,00:00:00/79-12:31:15,58) [netns]
(root,0,0,00:00:00/79-12:31:15,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/79-12:31:15,60) [kauditd]
(root,0,0,00:00:02/79-12:31:15,62) [khungtaskd]
(root,0,0,00:00:00/79-12:31:15,63) [oom_reaper]
(root,0,0,00:00:00/79-12:31:15,64) [writeback]
(root,0,0,00:00:00/79-12:31:15,65) [kcompactd0]
(root,0,0,00:00:00/79-12:31:15,66) [ksmd]
(root,0,0,00:03:20/79-12:31:15,67) [khugepaged]
(root,0,0,00:00:00/79-12:31:15,113) [kintegrityd]
(root,0,0,00:00:00/79-12:31:15,114) [kblockd]
(root,0,0,00:00:00/79-12:31:15,115) [blkcg_punt_bio]
(root,0,0,00:00:00/79-12:31:15,116) [tpm_dev_wq]
(root,0,0,00:00:00/79-12:31:15,117) [ata_sff]
(root,0,0,00:00:00/79-12:31:15,118) [md]
(root,0,0,00:00:00/79-12:31:15,119) [edac-poller]
(root,0,0,00:00:00/79-12:31:15,120) [devfreq_wq]
(root,0,0,00:00:00/79-12:31:15,121) [watchdogd]
(root,0,0,00:11:46/79-12:31:15,128) [kswapd0]
(root,0,0,00:00:00/79-12:31:15,129) [ecryptfs-kthrea]
(root,0,0,00:00:00/79-12:31:15,131) [kthrotld]
(root,0,0,00:00:00/79-12:31:15,132) [acpi_thermal_pm]
(root,0,0,00:00:00/79-12:31:15,133) [nvme-wq]
(root,0,0,00:00:00/79-12:31:15,134) [nvme-reset-wq]
(root,0,0,00:00:00/79-12:31:15,135) [nvme-delete-wq]
(root,0,0,00:00:00/79-12:31:15,137) [ipv6_addrconf]
(root,0,0,00:00:00/79-12:31:15,146) [kstrp]
(root,0,0,00:00:00/79-12:31:15,147) [kworker/u17:0]
(root,0,0,00:00:00/79-12:31:15,162) [charger_manager]
(root,0,0,00:00:00/79-12:31:14,210) [scsi_eh_0]
(root,0,0,00:00:00/79-12:31:14,211) [scsi_tmf_0]
(root,0,0,00:00:00/79-12:31:14,212) [scsi_eh_1]
(root,0,0,00:00:00/79-12:31:14,213) [scsi_tmf_1]
(root,0,0,00:00:00/79-12:31:14,214) [scsi_eh_2]
(root,0,0,00:00:00/79-12:31:14,215) [scsi_tmf_2]
(root,0,0,00:00:00/79-12:31:14,216) [scsi_eh_3]
(root,0,0,00:00:00/79-12:31:14,217) [scsi_tmf_3]
(root,0,0,00:00:00/79-12:31:14,218) [scsi_eh_4]
(root,0,0,00:00:00/79-12:31:14,219) [scsi_tmf_4]
(root,0,0,00:00:00/79-12:31:14,220) [scsi_eh_5]
(root,0,0,00:00:00/79-12:31:14,221) [scsi_tmf_5]
(root,0,0,00:01:54/79-12:31:14,228) [kworker/3:1H-kblockd]
(root,0,0,00:02:27/79-12:31:14,229) [kworker/0:1H-kblockd]
(root,0,0,00:02:18/79-12:31:14,237) [kworker/1:1H-kblockd]
(root,0,0,00:25:58/79-12:31:14,238) [kworker/6:1H-kblockd]
(root,0,0,00:02:33/79-12:31:14,239) [kworker/7:1H-kblockd]
(root,0,0,00:01:49/79-12:31:14,243) [kworker/4:1H-kblockd]
(root,0,0,00:01:50/79-12:31:14,244) [kworker/2:1H-kblockd]
(root,0,0,00:01:48/79-12:31:14,245) [kworker/5:1H-kblockd]
(root,0,0,00:00:00/79-12:31:14,248) [md1_raid1]
(root,0,0,00:00:16/79-12:31:14,251) [md0_raid1]
(root,0,0,00:32:21/79-12:31:14,253) [md2_raid1]
(root,0,0,00:00:00/79-12:31:13,268) [raid5wq]
(root,0,0,00:03:56/79-12:31:10,291) [jbd2/md2-8]
(root,0,0,00:00:00/79-12:31:10,292) [ext4-rsv-conver]
(root,106072,35200,00:20:01/79-12:31:10,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/79-12:31:10,348) [rpciod]
(root,0,0,00:00:00/79-12:31:10,349) [xprtiod]
(root,0,0,00:00:00/79-12:31:10,353) [spl_system_task]
(root,0,0,00:00:00/79-12:31:10,354) [spl_delay_taskq]
(root,0,0,00:00:00/79-12:31:10,355) [spl_dynamic_tas]
(root,0,0,00:00:00/79-12:31:10,356) [spl_kmem_cache]
(root,0,0,00:00:00/79-12:31:09,361) [zvol]
(root,0,0,00:00:00/79-12:31:09,362) [arc_prune]
(root,0,0,00:01:55/79-12:31:09,363) [arc_evict]
(root,0,0,00:01:48/79-12:31:09,364) [arc_reap]
(root,0,0,00:00:00/79-12:31:09,366) [dbu_evict]
(root,0,0,00:01:44/79-12:31:09,367) [dbuf_evict]
(root,22980,4784,00:08:40/79-12:31:09,375) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/79-12:31:09,376) [z_vdev_file]
(root,0,0,00:00:56/79-12:31:09,377) [l2arc_feed]
(root,0,0,00:00:00/79-12:31:09,485) [cryptd]
(root,3860,2412,00:00:02/79-12:31:09,517) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/79-12:31:09,522) [jbd2/md1-8]
(root,0,0,00:00:00/79-12:31:09,523) [ext4-rsv-conver]
(_rpc,7588,4284,00:00:10/79-12:31:07,558) /sbin/rpcbind -f -w
(systemd-timesync,93092,4980,00:00:05/79-12:31:07,559) /lib/systemd/systemd-timesyncd
(root,8076,4692,00:17:21/79-12:31:07,570) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,748,00:02:41/79-12:31:07,571) /usr/sbin/watchdog-mux
(root,12248,5024,00:00:01/79-12:31:07,573) /usr/sbin/smartd -n
(messagebus,9048,4052,00:05:23/79-12:31:07,575) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,150864,2100,00:00:08/79-12:31:07,577) /usr/bin/lxcfs /var/lib/lxcfs
(root,19316,4916,00:00:43/79-12:31:07,578) /lib/systemd/systemd-logind
(root,223768,3868,00:06:23/79-12:31:07,579) /usr/sbin/rsyslogd -n -iNONE
(root,98612,3532,00:00:00/79-12:31:07,580) /usr/sbin/zed -F
(root,275828,1072,00:00:00/79-12:31:07,582) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1700,00:00:03/79-12:31:07,586) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2124,00:00:00/79-12:31:06,756) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,676,00:02:48/79-12:31:06,768) bpfilter_umh
(root,13808,5732,00:05:57/79-12:31:06,775) /usr/sbin/sshd -D
(root,5940,1564,00:00:00/79-12:31:06,792) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,878176,3344,00:16:34/79-12:31:06,911) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,747920,65336,01:25:05/79-12:31:06,937) /usr/bin/pmxcfs
(root,9600,2008,00:00:22/79-12:31:06,966) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4196,00:00:15/79-12:31:06,1025) /usr/lib/postfix/sbin/master -w
(postfix,43948,6948,00:00:03/79-12:31:06,1027) qmgr -l -t unix -u
(root,8832,2292,00:00:08/79-12:31:05,1061) /usr/sbin/cron -f
(root,303168,38884,07:11:59/79-12:31:04,1068) pvestatd
(root,304364,31820,02:56:07/79-12:31:04,1069) pve-firewall
(root,353760,3304,00:00:56/79-12:31:04,1093) pvedaemon
(root,336416,12112,00:06:43/79-12:31:04,1101) pve-ha-crm
(www-data,355284,141028,00:02:00/79-12:31:03,1102) pveproxy
(www-data,68852,56240,00:01:17/79-12:31:03,1109) spiceproxy
(root,335964,32836,00:11:05/79-12:31:03,1111) pve-ha-lrm
(root,5653940,3047132,4-03:44:00/79-12:31:02,1125) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:05/79-12:31:02,1129) [kvm-nx-lpage-re]
(root,0,0,06:13:40/79-12:31:02,1148) [vhost-1125]
(root,0,0,05:14:49/79-12:31:01,1167) [vhost-1125]
(root,0,0,00:33:58/79-12:31:01,1172) [kvm-pit/1125]
(root,13677644,8387432,10-15:44:48/79-12:30:58,1184) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:02:45/79-12:30:58,1188) [kvm-nx-lpage-re]
(root,0,0,00:16:51/79-12:30:58,1207) [vhost-1184]
(root,0,0,00:37:53/79-12:30:58,1212) [kvm-pit/1184]
(root,0,0,00:00:00/79-12:30:55,1214) [dio/md2]
(root,3305168,2046648,19-00:20:34/79-12:30:54,1263) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:17/79-12:30:54,1267) [kvm-nx-lpage-re]
(root,0,0,02:46:04/79-12:30:54,1286) [vhost-1263]
(root,0,0,00:00:00/79-12:30:54,1289) [kvm-pit/1263]
(root,0,0,00:00:00/79-12:30:53,1295) [ib-comp-wq]
(root,0,0,00:00:00/79-12:30:53,1296) [ib-comp-unb-wq]
(root,0,0,00:00:00/79-12:30:53,1297) [ib_mcast]
(root,0,0,00:00:00/79-12:30:53,1298) [ib_nl_sa_wq]
(root,0,0,00:00:00/79-12:30:53,1299) [rdma_cm]
(root,0,0,00:00:00/79-12:30:53,1300) [cifsiod]
(root,0,0,00:00:00/79-12:30:53,1301) [smb3decryptd]
(root,0,0,00:00:00/79-12:30:53,1302) [cifsfileinfoput]
(root,0,0,00:00:00/79-12:30:53,1303) [cifsoplockd]
(root,0,0,00:06:51/79-12:30:53,1305) [cifsd]
(root,0,0,00:02:39/79-12:30:53,1340) [cifsd]
(root,5630444,3754012,5-03:58:13/79-12:30:50,1354) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:24/79-12:30:50,1358) [kvm-nx-lpage-re]
(root,0,0,01:02:27/79-12:30:50,1377) [vhost-1354]
(root,0,0,00:00:00/79-12:30:50,1382) [kvm-pit/1354]
(root,20726632,16701352,5-20:08:31/79-12:30:46,1394) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:34/79-12:30:46,1398) [kvm-nx-lpage-re]
(root,0,0,00:44:51/79-12:30:45,1417) [vhost-1394]
(root,0,0,00:00:00/79-12:30:45,1422) [kvm-pit/1394]
(root,19003152,3599480,4-09:47:57/79-12:30:42,1464) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:15/79-12:30:42,1468) [kvm-nx-lpage-re]
(root,0,0,00:01:00/79-12:30:41,1487) [vhost-1464]
(root,0,0,00:00:00/79-12:30:41,1492) [kvm-pit/1464]
(root,5724320,4117584,22-10:55:29/79-12:30:38,1507) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:57/79-12:30:38,1511) [kvm-nx-lpage-re]
(root,0,0,00:36:09/79-12:30:37,1531) [vhost-1507]
(root,0,0,00:00:00/79-12:30:37,1534) [kvm-pit/1507]
(root,0,0,00:00:00/43:44,3707) [kworker/3:1-events]
(root,0,0,00:00:00/36:44,5800) [kworker/1:3-cgroup_destroy]
(root,86168,2056,00:00:04/20:08:42,6540) /usr/sbin/pvefw-logger
(www-data,76912,54104,00:00:01/20:08:42,6548) spiceproxy worker
(www-data,367832,136288,00:00:00/20:08:42,6549) pveproxy worker
(www-data,367832,136256,00:00:00/20:08:42,6550) pveproxy worker
(www-data,367716,136536,00:00:00/20:08:42,6551) pveproxy worker
(root,0,0,00:00:00/32:45,7011) [kworker/5:0-cgroup_destroy]
(root,0,0,00:00:00/31:44,7330) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/29:44,7945) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/27:44,8550) [kworker/7:1-events]
(root,0,0,00:00:00/24:58,9414) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/23:44,9776) [kworker/6:3-dio/md2]
(root,0,0,00:00:00/22:44,10070) [kworker/2:1-events]
(root,0,0,00:00:00/21:44,10355) [kworker/1:0-events]
(root,0,0,00:00:00/20:44,10621) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/18:44,11154) [kworker/7:0-cgroup_destroy]
(root,0,0,00:00:00/15:44,11958) [kworker/5:3-events]
(root,0,0,00:00:00/13:46,12468) [kworker/u16:0-events_power_efficient]
(root,0,0,00:00:00/12:44,12757) [kworker/3:0-events]
(root,0,0,00:00:00/11:44,13019) [kworker/4:1-events]
(root,0,0,00:00:00/09:44,13545) [kworker/6:0-dio/md2]
(root,0,0,00:00:00/09:44,13546) [kworker/6:1-events]
(root,0,0,00:00:00/07:51,14049) [kworker/0:2-events]
(root,0,0,00:00:00/05:44,14607) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:00/04:44,14878) [kworker/5:1-cgroup_destroy]
(root,0,0,00:00:00/03:44,15146) [kworker/7:2-mm_percpu_wq]
(root,0,0,00:00:00/02:44,15413) [kworker/5:2-events]
(root,0,0,00:00:00/01:44,15684) [kworker/2:3-events]
(root,0,0,00:00:00/00:44,15956) [kworker/0:1-events]
(root,0,0,00:00:00/00:17,16118) [kworker/u16:2-flush-9:2]
(root,7188,3268,00:00:00/00:00,16234) /bin/bash /usr/bin/check_mk_agent
(root,7632,2696,00:00:00/00:00,16260) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,996,00:00:00/00:00,16261) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362260,10552,00:00:29/26-02:37:32,18556) pvedaemon worker
(root,362392,13256,00:00:31/26-02:36:17,19034) pvedaemon worker
(root,362584,11056,00:00:53/52-21:32:41,27309) pvedaemon worker
(root,18490864,10281640,2-08:53:53/53-09:05:07,28596) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 6,sockets=1,cores=6,maxcpus=6 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:02/53-09:05:07,28600) [kvm-nx-lpage-re]
(root,0,0,00:01:32/53-09:05:07,28619) [vhost-28596]
(root,0,0,00:26:05/53-09:05:07,28626) [kvm-pit/28596]
(postfix,43844,7928,00:00:00/01:07:38,28736) pickup -l -t unix -u -c

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 16:df:4d:a6:f5:ba brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:ab:55:ea:04:e2 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:8c:d9:bd:e0:15 brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 2a:d8:6c:09:5d:37 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether f2:d0:07:72:4e:11 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 02:80:f8:11:52:40 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:99:b9:9d:e0:ce brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:7b:9d:fa:ec:18 brd ff:ff:ff:ff:ff:ff
15: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:af:3b:61:63:bb brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-09 18:08

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c4229e1f23f

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,7440,00:29:48/303-07:34:07,1) /sbin/init
(root,0,0,00:00:18/303-07:34:07,2) [kthreadd]
(root,0,0,00:00:00/303-07:34:07,3) [rcu_gp]
(root,0,0,00:00:00/303-07:34:07,4) [rcu_par_gp]
(root,0,0,00:00:00/303-07:34:07,6) [kworker/0:0H]
(root,0,0,00:00:00/303-07:34:07,9) [mm_percpu_wq]
(root,0,0,00:06:26/303-07:34:07,10) [ksoftirqd/0]
(root,0,0,01:01:52/303-07:34:07,11) [rcu_sched]
(root,0,0,00:01:10/303-07:34:07,12) [migration/0]
(root,0,0,00:00:00/303-07:34:07,13) [idle_inject/0]
(root,0,0,00:00:00/303-07:34:07,14) [cpuhp/0]
(root,0,0,00:00:00/303-07:34:07,15) [cpuhp/1]
(root,0,0,00:00:00/303-07:34:07,16) [idle_inject/1]
(root,0,0,00:01:09/303-07:34:07,17) [migration/1]
(root,0,0,00:04:53/303-07:34:07,18) [ksoftirqd/1]
(root,0,0,00:00:00/303-07:34:07,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/303-07:34:07,21) [cpuhp/2]
(root,0,0,00:00:00/303-07:34:07,22) [idle_inject/2]
(root,0,0,00:01:08/303-07:34:07,23) [migration/2]
(root,0,0,00:03:44/303-07:34:07,24) [ksoftirqd/2]
(root,0,0,00:00:00/303-07:34:07,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/303-07:34:07,27) [cpuhp/3]
(root,0,0,00:00:00/303-07:34:07,28) [idle_inject/3]
(root,0,0,00:01:36/303-07:34:07,29) [migration/3]
(root,0,0,00:02:56/303-07:34:07,30) [ksoftirqd/3]
(root,0,0,00:00:00/303-07:34:07,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/303-07:34:07,33) [cpuhp/4]
(root,0,0,00:00:00/303-07:34:07,34) [idle_inject/4]
(root,0,0,00:01:06/303-07:34:07,35) [migration/4]
(root,0,0,00:02:37/303-07:34:07,36) [ksoftirqd/4]
(root,0,0,00:00:00/303-07:34:07,38) [kworker/4:0H]
(root,0,0,00:00:00/303-07:34:07,39) [cpuhp/5]
(root,0,0,00:00:00/303-07:34:07,40) [idle_inject/5]
(root,0,0,00:01:10/303-07:34:07,41) [migration/5]
(root,0,0,00:43:02/303-07:34:07,42) [ksoftirqd/5]
(root,0,0,00:00:00/303-07:34:07,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/303-07:34:07,45) [cpuhp/6]
(root,0,0,00:00:00/303-07:34:07,46) [idle_inject/6]
(root,0,0,00:01:04/303-07:34:07,47) [migration/6]
(root,0,0,00:16:25/303-07:34:07,48) [ksoftirqd/6]
(root,0,0,00:00:00/303-07:34:07,50) [kworker/6:0H]
(root,0,0,00:00:00/303-07:34:07,51) [cpuhp/7]
(root,0,0,00:00:00/303-07:34:07,52) [idle_inject/7]
(root,0,0,00:01:10/303-07:34:07,53) [migration/7]
(root,0,0,00:01:30/303-07:34:07,54) [ksoftirqd/7]
(root,0,0,00:00:00/303-07:34:07,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/303-07:34:07,57) [kdevtmpfs]
(root,0,0,00:00:00/303-07:34:07,58) [netns]
(root,0,0,00:00:00/303-07:34:07,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/303-07:34:07,60) [kauditd]
(root,0,0,00:00:09/303-07:34:07,62) [khungtaskd]
(root,0,0,00:00:00/303-07:34:07,63) [oom_reaper]
(root,0,0,00:00:00/303-07:34:07,64) [writeback]
(root,0,0,00:00:00/303-07:34:07,65) [kcompactd0]
(root,0,0,00:00:00/303-07:34:07,66) [ksmd]
(root,0,0,00:02:00/303-07:34:07,67) [khugepaged]
(root,0,0,00:00:00/303-07:34:07,113) [kintegrityd]
(root,0,0,00:00:00/303-07:34:07,114) [kblockd]
(root,0,0,00:00:00/303-07:34:07,115) [blkcg_punt_bio]
(root,0,0,00:00:00/303-07:34:07,116) [tpm_dev_wq]
(root,0,0,00:00:00/303-07:34:07,117) [ata_sff]
(root,0,0,00:00:00/303-07:34:07,118) [md]
(root,0,0,00:00:00/303-07:34:07,119) [edac-poller]
(root,0,0,00:00:00/303-07:34:07,120) [devfreq_wq]
(root,0,0,00:00:00/303-07:34:07,121) [watchdogd]
(root,0,0,00:19:40/303-07:34:07,126) [kswapd0]
(root,0,0,00:00:00/303-07:34:07,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/303-07:34:07,129) [kthrotld]
(root,0,0,00:00:00/303-07:34:07,130) [acpi_thermal_pm]
(root,0,0,00:00:00/303-07:34:07,131) [nvme-wq]
(root,0,0,00:00:00/303-07:34:07,132) [nvme-reset-wq]
(root,0,0,00:00:00/303-07:34:07,133) [nvme-delete-wq]
(root,0,0,00:00:00/303-07:34:07,136) [ipv6_addrconf]
(root,0,0,00:00:00/303-07:34:07,145) [kstrp]
(root,0,0,00:00:00/303-07:34:07,146) [kworker/u17:0]
(root,0,0,00:00:00/303-07:34:07,161) [charger_manager]
(root,0,0,00:00:00/303-07:34:06,207) [scsi_eh_0]
(root,0,0,00:00:00/303-07:34:06,208) [scsi_tmf_0]
(root,0,0,00:00:00/303-07:34:06,209) [scsi_eh_1]
(root,0,0,00:00:00/303-07:34:06,210) [scsi_tmf_1]
(root,0,0,00:00:00/303-07:34:06,211) [scsi_eh_2]
(root,0,0,00:00:00/303-07:34:06,212) [scsi_tmf_2]
(root,0,0,00:00:00/303-07:34:06,213) [scsi_eh_3]
(root,0,0,00:00:00/303-07:34:06,214) [scsi_tmf_3]
(root,0,0,00:00:00/303-07:34:06,215) [scsi_eh_4]
(root,0,0,00:00:00/303-07:34:06,216) [scsi_tmf_4]
(root,0,0,00:00:00/303-07:34:06,217) [scsi_eh_5]
(root,0,0,00:00:00/303-07:34:06,218) [scsi_tmf_5]
(root,0,0,00:09:49/303-07:34:06,224) [kworker/1:1H-kblockd]
(root,0,0,00:07:57/303-07:34:06,225) [kworker/5:1H-kblockd]
(root,0,0,00:10:25/303-07:34:06,236) [kworker/0:1H-kblockd]
(root,0,0,00:08:11/303-07:34:06,237) [kworker/4:1H-kblockd]
(root,0,0,02:15:08/303-07:34:06,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/303-07:34:05,250) [raid5wq]
(root,0,0,00:10:46/303-07:34:00,309) [kworker/7:1H-kblockd]
(root,0,0,00:08:07/303-07:33:45,449) [kworker/2:1H-kblockd]
(root,0,0,00:01:03/303-07:33:45,452) [md0_raid1]
(root,0,0,00:00:03/303-07:33:45,456) [md1_raid1]
(root,0,0,02:01:31/303-07:33:45,460) [md2_raid1]
(root,0,0,00:18:29/303-07:33:45,476) [jbd2/md2-8]
(root,0,0,00:00:00/303-07:33:45,477) [ext4-rsv-conver]
(root,0,0,00:08:27/303-07:33:45,490) [kworker/3:1H-kblockd]
(root,274580,146684,01:59:25/303-07:33:45,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/303-07:33:44,543) [rpciod]
(root,0,0,00:00:00/303-07:33:44,544) [xprtiod]
(root,0,0,00:00:00/303-07:33:44,547) [spl_system_task]
(root,0,0,00:00:00/303-07:33:44,548) [spl_delay_taskq]
(root,0,0,00:00:00/303-07:33:44,549) [spl_dynamic_tas]
(root,0,0,00:00:00/303-07:33:44,550) [spl_kmem_cache]
(root,22980,4548,00:33:06/303-07:33:44,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/303-07:33:44,560) [zvol]
(root,0,0,00:00:00/303-07:33:44,563) [arc_prune]
(root,0,0,00:07:40/303-07:33:44,564) [arc_evict]
(root,0,0,00:07:09/303-07:33:44,565) [arc_reap]
(root,0,0,00:00:00/303-07:33:44,567) [dbu_evict]
(root,0,0,00:06:56/303-07:33:44,568) [dbuf_evict]
(root,0,0,00:00:00/303-07:33:44,640) [z_vdev_file]
(root,0,0,00:03:36/303-07:33:44,642) [l2arc_feed]
(root,0,0,00:00:00/303-07:33:44,679) [cryptd]
(root,4816,2360,00:00:09/303-07:33:44,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/303-07:33:44,719) [jbd2/md1-8]
(root,0,0,00:00:00/303-07:33:44,720) [ext4-rsv-conver]
(_rpc,7644,4276,00:00:41/303-07:33:44,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,4896,00:00:24/303-07:33:44,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:58:27/303-07:33:44,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:10:37/303-07:33:44,787) /usr/sbin/watchdog-mux
(messagebus,9524,4400,00:24:16/303-07:33:44,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,3748,00:45:59/303-07:33:44,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,4520,00:02:45/303-07:33:44,792) /lib/systemd/systemd-logind
(root,12244,5176,00:00:08/303-07:33:44,795) /usr/sbin/smartd -n
(root,164148,3572,00:00:00/303-07:33:44,798) /usr/sbin/zed -F
(root,224732,1980,00:00:31/303-07:33:44,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1020,00:00:00/303-07:33:44,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1888,00:00:07/303-07:33:44,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1848,00:00:00/303-07:33:43,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:10:11/303-07:33:43,969) bpfilter_umh
(root,13808,5772,00:18:35/303-07:33:43,983) /usr/sbin/sshd -D
(root,5940,1436,00:00:00/303-07:33:43,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,796380,3884,01:08:50/303-07:33:43,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,815584,57240,05:23:05/303-07:33:43,1104) /usr/bin/pmxcfs
(root,9600,2000,00:01:22/303-07:33:43,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4040,00:00:59/303-07:33:43,1203) /usr/lib/postfix/sbin/master -w
(postfix,43996,7156,00:00:12/303-07:33:43,1205) qmgr -l -t unix -u
(root,8832,2348,00:00:31/303-07:33:42,1218) /usr/sbin/cron -f
(root,304368,31220,11:24:29/303-07:33:42,1224) pve-firewall
(root,303056,38536,1-02:37:43/303-07:33:42,1226) pvestatd
(root,353788,4044,00:03:31/303-07:33:41,1249) pvedaemon
(root,336348,8620,00:24:59/303-07:33:41,1258) pve-ha-crm
(www-data,355176,145220,00:07:37/303-07:33:41,1259) pveproxy
(www-data,68848,58088,00:04:53/303-07:33:40,1265) spiceproxy
(root,335964,32308,00:41:09/303-07:33:40,1267) pve-ha-lrm
(root,5790180,3997332,14-16:56:04/303-07:33:39,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:22/303-07:33:39,1285) [kvm-nx-lpage-re]
(root,0,0,1-01:59:37/303-07:33:39,1305) [vhost-1281]
(root,0,0,22:20:28/303-07:33:39,1324) [vhost-1281]
(root,0,0,02:05:52/303-07:33:39,1329) [kvm-pit/1281]
(root,14723092,8529260,68-22:30:55/303-07:33:36,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:10:52/303-07:33:36,1348) [kvm-nx-lpage-re]
(root,0,0,01:52:22/303-07:33:35,1367) [vhost-1344]
(root,0,0,02:27:38/303-07:33:35,1372) [kvm-pit/1344]
(root,0,0,00:00:00/303-07:33:32,1374) [dio/md2]
(root,3258760,2100476,72-03:35:45/303-07:33:32,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:34/303-07:33:32,1415) [kvm-nx-lpage-re]
(root,0,0,12:36:24/303-07:33:31,1434) [vhost-1411]
(root,0,0,00:00:00/303-07:33:31,1437) [kvm-pit/1411]
(root,0,0,00:00:00/303-07:33:30,1455) [ib-comp-wq]
(root,0,0,00:00:00/303-07:33:30,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/303-07:33:30,1457) [ib_mcast]
(root,0,0,00:00:00/303-07:33:30,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/303-07:33:30,1459) [rdma_cm]
(root,0,0,00:00:00/303-07:33:30,1460) [cifsiod]
(root,0,0,00:00:00/303-07:33:30,1461) [smb3decryptd]
(root,0,0,00:00:00/303-07:33:30,1462) [cifsfileinfoput]
(root,0,0,00:00:00/303-07:33:30,1463) [cifsoplockd]
(root,0,0,00:19:55/303-07:33:30,1465) [cifsd]
(root,0,0,00:23:26/303-07:33:30,1498) [cifsd]
(root,7547848,4237524,20-03:39:32/303-07:33:27,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:10/303-07:33:27,1519) [kvm-nx-lpage-re]
(root,0,0,03:53:04/303-07:33:27,1538) [vhost-1515]
(root,0,0,00:00:00/303-07:33:27,1543) [kvm-pit/1515]
(root,22795372,16875620,23-21:36:15/303-07:33:23,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:31/303-07:33:23,1561) [kvm-nx-lpage-re]
(root,0,0,01:47:04/303-07:33:23,1580) [vhost-1557]
(root,0,0,00:00:00/303-07:33:23,1585) [kvm-pit/1557]
(root,19191324,8096560,16-22:35:16/303-07:33:19,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:05/303-07:33:19,1628) [kvm-nx-lpage-re]
(root,0,0,00:04:37/303-07:33:19,1647) [vhost-1624]
(root,0,0,00:00:00/303-07:33:19,1652) [kvm-pit/1624]
(root,6328432,4507632,38-21:51:17/303-07:33:15,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:40/303-07:33:15,1669) [kvm-nx-lpage-re]
(root,0,0,02:11:17/303-07:33:15,1690) [vhost-1665]
(root,0,0,00:00:00/303-07:33:15,1693) [kvm-pit/1665]
(root,361880,31880,00:00:10/2-16:02:30,3662) pvedaemon worker
(root,0,0,00:00:00/42:56,4784) [kworker/1:1-events]
(root,86168,2292,00:00:00/42:55,4797) /usr/sbin/pvefw-logger
(www-data,69376,53072,00:00:00/42:55,4800) spiceproxy worker
(www-data,363408,133228,00:00:00/42:55,4801) pveproxy worker
(www-data,363408,133212,00:00:00/42:55,4802) pveproxy worker
(www-data,363408,133212,00:00:00/42:55,4803) pveproxy worker
(root,0,0,00:00:00/25:57,9368) [kworker/u16:0-events_power_efficient]
(root,0,0,00:00:00/24:56,9651) [kworker/6:2-dio/md2]
(root,0,0,00:00:00/20:56,10764) [kworker/5:0-events]
(root,0,0,00:00:00/16:56,11854) [kworker/5:1-md]
(root,0,0,00:00:00/15:56,12126) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/14:56,12401) [kworker/2:0-events]
(root,0,0,00:00:00/14:56,12402) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/12:56,12953) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/12:56,12954) [kworker/3:3-events]
(root,0,0,00:00:00/10:57,13491) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/10:56,13495) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/10:56,13496) [kworker/4:1-events]
(root,0,0,00:00:00/10:16,13704) [kworker/1:2-events]
(root,0,0,00:00:00/07:56,14316) [kworker/0:0-md]
(root,0,0,00:00:00/07:15,14526) [kworker/6:1-dio/md2]
(root,0,0,00:00:00/06:56,14591) [kworker/7:0-cgroup_destroy]
(root,0,0,00:00:00/06:56,14592) [kworker/7:3-events]
(root,0,0,00:00:00/04:56,15134) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/04:56,15135) [kworker/2:3-events]
(root,0,0,00:00:00/04:37,15275) [kworker/1:0-events]
(root,0,0,00:00:00/03:56,15407) [kworker/4:2-events]
(root,0,0,00:00:00/03:19,15606) [kworker/u16:1-events_unbound]
(root,0,0,00:00:00/01:56,15952) [kworker/1:3-cgroup_destroy]
(root,0,0,00:00:00/01:32,16120) [kworker/6:0-md]
(root,0,0,00:00:00/01:08,16186) [kworker/6:3-dio/md2]
(root,0,0,00:00:00/01:08,16187) [kworker/6:4-dio/md2]
(root,0,0,00:00:00/01:08,16188) [kworker/6:5-dio/md2]
(root,0,0,00:00:00/01:08,16189) [kworker/6:6]
(root,14792,7944,00:00:00/00:03,16479) sshd: unknown [priv]
(sshd,13808,5024,00:00:00/00:03,16480) sshd: unknown [net]
(root,7188,3196,00:00:00/00:00,16603) /bin/bash /usr/bin/check_mk_agent
(root,7632,2696,00:00:00/00:00,16629) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,996,00:00:00/00:00,16630) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,361880,31788,00:00:09/3-00:55:42,19378) pvedaemon worker
(root,361884,31656,00:00:09/2-20:20:34,29584) pvedaemon worker
(postfix,43844,7708,00:00:00/01:07:13,30704) pickup -l -t unix -u -c

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-05-04 22:42

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c422f4d5e71

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,7436,00:27:36/281-07:57:43,1) /sbin/init
(root,0,0,00:00:17/281-07:57:43,2) [kthreadd]
(root,0,0,00:00:00/281-07:57:43,3) [rcu_gp]
(root,0,0,00:00:00/281-07:57:43,4) [rcu_par_gp]
(root,0,0,00:00:00/281-07:57:43,6) [kworker/0:0H]
(root,0,0,00:00:00/281-07:57:43,9) [mm_percpu_wq]
(root,0,0,00:05:54/281-07:57:43,10) [ksoftirqd/0]
(root,0,0,00:57:18/281-07:57:43,11) [rcu_sched]
(root,0,0,00:01:05/281-07:57:43,12) [migration/0]
(root,0,0,00:00:00/281-07:57:43,13) [idle_inject/0]
(root,0,0,00:00:00/281-07:57:43,14) [cpuhp/0]
(root,0,0,00:00:00/281-07:57:43,15) [cpuhp/1]
(root,0,0,00:00:00/281-07:57:43,16) [idle_inject/1]
(root,0,0,00:01:04/281-07:57:43,17) [migration/1]
(root,0,0,00:04:30/281-07:57:43,18) [ksoftirqd/1]
(root,0,0,00:00:00/281-07:57:43,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/281-07:57:43,21) [cpuhp/2]
(root,0,0,00:00:00/281-07:57:43,22) [idle_inject/2]
(root,0,0,00:01:03/281-07:57:43,23) [migration/2]
(root,0,0,00:03:27/281-07:57:43,24) [ksoftirqd/2]
(root,0,0,00:00:00/281-07:57:43,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/281-07:57:43,27) [cpuhp/3]
(root,0,0,00:00:00/281-07:57:43,28) [idle_inject/3]
(root,0,0,00:01:29/281-07:57:43,29) [migration/3]
(root,0,0,00:02:44/281-07:57:43,30) [ksoftirqd/3]
(root,0,0,00:00:00/281-07:57:43,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/281-07:57:43,33) [cpuhp/4]
(root,0,0,00:00:00/281-07:57:43,34) [idle_inject/4]
(root,0,0,00:01:01/281-07:57:43,35) [migration/4]
(root,0,0,00:02:26/281-07:57:43,36) [ksoftirqd/4]
(root,0,0,00:00:00/281-07:57:43,38) [kworker/4:0H]
(root,0,0,00:00:00/281-07:57:43,39) [cpuhp/5]
(root,0,0,00:00:00/281-07:57:43,40) [idle_inject/5]
(root,0,0,00:01:05/281-07:57:43,41) [migration/5]
(root,0,0,00:40:01/281-07:57:43,42) [ksoftirqd/5]
(root,0,0,00:00:00/281-07:57:43,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/281-07:57:43,45) [cpuhp/6]
(root,0,0,00:00:00/281-07:57:43,46) [idle_inject/6]
(root,0,0,00:01:00/281-07:57:43,47) [migration/6]
(root,0,0,00:15:24/281-07:57:43,48) [ksoftirqd/6]
(root,0,0,00:00:00/281-07:57:43,50) [kworker/6:0H]
(root,0,0,00:00:00/281-07:57:43,51) [cpuhp/7]
(root,0,0,00:00:00/281-07:57:43,52) [idle_inject/7]
(root,0,0,00:01:05/281-07:57:43,53) [migration/7]
(root,0,0,00:01:25/281-07:57:43,54) [ksoftirqd/7]
(root,0,0,00:00:00/281-07:57:43,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/281-07:57:43,57) [kdevtmpfs]
(root,0,0,00:00:00/281-07:57:43,58) [netns]
(root,0,0,00:00:00/281-07:57:43,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/281-07:57:43,60) [kauditd]
(root,0,0,00:00:08/281-07:57:43,62) [khungtaskd]
(root,0,0,00:00:00/281-07:57:43,63) [oom_reaper]
(root,0,0,00:00:00/281-07:57:43,64) [writeback]
(root,0,0,00:00:00/281-07:57:43,65) [kcompactd0]
(root,0,0,00:00:00/281-07:57:43,66) [ksmd]
(root,0,0,00:01:57/281-07:57:43,67) [khugepaged]
(root,0,0,00:00:00/281-07:57:43,113) [kintegrityd]
(root,0,0,00:00:00/281-07:57:43,114) [kblockd]
(root,0,0,00:00:00/281-07:57:43,115) [blkcg_punt_bio]
(root,0,0,00:00:00/281-07:57:43,116) [tpm_dev_wq]
(root,0,0,00:00:00/281-07:57:43,117) [ata_sff]
(root,0,0,00:00:00/281-07:57:43,118) [md]
(root,0,0,00:00:00/281-07:57:43,119) [edac-poller]
(root,0,0,00:00:00/281-07:57:43,120) [devfreq_wq]
(root,0,0,00:00:00/281-07:57:43,121) [watchdogd]
(root,0,0,00:18:19/281-07:57:43,126) [kswapd0]
(root,0,0,00:00:00/281-07:57:43,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/281-07:57:43,129) [kthrotld]
(root,0,0,00:00:00/281-07:57:43,130) [acpi_thermal_pm]
(root,0,0,00:00:00/281-07:57:43,131) [nvme-wq]
(root,0,0,00:00:00/281-07:57:43,132) [nvme-reset-wq]
(root,0,0,00:00:00/281-07:57:43,133) [nvme-delete-wq]
(root,0,0,00:00:00/281-07:57:43,136) [ipv6_addrconf]
(root,0,0,00:00:00/281-07:57:43,145) [kstrp]
(root,0,0,00:00:00/281-07:57:43,146) [kworker/u17:0]
(root,0,0,00:00:00/281-07:57:43,161) [charger_manager]
(root,0,0,00:00:00/281-07:57:42,207) [scsi_eh_0]
(root,0,0,00:00:00/281-07:57:42,208) [scsi_tmf_0]
(root,0,0,00:00:00/281-07:57:42,209) [scsi_eh_1]
(root,0,0,00:00:00/281-07:57:42,210) [scsi_tmf_1]
(root,0,0,00:00:00/281-07:57:42,211) [scsi_eh_2]
(root,0,0,00:00:00/281-07:57:42,212) [scsi_tmf_2]
(root,0,0,00:00:00/281-07:57:42,213) [scsi_eh_3]
(root,0,0,00:00:00/281-07:57:42,214) [scsi_tmf_3]
(root,0,0,00:00:00/281-07:57:42,215) [scsi_eh_4]
(root,0,0,00:00:00/281-07:57:42,216) [scsi_tmf_4]
(root,0,0,00:00:00/281-07:57:42,217) [scsi_eh_5]
(root,0,0,00:00:00/281-07:57:42,218) [scsi_tmf_5]
(root,0,0,00:09:15/281-07:57:42,224) [kworker/1:1H-kblockd]
(root,0,0,00:07:31/281-07:57:42,225) [kworker/5:1H-kblockd]
(root,0,0,00:09:48/281-07:57:42,236) [kworker/0:1H-kblockd]
(root,0,0,00:07:44/281-07:57:42,237) [kworker/4:1H-kblockd]
(root,0,0,02:08:50/281-07:57:42,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/281-07:57:41,250) [raid5wq]
(root,0,0,00:10:08/281-07:57:36,309) [kworker/7:1H-kblockd]
(root,0,0,00:07:40/281-07:57:21,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:56/281-07:57:21,452) [md0_raid1]
(root,0,0,00:00:03/281-07:57:21,456) [md1_raid1]
(root,0,0,01:50:03/281-07:57:21,460) [md2_raid1]
(root,0,0,00:17:24/281-07:57:21,476) [jbd2/md2-8]
(root,0,0,00:00:00/281-07:57:21,477) [ext4-rsv-conver]
(root,0,0,00:07:59/281-07:57:21,490) [kworker/3:1H-kblockd]
(root,217040,108680,01:49:25/281-07:57:21,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/281-07:57:20,543) [rpciod]
(root,0,0,00:00:00/281-07:57:20,544) [xprtiod]
(root,0,0,00:00:00/281-07:57:20,547) [spl_system_task]
(root,0,0,00:00:00/281-07:57:20,548) [spl_delay_taskq]
(root,0,0,00:00:00/281-07:57:20,549) [spl_dynamic_tas]
(root,0,0,00:00:00/281-07:57:20,550) [spl_kmem_cache]
(root,22980,4548,00:30:41/281-07:57:20,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/281-07:57:20,560) [zvol]
(root,0,0,00:00:00/281-07:57:20,563) [arc_prune]
(root,0,0,00:07:08/281-07:57:20,564) [arc_evict]
(root,0,0,00:06:39/281-07:57:20,565) [arc_reap]
(root,0,0,00:00:00/281-07:57:20,567) [dbu_evict]
(root,0,0,00:06:26/281-07:57:20,568) [dbuf_evict]
(root,0,0,00:00:00/281-07:57:20,640) [z_vdev_file]
(root,0,0,00:03:21/281-07:57:20,642) [l2arc_feed]
(root,0,0,00:00:00/281-07:57:20,679) [cryptd]
(root,4816,2360,00:00:09/281-07:57:20,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/281-07:57:20,719) [jbd2/md1-8]
(root,0,0,00:00:00/281-07:57:20,720) [ext4-rsv-conver]
(_rpc,7564,4184,00:00:37/281-07:57:20,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,4896,00:00:22/281-07:57:20,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:54:59/281-07:57:20,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:09:52/281-07:57:20,787) /usr/sbin/watchdog-mux
(messagebus,9524,4400,00:22:34/281-07:57:20,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,3772,00:42:05/281-07:57:20,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,4520,00:02:33/281-07:57:20,792) /lib/systemd/systemd-logind
(root,12244,5128,00:00:07/281-07:57:20,795) /usr/sbin/smartd -n
(root,164148,3572,00:00:00/281-07:57:20,798) /usr/sbin/zed -F
(root,224732,1980,00:00:28/281-07:57:20,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1020,00:00:00/281-07:57:20,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1896,00:00:07/281-07:57:20,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1848,00:00:00/281-07:57:19,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:09:25/281-07:57:19,969) bpfilter_umh
(root,13808,5772,00:17:03/281-07:57:19,983) /usr/sbin/sshd -D
(root,5940,1436,00:00:00/281-07:57:19,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,796380,3884,01:05:50/281-07:57:19,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,821788,61368,05:00:07/281-07:57:19,1104) /usr/bin/pmxcfs
(root,9600,2000,00:01:16/281-07:57:19,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4040,00:00:55/281-07:57:19,1203) /usr/lib/postfix/sbin/master -w
(postfix,43960,6780,00:00:11/281-07:57:19,1205) qmgr -l -t unix -u
(root,8832,2348,00:00:29/281-07:57:18,1218) /usr/sbin/cron -f
(root,304368,31220,10:35:00/281-07:57:18,1224) pve-firewall
(root,303056,38544,1-00:47:52/281-07:57:18,1226) pvestatd
(root,353788,4052,00:03:16/281-07:57:17,1249) pvedaemon
(root,336348,8620,00:23:09/281-07:57:17,1258) pve-ha-crm
(www-data,355164,145220,00:07:04/281-07:57:17,1259) pveproxy
(www-data,68852,58060,00:04:32/281-07:57:16,1265) spiceproxy
(root,335964,32308,00:38:08/281-07:57:16,1267) pve-ha-lrm
(root,5449912,3332864,13-13:32:02/281-07:57:15,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:20/281-07:57:15,1285) [kvm-nx-lpage-re]
(root,0,0,1-00:06:38/281-07:57:15,1305) [vhost-1281]
(root,0,0,20:46:30/281-07:57:15,1324) [vhost-1281]
(root,0,0,01:56:30/281-07:57:15,1329) [kvm-pit/1281]
(root,14556792,8600880,62-21:13:28/281-07:57:12,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:10:03/281-07:57:12,1348) [kvm-nx-lpage-re]
(root,0,0,01:43:57/281-07:57:11,1367) [vhost-1344]
(root,0,0,02:16:39/281-07:57:11,1372) [kvm-pit/1344]
(root,0,0,00:00:00/281-07:57:08,1374) [dio/md2]
(root,3258760,2102440,66-17:56:00/281-07:57:08,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:31/281-07:57:08,1415) [kvm-nx-lpage-re]
(root,0,0,11:45:23/281-07:57:07,1434) [vhost-1411]
(root,0,0,00:00:00/281-07:57:07,1437) [kvm-pit/1411]
(root,0,0,00:00:00/281-07:57:06,1455) [ib-comp-wq]
(root,0,0,00:00:00/281-07:57:06,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/281-07:57:06,1457) [ib_mcast]
(root,0,0,00:00:00/281-07:57:06,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/281-07:57:06,1459) [rdma_cm]
(root,0,0,00:00:00/281-07:57:06,1460) [cifsiod]
(root,0,0,00:00:00/281-07:57:06,1461) [smb3decryptd]
(root,0,0,00:00:00/281-07:57:06,1462) [cifsfileinfoput]
(root,0,0,00:00:00/281-07:57:06,1463) [cifsoplockd]
(root,0,0,00:18:13/281-07:57:06,1465) [cifsd]
(root,0,0,00:21:32/281-07:57:06,1498) [cifsd]
(root,7453412,4383384,18-16:10:07/281-07:57:03,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:57/281-07:57:03,1519) [kvm-nx-lpage-re]
(root,0,0,03:35:27/281-07:57:03,1538) [vhost-1515]
(root,0,0,00:00:00/281-07:57:03,1543) [kvm-pit/1515]
(root,22701960,16938708,22-06:12:30/281-07:56:59,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:13/281-07:56:59,1561) [kvm-nx-lpage-re]
(root,0,0,01:38:41/281-07:56:59,1580) [vhost-1557]
(root,0,0,00:00:00/281-07:56:59,1585) [kvm-pit/1557]
(root,19191324,7881812,15-16:41:34/281-07:56:55,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:00/281-07:56:55,1628) [kvm-nx-lpage-re]
(root,0,0,00:04:20/281-07:56:55,1647) [vhost-1624]
(root,0,0,00:00:00/281-07:56:55,1652) [kvm-pit/1624]
(root,6233996,4591112,36-01:20:05/281-07:56:51,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:24/281-07:56:51,1669) [kvm-nx-lpage-re]
(root,0,0,02:00:05/281-07:56:51,1690) [vhost-1665]
(root,0,0,00:00:00/281-07:56:51,1693) [kvm-pit/1665]
(root,361884,28068,00:00:01/07:08:17,2175) pvedaemon worker
(www-data,76748,54924,00:00:00/01:06:31,9052) spiceproxy worker
(root,86168,2324,00:00:00/01:06:31,9053) /usr/sbin/pvefw-logger
(www-data,367500,137568,00:00:00/01:06:31,9110) pveproxy worker
(www-data,363524,133432,00:00:00/01:06:31,9113) pveproxy worker
(www-data,368060,138060,00:00:00/01:06:31,9114) pveproxy worker
(root,0,0,00:00:00/44:32,15277) [kworker/3:2-rcu_gp]
(root,0,0,00:00:00/41:32,16107) [kworker/0:2-events]
(root,0,0,00:00:00/31:41,18825) [kworker/u16:1-events_power_efficient]
(root,361884,26868,00:00:00/28:17,19819) pvedaemon worker
(root,0,0,00:00:00/24:48,20727) [kworker/1:2-events]
(root,0,0,00:00:00/21:32,21616) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/21:01,21795) [kworker/u16:2-events_unbound]
(root,0,0,00:00:00/18:53,22359) [kworker/2:2-events]
(postfix,43844,7964,00:00:00/18:29,22531) pickup -l -t unix -u -c
(root,361880,27204,00:00:00/02:10:28,22946) pvedaemon worker
(root,0,0,00:00:00/15:32,23268) [kworker/7:2-events]
(root,0,0,00:00:00/14:32,23543) [kworker/6:1-events]
(root,0,0,00:00:00/12:32,24089) [kworker/5:1-events]
(root,0,0,00:00:00/12:32,24090) [kworker/5:3-cgroup_destroy]
(root,0,0,00:00:00/11:32,24363) [kworker/4:1-events]
(root,0,0,00:00:00/10:32,24637) [kworker/0:1-events]
(root,0,0,00:00:00/09:54,24827) [kworker/7:0-events]
(root,0,0,00:00:00/09:49,24851) [kworker/1:1-events]
(root,0,0,00:00:00/06:23,25834) [kworker/3:1-mm_percpu_wq]
(root,0,0,00:00:00/06:21,25861) [kworker/2:1]
(root,0,0,00:00:00/05:36,26008) [kworker/6:27-dio/md2]
(root,0,0,00:00:00/02:32,26867) [kworker/7:1-cgroup_destroy]
(root,0,0,00:00:00/01:32,27143) [kworker/4:2-cgroup_destroy]
(root,0,0,00:00:00/01:32,27144) [kworker/4:3-events]
(root,0,0,00:00:00/00:32,27408) [kworker/5:0-events]
(root,0,0,00:00:00/00:32,27422) [kworker/5:2]
(root,0,0,00:00:00/00:28,27513) [kworker/u16:0]
(root,7188,3260,00:00:00/00:00,27771) /bin/bash /usr/bin/check_mk_agent
(root,7632,2752,00:00:00/00:00,27797) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,988,00:00:00/00:00,27798) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-04-12 23:06

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42d28e48f7

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,7436,00:27:32/280-21:01:51,1) /sbin/init
(root,0,0,00:00:17/280-21:01:51,2) [kthreadd]
(root,0,0,00:00:00/280-21:01:51,3) [rcu_gp]
(root,0,0,00:00:00/280-21:01:51,4) [rcu_par_gp]
(root,0,0,00:00:00/280-21:01:51,6) [kworker/0:0H]
(root,0,0,00:00:00/280-21:01:51,9) [mm_percpu_wq]
(root,0,0,00:05:53/280-21:01:51,10) [ksoftirqd/0]
(root,0,0,00:57:11/280-21:01:51,11) [rcu_sched]
(root,0,0,00:01:05/280-21:01:51,12) [migration/0]
(root,0,0,00:00:00/280-21:01:51,13) [idle_inject/0]
(root,0,0,00:00:00/280-21:01:51,14) [cpuhp/0]
(root,0,0,00:00:00/280-21:01:51,15) [cpuhp/1]
(root,0,0,00:00:00/280-21:01:51,16) [idle_inject/1]
(root,0,0,00:01:04/280-21:01:51,17) [migration/1]
(root,0,0,00:04:29/280-21:01:51,18) [ksoftirqd/1]
(root,0,0,00:00:00/280-21:01:51,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/280-21:01:51,21) [cpuhp/2]
(root,0,0,00:00:00/280-21:01:51,22) [idle_inject/2]
(root,0,0,00:01:03/280-21:01:51,23) [migration/2]
(root,0,0,00:03:27/280-21:01:51,24) [ksoftirqd/2]
(root,0,0,00:00:00/280-21:01:51,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/280-21:01:51,27) [cpuhp/3]
(root,0,0,00:00:00/280-21:01:51,28) [idle_inject/3]
(root,0,0,00:01:29/280-21:01:51,29) [migration/3]
(root,0,0,00:02:43/280-21:01:51,30) [ksoftirqd/3]
(root,0,0,00:00:00/280-21:01:51,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/280-21:01:51,33) [cpuhp/4]
(root,0,0,00:00:00/280-21:01:51,34) [idle_inject/4]
(root,0,0,00:01:01/280-21:01:51,35) [migration/4]
(root,0,0,00:02:25/280-21:01:51,36) [ksoftirqd/4]
(root,0,0,00:00:00/280-21:01:51,38) [kworker/4:0H]
(root,0,0,00:00:00/280-21:01:51,39) [cpuhp/5]
(root,0,0,00:00:00/280-21:01:51,40) [idle_inject/5]
(root,0,0,00:01:05/280-21:01:51,41) [migration/5]
(root,0,0,00:39:58/280-21:01:51,42) [ksoftirqd/5]
(root,0,0,00:00:00/280-21:01:51,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/280-21:01:51,45) [cpuhp/6]
(root,0,0,00:00:00/280-21:01:51,46) [idle_inject/6]
(root,0,0,00:01:00/280-21:01:51,47) [migration/6]
(root,0,0,00:15:22/280-21:01:51,48) [ksoftirqd/6]
(root,0,0,00:00:00/280-21:01:51,50) [kworker/6:0H]
(root,0,0,00:00:00/280-21:01:51,51) [cpuhp/7]
(root,0,0,00:00:00/280-21:01:51,52) [idle_inject/7]
(root,0,0,00:01:05/280-21:01:51,53) [migration/7]
(root,0,0,00:01:24/280-21:01:51,54) [ksoftirqd/7]
(root,0,0,00:00:00/280-21:01:51,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/280-21:01:51,57) [kdevtmpfs]
(root,0,0,00:00:00/280-21:01:51,58) [netns]
(root,0,0,00:00:00/280-21:01:51,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/280-21:01:51,60) [kauditd]
(root,0,0,00:00:08/280-21:01:51,62) [khungtaskd]
(root,0,0,00:00:00/280-21:01:51,63) [oom_reaper]
(root,0,0,00:00:00/280-21:01:51,64) [writeback]
(root,0,0,00:00:00/280-21:01:51,65) [kcompactd0]
(root,0,0,00:00:00/280-21:01:51,66) [ksmd]
(root,0,0,00:01:57/280-21:01:51,67) [khugepaged]
(root,0,0,00:00:00/280-21:01:51,113) [kintegrityd]
(root,0,0,00:00:00/280-21:01:51,114) [kblockd]
(root,0,0,00:00:00/280-21:01:51,115) [blkcg_punt_bio]
(root,0,0,00:00:00/280-21:01:51,116) [tpm_dev_wq]
(root,0,0,00:00:00/280-21:01:51,117) [ata_sff]
(root,0,0,00:00:00/280-21:01:51,118) [md]
(root,0,0,00:00:00/280-21:01:51,119) [edac-poller]
(root,0,0,00:00:00/280-21:01:51,120) [devfreq_wq]
(root,0,0,00:00:00/280-21:01:51,121) [watchdogd]
(root,0,0,00:18:19/280-21:01:51,126) [kswapd0]
(root,0,0,00:00:00/280-21:01:51,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/280-21:01:51,129) [kthrotld]
(root,0,0,00:00:00/280-21:01:51,130) [acpi_thermal_pm]
(root,0,0,00:00:00/280-21:01:51,131) [nvme-wq]
(root,0,0,00:00:00/280-21:01:51,132) [nvme-reset-wq]
(root,0,0,00:00:00/280-21:01:51,133) [nvme-delete-wq]
(root,0,0,00:00:00/280-21:01:51,136) [ipv6_addrconf]
(root,0,0,00:00:00/280-21:01:51,145) [kstrp]
(root,0,0,00:00:00/280-21:01:51,146) [kworker/u17:0]
(root,0,0,00:00:00/280-21:01:51,161) [charger_manager]
(root,0,0,00:00:00/280-21:01:50,207) [scsi_eh_0]
(root,0,0,00:00:00/280-21:01:50,208) [scsi_tmf_0]
(root,0,0,00:00:00/280-21:01:50,209) [scsi_eh_1]
(root,0,0,00:00:00/280-21:01:50,210) [scsi_tmf_1]
(root,0,0,00:00:00/280-21:01:50,211) [scsi_eh_2]
(root,0,0,00:00:00/280-21:01:50,212) [scsi_tmf_2]
(root,0,0,00:00:00/280-21:01:50,213) [scsi_eh_3]
(root,0,0,00:00:00/280-21:01:50,214) [scsi_tmf_3]
(root,0,0,00:00:00/280-21:01:50,215) [scsi_eh_4]
(root,0,0,00:00:00/280-21:01:50,216) [scsi_tmf_4]
(root,0,0,00:00:00/280-21:01:50,217) [scsi_eh_5]
(root,0,0,00:00:00/280-21:01:50,218) [scsi_tmf_5]
(root,0,0,00:09:14/280-21:01:50,224) [kworker/1:1H-kblockd]
(root,0,0,00:07:30/280-21:01:50,225) [kworker/5:1H-kblockd]
(root,0,0,00:09:47/280-21:01:50,236) [kworker/0:1H-kblockd]
(root,0,0,00:07:44/280-21:01:50,237) [kworker/4:1H-kblockd]
(root,0,0,02:08:42/280-21:01:50,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/280-21:01:49,250) [raid5wq]
(root,0,0,00:10:07/280-21:01:44,309) [kworker/7:1H-kblockd]
(root,0,0,00:07:39/280-21:01:29,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:56/280-21:01:29,452) [md0_raid1]
(root,0,0,00:00:03/280-21:01:29,456) [md1_raid1]
(root,0,0,01:49:56/280-21:01:29,460) [md2_raid1]
(root,0,0,00:17:22/280-21:01:29,476) [jbd2/md2-8]
(root,0,0,00:00:00/280-21:01:29,477) [ext4-rsv-conver]
(root,0,0,00:07:59/280-21:01:29,490) [kworker/3:1H-kblockd]
(root,139196,41836,01:49:09/280-21:01:29,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/280-21:01:28,543) [rpciod]
(root,0,0,00:00:00/280-21:01:28,544) [xprtiod]
(root,0,0,00:00:00/280-21:01:28,547) [spl_system_task]
(root,0,0,00:00:00/280-21:01:28,548) [spl_delay_taskq]
(root,0,0,00:00:00/280-21:01:28,549) [spl_dynamic_tas]
(root,0,0,00:00:00/280-21:01:28,550) [spl_kmem_cache]
(root,22980,4548,00:30:38/280-21:01:28,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/280-21:01:28,560) [zvol]
(root,0,0,00:00:00/280-21:01:28,563) [arc_prune]
(root,0,0,00:07:07/280-21:01:28,564) [arc_evict]
(root,0,0,00:06:38/280-21:01:28,565) [arc_reap]
(root,0,0,00:00:00/280-21:01:28,567) [dbu_evict]
(root,0,0,00:06:26/280-21:01:28,568) [dbuf_evict]
(root,0,0,00:00:00/04:09,610) [kworker/u16:0-events_power_efficient]
(root,0,0,00:00:00/280-21:01:28,640) [z_vdev_file]
(root,0,0,00:03:21/280-21:01:28,642) [l2arc_feed]
(root,0,0,00:00:00/280-21:01:28,679) [cryptd]
(root,4816,2360,00:00:09/280-21:01:28,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/280-21:01:28,719) [jbd2/md1-8]
(root,0,0,00:00:00/280-21:01:28,720) [ext4-rsv-conver]
(_rpc,7564,4184,00:00:37/280-21:01:28,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,4896,00:00:22/280-21:01:28,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:54:55/280-21:01:28,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:09:51/280-21:01:28,787) /usr/sbin/watchdog-mux
(messagebus,9524,4400,00:22:32/280-21:01:28,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,3772,00:41:59/280-21:01:28,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,4520,00:02:32/280-21:01:28,792) /lib/systemd/systemd-logind
(root,12244,5128,00:00:07/280-21:01:28,795) /usr/sbin/smartd -n
(root,164148,3572,00:00:00/280-21:01:28,798) /usr/sbin/zed -F
(root,224732,1980,00:00:28/280-21:01:28,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1020,00:00:00/280-21:01:28,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1896,00:00:06/280-21:01:28,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,0,0,00:00:00/03:40,816) [kworker/4:1-cgroup_destroy]
(root,0,0,00:00:00/03:40,817) [kworker/4:3-cgroup_destroy]
(root,7304,1848,00:00:00/280-21:01:27,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:09:24/280-21:01:27,969) bpfilter_umh
(root,0,0,00:00:00/02:59,971) [kworker/1:2-mm_percpu_wq]
(root,13808,5772,00:17:00/280-21:01:27,983) /usr/sbin/sshd -D
(root,5940,1436,00:00:00/280-21:01:27,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,796380,3884,01:05:47/280-21:01:27,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,821788,62388,04:59:38/280-21:01:27,1104) /usr/bin/pmxcfs
(root,0,0,00:00:00/02:40,1134) [kworker/0:0-events]
(root,0,0,00:00:00/02:40,1135) [kworker/0:3-events]
(root,9600,2000,00:01:16/280-21:01:27,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4040,00:00:55/280-21:01:27,1203) /usr/lib/postfix/sbin/master -w
(postfix,43960,6780,00:00:11/280-21:01:27,1205) qmgr -l -t unix -u
(root,8832,2348,00:00:29/280-21:01:26,1218) /usr/sbin/cron -f
(root,304368,31220,10:33:56/280-21:01:26,1224) pve-firewall
(root,303056,38544,1-00:45:38/280-21:01:26,1226) pvestatd
(root,353788,4028,00:03:16/280-21:01:25,1249) pvedaemon
(root,336348,8620,00:23:07/280-21:01:25,1258) pve-ha-crm
(www-data,355192,145296,00:07:03/280-21:01:25,1259) pveproxy
(www-data,68856,57956,00:04:31/280-21:01:24,1265) spiceproxy
(root,335964,32308,00:38:04/280-21:01:24,1267) pve-ha-lrm
(root,5449912,3332340,13-12:56:55/280-21:01:23,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:20/280-21:01:23,1285) [kvm-nx-lpage-re]
(root,0,0,1-00:04:00/280-21:01:23,1305) [vhost-1281]
(root,0,0,20:44:21/280-21:01:23,1324) [vhost-1281]
(root,0,0,01:56:18/280-21:01:23,1329) [kvm-pit/1281]
(root,14476608,8606212,62-20:23:05/280-21:01:20,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:10:02/280-21:01:20,1348) [kvm-nx-lpage-re]
(root,0,0,01:43:54/280-21:01:19,1367) [vhost-1344]
(root,0,0,02:16:25/280-21:01:19,1372) [kvm-pit/1344]
(root,0,0,00:00:00/280-21:01:16,1374) [dio/md2]
(root,3258760,2102180,66-15:08:54/280-21:01:16,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:31/280-21:01:16,1415) [kvm-nx-lpage-re]
(root,0,0,11:44:09/280-21:01:15,1434) [vhost-1411]
(root,0,0,00:00:00/280-21:01:15,1437) [kvm-pit/1411]
(root,0,0,00:00:00/280-21:01:14,1455) [ib-comp-wq]
(root,0,0,00:00:00/280-21:01:14,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/280-21:01:14,1457) [ib_mcast]
(root,0,0,00:00:00/280-21:01:14,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/280-21:01:14,1459) [rdma_cm]
(root,0,0,00:00:00/280-21:01:14,1460) [cifsiod]
(root,0,0,00:00:00/280-21:01:14,1461) [smb3decryptd]
(root,0,0,00:00:00/280-21:01:14,1462) [cifsfileinfoput]
(root,0,0,00:00:00/280-21:01:14,1463) [cifsoplockd]
(root,0,0,00:18:11/280-21:01:14,1465) [cifsd]
(root,0,0,00:21:31/280-21:01:14,1498) [cifsd]
(root,7453412,4383644,18-15:25:03/280-21:01:11,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:57/280-21:01:11,1519) [kvm-nx-lpage-re]
(root,0,0,03:35:03/280-21:01:11,1538) [vhost-1515]
(root,0,0,00:00:00/280-21:01:11,1543) [kvm-pit/1515]
(postfix,43948,7912,00:00:00/01:28,1550) cleanup -z -t unix -u -c
(postfix,43856,7908,00:00:00/01:28,1552) trivial-rewrite -n rewrite -t unix -u -c
(postfix,43564,8880,00:00:00/01:28,1553) local -t unix
(root,22701960,16937528,22-05:13:30/280-21:01:07,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(postfix,44132,7980,00:00:00/01:27,1560) smtp -t unix -u -c
(root,0,0,00:03:12/280-21:01:07,1561) [kvm-nx-lpage-re]
(root,0,0,01:38:26/280-21:01:07,1580) [vhost-1557]
(root,0,0,00:00:00/280-21:01:07,1585) [kvm-pit/1557]
(root,19191324,7880900,15-16:02:03/280-21:01:03,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:00/280-21:01:03,1628) [kvm-nx-lpage-re]
(root,0,0,00:04:20/280-21:01:03,1647) [vhost-1624]
(root,0,0,00:00:00/280-21:01:03,1652) [kvm-pit/1624]
(root,6233996,4591112,35-23:53:30/280-21:00:59,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:03:24/280-21:00:59,1669) [kvm-nx-lpage-re]
(root,14736,7680,00:00:00/00:59,1681) sshd: root [priv]
(sshd,13808,5040,00:00:00/00:59,1682) sshd: root [net]
(root,0,0,01:59:50/280-21:00:59,1690) [vhost-1665]
(root,0,0,00:00:00/280-21:00:59,1693) [kvm-pit/1665]
(root,0,0,00:00:00/00:40,1830) [kworker/5:1-events]
(root,0,0,00:00:00/00:40,1834) [kworker/5:2-events]
(root,14508,7712,00:00:00/00:03,1945) sshd: root [priv]
(sshd,13808,4980,00:00:00/00:03,1946) sshd: root [net]
(root,14508,7708,00:00:00/00:02,1947) sshd: root [priv]
(sshd,13808,4912,00:00:00/00:02,1948) sshd: root [net]
(root,14792,8056,00:00:00/00:01,1967) sshd: unknown [priv]
(sshd,13808,4928,00:00:00/00:01,1970) sshd: unknown [net]
(root,7188,3272,00:00:00/00:00,2088) /bin/bash /usr/bin/check_mk_agent
(root,7632,2700,00:00:00/00:00,2114) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,988,00:00:00/00:00,2115) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/01:44:40,4715) [kworker/5:3-events]
(root,0,0,00:00:00/01:07:40,14990) [kworker/0:2-cgroup_destroy]
(root,361880,31796,00:00:08/2-08:36:02,15226) pvedaemon worker
(root,361880,31396,00:00:09/2-00:28:03,16382) pvedaemon worker
(postfix,43844,7700,00:00:00/59:15,17259) pickup -l -t unix -u -c
(www-data,77020,54848,00:00:00/14:10:39,17371) spiceproxy worker
(root,86168,2256,00:00:02/14:10:39,17373) /usr/sbin/pvefw-logger
(www-data,363420,133280,00:00:03/14:10:39,17377) pveproxy worker
(www-data,363572,133552,00:00:03/14:10:39,17378) pveproxy worker
(www-data,363424,133264,00:00:03/14:10:39,17379) pveproxy worker
(root,361880,31344,00:00:08/2-02:00:18,23376) pvedaemon worker
(root,0,0,00:00:00/35:40,23949) [kworker/7:2-cgroup_destroy]
(root,0,0,00:00:00/27:40,26238) [kworker/4:2-events]
(root,0,0,00:00:00/21:40,28002) [kworker/0:1-events]
(root,0,0,00:00:00/18:32,28899) [kworker/1:1-events]
(root,0,0,00:00:00/16:44,29342) [kworker/u16:2-events_unbound]
(root,0,0,00:00:00/14:40,30044) [kworker/2:2-events]
(root,0,0,00:00:00/11:41,30832) [kworker/4:0-events]
(root,0,0,00:00:00/10:40,31202) [kworker/5:0-events]
(root,0,0,00:00:00/10:24,31250) [kworker/1:0-rcu_gp]
(root,0,0,00:00:00/10:21,31255) [kworker/6:4-events]
(root,0,0,00:00:00/10:21,31256) [kworker/6:5-dio/md2]
(root,0,0,00:00:00/09:58,31352) [kworker/3:2-events]
(root,0,0,00:00:00/09:11,31586) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/07:40,32082) [kworker/7:0-events]
(root,0,0,00:00:00/07:40,32083) [kworker/7:3-events]
(root,0,0,00:00:00/06:40,32377) [kworker/3:3]
(root,0,0,00:00:00/05:40,32612) [kworker/2:0-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-04-12 12:10

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c429f15117b

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,7376,00:24:05/246-15:49:36,1) /sbin/init
(root,0,0,00:00:15/246-15:49:36,2) [kthreadd]
(root,0,0,00:00:00/246-15:49:36,3) [rcu_gp]
(root,0,0,00:00:00/246-15:49:36,4) [rcu_par_gp]
(root,0,0,00:00:00/246-15:49:36,6) [kworker/0:0H]
(root,0,0,00:00:00/246-15:49:36,9) [mm_percpu_wq]
(root,0,0,00:05:06/246-15:49:36,10) [ksoftirqd/0]
(root,0,0,00:50:37/246-15:49:36,11) [rcu_sched]
(root,0,0,00:00:57/246-15:49:36,12) [migration/0]
(root,0,0,00:00:00/246-15:49:36,13) [idle_inject/0]
(root,0,0,00:00:00/246-15:49:36,14) [cpuhp/0]
(root,0,0,00:00:00/246-15:49:36,15) [cpuhp/1]
(root,0,0,00:00:00/246-15:49:36,16) [idle_inject/1]
(root,0,0,00:00:56/246-15:49:36,17) [migration/1]
(root,0,0,00:03:55/246-15:49:36,18) [ksoftirqd/1]
(root,0,0,00:00:00/246-15:49:36,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/246-15:49:36,21) [cpuhp/2]
(root,0,0,00:00:00/246-15:49:36,22) [idle_inject/2]
(root,0,0,00:00:56/246-15:49:36,23) [migration/2]
(root,0,0,00:03:01/246-15:49:36,24) [ksoftirqd/2]
(root,0,0,00:00:00/246-15:49:36,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/246-15:49:36,27) [cpuhp/3]
(root,0,0,00:00:00/246-15:49:36,28) [idle_inject/3]
(root,0,0,00:01:18/246-15:49:36,29) [migration/3]
(root,0,0,00:02:23/246-15:49:36,30) [ksoftirqd/3]
(root,0,0,00:00:00/246-15:49:36,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/246-15:49:36,33) [cpuhp/4]
(root,0,0,00:00:00/246-15:49:36,34) [idle_inject/4]
(root,0,0,00:00:54/246-15:49:36,35) [migration/4]
(root,0,0,00:02:08/246-15:49:36,36) [ksoftirqd/4]
(root,0,0,00:00:00/246-15:49:36,38) [kworker/4:0H]
(root,0,0,00:00:00/246-15:49:36,39) [cpuhp/5]
(root,0,0,00:00:00/246-15:49:36,40) [idle_inject/5]
(root,0,0,00:00:57/246-15:49:36,41) [migration/5]
(root,0,0,00:34:51/246-15:49:36,42) [ksoftirqd/5]
(root,0,0,00:00:00/246-15:49:36,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/246-15:49:36,45) [cpuhp/6]
(root,0,0,00:00:00/246-15:49:36,46) [idle_inject/6]
(root,0,0,00:00:53/246-15:49:36,47) [migration/6]
(root,0,0,00:12:52/246-15:49:36,48) [ksoftirqd/6]
(root,0,0,00:00:00/246-15:49:36,50) [kworker/6:0H]
(root,0,0,00:00:00/246-15:49:36,51) [cpuhp/7]
(root,0,0,00:00:00/246-15:49:36,52) [idle_inject/7]
(root,0,0,00:00:57/246-15:49:36,53) [migration/7]
(root,0,0,00:01:15/246-15:49:36,54) [ksoftirqd/7]
(root,0,0,00:00:00/246-15:49:36,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/246-15:49:36,57) [kdevtmpfs]
(root,0,0,00:00:00/246-15:49:36,58) [netns]
(root,0,0,00:00:00/246-15:49:36,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/246-15:49:36,60) [kauditd]
(root,0,0,00:00:07/246-15:49:36,62) [khungtaskd]
(root,0,0,00:00:00/246-15:49:36,63) [oom_reaper]
(root,0,0,00:00:00/246-15:49:36,64) [writeback]
(root,0,0,00:00:00/246-15:49:36,65) [kcompactd0]
(root,0,0,00:00:00/246-15:49:36,66) [ksmd]
(root,0,0,00:01:52/246-15:49:36,67) [khugepaged]
(root,0,0,00:00:00/246-15:49:36,113) [kintegrityd]
(root,0,0,00:00:00/246-15:49:36,114) [kblockd]
(root,0,0,00:00:00/246-15:49:36,115) [blkcg_punt_bio]
(root,0,0,00:00:00/246-15:49:36,116) [tpm_dev_wq]
(root,0,0,00:00:00/246-15:49:36,117) [ata_sff]
(root,0,0,00:00:00/246-15:49:36,118) [md]
(root,0,0,00:00:00/246-15:49:36,119) [edac-poller]
(root,0,0,00:00:00/246-15:49:36,120) [devfreq_wq]
(root,0,0,00:00:00/246-15:49:36,121) [watchdogd]
(root,0,0,00:15:24/246-15:49:36,126) [kswapd0]
(root,0,0,00:00:00/246-15:49:36,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/246-15:49:36,129) [kthrotld]
(root,0,0,00:00:00/246-15:49:36,130) [acpi_thermal_pm]
(root,0,0,00:00:00/246-15:49:36,131) [nvme-wq]
(root,0,0,00:00:00/246-15:49:36,132) [nvme-reset-wq]
(root,0,0,00:00:00/246-15:49:36,133) [nvme-delete-wq]
(root,0,0,00:00:00/246-15:49:36,136) [ipv6_addrconf]
(root,0,0,00:00:00/246-15:49:36,145) [kstrp]
(root,0,0,00:00:00/246-15:49:36,146) [kworker/u17:0]
(root,0,0,00:00:00/246-15:49:36,161) [charger_manager]
(root,0,0,00:00:00/246-15:49:35,207) [scsi_eh_0]
(root,0,0,00:00:00/246-15:49:35,208) [scsi_tmf_0]
(root,0,0,00:00:00/246-15:49:35,209) [scsi_eh_1]
(root,0,0,00:00:00/246-15:49:35,210) [scsi_tmf_1]
(root,0,0,00:00:00/246-15:49:35,211) [scsi_eh_2]
(root,0,0,00:00:00/246-15:49:35,212) [scsi_tmf_2]
(root,0,0,00:00:00/246-15:49:35,213) [scsi_eh_3]
(root,0,0,00:00:00/246-15:49:35,214) [scsi_tmf_3]
(root,0,0,00:00:00/246-15:49:35,215) [scsi_eh_4]
(root,0,0,00:00:00/246-15:49:35,216) [scsi_tmf_4]
(root,0,0,00:00:00/246-15:49:35,217) [scsi_eh_5]
(root,0,0,00:00:00/246-15:49:35,218) [scsi_tmf_5]
(root,0,0,00:07:38/246-15:49:35,224) [kworker/1:1H-kblockd]
(root,0,0,00:06:06/246-15:49:35,225) [kworker/5:1H-kblockd]
(root,0,0,00:08:07/246-15:49:35,236) [kworker/0:1H-kblockd]
(root,0,0,00:06:17/246-15:49:35,237) [kworker/4:1H-kblockd]
(root,0,0,01:41:04/246-15:49:35,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/246-15:49:34,250) [raid5wq]
(root,0,0,00:08:23/246-15:49:29,309) [kworker/7:1H-kblockd]
(root,0,0,00:06:14/246-15:49:14,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:50/246-15:49:14,452) [md0_raid1]
(root,0,0,00:00:02/246-15:49:14,456) [md1_raid1]
(root,0,0,01:40:08/246-15:49:14,460) [md2_raid1]
(root,0,0,00:14:30/246-15:49:14,476) [jbd2/md2-8]
(root,0,0,00:00:00/246-15:49:14,477) [ext4-rsv-conver]
(root,0,0,00:06:31/246-15:49:14,490) [kworker/3:1H-kblockd]
(root,280472,163076,01:33:29/246-15:49:14,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/246-15:49:13,543) [rpciod]
(root,0,0,00:00:00/246-15:49:13,544) [xprtiod]
(root,0,0,00:00:00/246-15:49:13,547) [spl_system_task]
(root,0,0,00:00:00/246-15:49:13,548) [spl_delay_taskq]
(root,0,0,00:00:00/246-15:49:13,549) [spl_dynamic_tas]
(root,0,0,00:00:00/246-15:49:13,550) [spl_kmem_cache]
(root,22980,4700,00:26:50/246-15:49:13,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/246-15:49:13,560) [zvol]
(root,0,0,00:00:00/246-15:49:13,563) [arc_prune]
(root,0,0,00:06:17/246-15:49:13,564) [arc_evict]
(root,0,0,00:05:52/246-15:49:13,565) [arc_reap]
(root,0,0,00:00:00/246-15:49:13,567) [dbu_evict]
(root,0,0,00:05:41/246-15:49:13,568) [dbuf_evict]
(root,0,0,00:00:00/246-15:49:13,640) [z_vdev_file]
(root,0,0,00:02:57/246-15:49:13,642) [l2arc_feed]
(root,0,0,00:00:00/246-15:49:13,679) [cryptd]
(root,4816,2396,00:00:08/246-15:49:13,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/246-15:49:13,719) [jbd2/md1-8]
(root,0,0,00:00:00/246-15:49:13,720) [ext4-rsv-conver]
(_rpc,7396,4052,00:00:32/246-15:49:13,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,5220,00:00:20/246-15:49:13,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:45:45/246-15:49:13,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:08:42/246-15:49:13,787) /usr/sbin/watchdog-mux
(messagebus,9524,4268,00:19:35/246-15:49:13,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,3804,00:35:54/246-15:49:13,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,4796,00:02:14/246-15:49:13,792) /lib/systemd/systemd-logind
(root,12244,5060,00:00:06/246-15:49:13,795) /usr/sbin/smartd -n
(root,164148,3716,00:00:00/246-15:49:13,798) /usr/sbin/zed -F
(root,224732,1980,00:00:25/246-15:49:13,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1036,00:00:00/246-15:49:13,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1300,00:00:06/246-15:49:13,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1996,00:00:00/246-15:49:12,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:08:15/246-15:49:12,969) bpfilter_umh
(root,13808,6028,00:14:48/246-15:49:12,983) /usr/sbin/sshd -D
(root,5940,1436,00:00:00/246-15:49:12,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,361884,30296,00:00:08/2-15:32:44,1043) pvedaemon worker
(root,796380,3872,01:01:11/246-15:49:12,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,821788,63460,04:24:09/246-15:49:12,1104) /usr/bin/pmxcfs
(root,9600,2004,00:01:07/246-15:49:12,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4108,00:00:48/246-15:49:12,1203) /usr/lib/postfix/sbin/master -w
(postfix,43960,7328,00:00:09/246-15:49:12,1205) qmgr -l -t unix -u
(root,8832,2380,00:00:25/246-15:49:11,1218) /usr/sbin/cron -f
(root,304368,31312,09:15:05/246-15:49:11,1224) pve-firewall
(root,303056,38648,21:46:32/246-15:49:11,1226) pvestatd
(root,353788,3932,00:02:52/246-15:49:10,1249) pvedaemon
(root,336348,8732,00:20:17/246-15:49:10,1258) pve-ha-crm
(www-data,355200,142156,00:06:12/246-15:49:10,1259) pveproxy
(www-data,68908,57592,00:03:58/246-15:49:09,1265) spiceproxy
(root,335964,32400,00:33:24/246-15:49:09,1267) pve-ha-lrm
(root,5449912,3681856,11-16:37:18/246-15:49:08,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:18/246-15:49:08,1285) [kvm-nx-lpage-re]
(root,0,0,20:42:26/246-15:49:08,1305) [vhost-1281]
(root,0,0,17:51:31/246-15:49:08,1324) [vhost-1281]
(root,0,0,01:41:58/246-15:49:08,1329) [kvm-pit/1281]
(root,14352532,8584560,56-21:04:38/246-15:49:05,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:08:46/246-15:49:05,1348) [kvm-nx-lpage-re]
(root,0,0,01:32:45/246-15:49:04,1367) [vhost-1344]
(root,0,0,01:59:55/246-15:49:04,1372) [kvm-pit/1344]
(root,0,0,00:00:00/246-15:49:01,1374) [dio/md2]
(root,3258760,2099336,57-20:08:56/246-15:49:01,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:27/246-15:49:01,1415) [kvm-nx-lpage-re]
(root,0,0,10:13:47/246-15:49:00,1434) [vhost-1411]
(root,0,0,00:00:00/246-15:49:00,1437) [kvm-pit/1411]
(root,0,0,00:00:00/246-15:48:59,1455) [ib-comp-wq]
(root,0,0,00:00:00/246-15:48:59,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/246-15:48:59,1457) [ib_mcast]
(root,0,0,00:00:00/246-15:48:59,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/246-15:48:59,1459) [rdma_cm]
(root,0,0,00:00:00/246-15:48:59,1460) [cifsiod]
(root,0,0,00:00:00/246-15:48:59,1461) [smb3decryptd]
(root,0,0,00:00:00/246-15:48:59,1462) [cifsfileinfoput]
(root,0,0,00:00:00/246-15:48:59,1463) [cifsoplockd]
(root,0,0,00:15:38/246-15:48:59,1465) [cifsd]
(root,0,0,00:18:44/246-15:48:59,1498) [cifsd]
(root,7311760,4387400,16-06:36:53/246-15:48:56,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:38/246-15:48:56,1519) [kvm-nx-lpage-re]
(root,0,0,03:07:29/246-15:48:56,1538) [vhost-1515]
(root,0,0,00:00:00/246-15:48:56,1543) [kvm-pit/1515]
(root,20921780,16896884,19-11:47:32/246-15:48:52,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:40/246-15:48:52,1561) [kvm-nx-lpage-re]
(root,0,0,01:25:57/246-15:48:52,1580) [vhost-1557]
(root,0,0,00:00:00/246-15:48:52,1585) [kvm-pit/1557]
(root,19190296,7216264,13-16:56:20/246-15:48:48,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:52/246-15:48:48,1628) [kvm-nx-lpage-re]
(root,0,0,00:03:50/246-15:48:48,1647) [vhost-1624]
(root,0,0,00:00:00/246-15:48:48,1652) [kvm-pit/1624]
(root,6092344,4527172,31-12:10:23/246-15:48:44,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:58/246-15:48:44,1669) [kvm-nx-lpage-re]
(root,0,0,01:44:09/246-15:48:44,1690) [vhost-1665]
(root,0,0,00:00:00/246-15:48:44,1693) [kvm-pit/1665]
(root,10687192,7425020,15-12:18:29/246-15:48:40,1733) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:53/246-15:48:40,1737) [kvm-nx-lpage-re]
(root,0,0,00:11:05/246-15:48:40,1756) [vhost-1733]
(root,0,0,01:57:28/246-15:48:40,1761) [kvm-pit/1733]
(postfix,43844,7792,00:00:00/01:30:26,7303) pickup -l -t unix -u -c
(root,361884,30420,00:00:08/2-22:55:03,11066) pvedaemon worker
(root,0,0,00:00:00/45:25,19665) [kworker/2:0-mm_percpu_wq]
(root,0,0,00:00:00/45:25,19666) [kworker/2:2-events]
(root,0,0,00:00:00/37:25,21913) [kworker/5:0-events]
(root,0,0,00:00:00/32:25,23327) [kworker/6:3-dio/md2]
(root,0,0,00:00:00/27:20,24751) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/25:25,25283) [kworker/7:0-cgroup_destroy]
(root,0,0,00:00:00/21:25,26441) [kworker/4:3-events]
(root,0,0,00:00:00/18:16,27269) [kworker/u16:0-events_unbound]
(root,0,0,00:00:00/17:25,27516) [kworker/3:0-events]
(root,0,0,00:00:00/14:25,28319) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/14:25,28320) [kworker/0:3-events]
(root,0,0,00:00:00/13:25,28587) [kworker/1:3-events]
(root,0,0,00:00:00/12:46,28790) [kworker/6:0-dio/md2]
(root,0,0,00:00:00/12:25,28854) [kworker/4:0-events]
(root,0,0,00:00:00/12:25,28855) [kworker/4:1-cgroup_destroy]
(www-data,76928,54720,00:00:00/07:58:23,29593) spiceproxy worker
(www-data,363428,132792,00:00:00/07:58:23,29597) pveproxy worker
(www-data,363428,132640,00:00:00/07:58:23,29598) pveproxy worker
(www-data,363428,132636,00:00:00/07:58:23,29599) pveproxy worker
(root,86168,1912,00:00:01/07:58:23,29601) /usr/sbin/pvefw-logger
(root,0,0,00:00:00/09:25,29652) [kworker/3:2-events]
(root,0,0,00:00:00/09:08,29698) [kworker/7:1-events]
(root,361884,29568,00:00:07/1-23:59:52,29924) pvedaemon worker
(root,0,0,00:00:00/07:39,30137) [kworker/1:1-events]
(root,0,0,00:00:00/05:25,30697) [kworker/5:2-cgroup_destroy]
(root,0,0,00:00:00/04:25,30957) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/04:25,30958) [kworker/0:2-events]
(root,0,0,00:00:00/04:16,30985) [kworker/6:1-dio/md2]
(root,0,0,00:00:00/03:55,31140) [kworker/6:2-events]
(root,0,0,00:00:00/03:55,31141) [kworker/6:4-dio/md2]
(root,0,0,00:00:00/03:55,31142) [kworker/6:5-dio/md2]
(root,0,0,00:00:00/03:25,31232) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/02:25,31492) [kworker/4:2-cgroup_destroy]
(root,0,0,00:00:00/02:08,31539) [kworker/1:0-mm_percpu_wq]
(root,0,0,00:00:00/00:25,32010) [kworker/7:2-events]
(root,0,0,00:00:00/00:16,32037) [kworker/2:1]
(root,7188,3188,00:00:00/00:00,32320) /bin/bash /usr/bin/check_mk_agent
(root,7632,2736,00:00:00/00:00,32346) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,992,00:00:00/00:00,32347) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:cd:91:13:59:dc brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-03-09 06:58

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42f826b4ef

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,7376,00:22:22/229-16:14:26,1) /sbin/init
(root,0,0,00:00:13/229-16:14:26,2) [kthreadd]
(root,0,0,00:00:00/229-16:14:26,3) [rcu_gp]
(root,0,0,00:00:00/229-16:14:26,4) [rcu_par_gp]
(root,0,0,00:00:00/229-16:14:26,6) [kworker/0:0H]
(root,0,0,00:00:00/229-16:14:26,9) [mm_percpu_wq]
(root,0,0,00:04:47/229-16:14:26,10) [ksoftirqd/0]
(root,0,0,00:47:25/229-16:14:26,11) [rcu_sched]
(root,0,0,00:00:53/229-16:14:26,12) [migration/0]
(root,0,0,00:00:00/229-16:14:26,13) [idle_inject/0]
(root,0,0,00:00:00/229-16:14:26,14) [cpuhp/0]
(root,0,0,00:00:00/229-16:14:26,15) [cpuhp/1]
(root,0,0,00:00:00/229-16:14:26,16) [idle_inject/1]
(root,0,0,00:00:52/229-16:14:26,17) [migration/1]
(root,0,0,00:03:40/229-16:14:26,18) [ksoftirqd/1]
(root,0,0,00:00:00/229-16:14:26,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/229-16:14:26,21) [cpuhp/2]
(root,0,0,00:00:00/229-16:14:26,22) [idle_inject/2]
(root,0,0,00:00:52/229-16:14:26,23) [migration/2]
(root,0,0,00:02:50/229-16:14:26,24) [ksoftirqd/2]
(root,0,0,00:00:00/229-16:14:26,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/229-16:14:26,27) [cpuhp/3]
(root,0,0,00:00:00/229-16:14:26,28) [idle_inject/3]
(root,0,0,00:01:13/229-16:14:26,29) [migration/3]
(root,0,0,00:02:13/229-16:14:26,30) [ksoftirqd/3]
(root,0,0,00:00:00/229-16:14:26,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/229-16:14:26,33) [cpuhp/4]
(root,0,0,00:00:00/229-16:14:26,34) [idle_inject/4]
(root,0,0,00:00:50/229-16:14:26,35) [migration/4]
(root,0,0,00:01:59/229-16:14:26,36) [ksoftirqd/4]
(root,0,0,00:00:00/229-16:14:26,38) [kworker/4:0H]
(root,0,0,00:00:00/229-16:14:26,39) [cpuhp/5]
(root,0,0,00:00:00/229-16:14:26,40) [idle_inject/5]
(root,0,0,00:00:53/229-16:14:26,41) [migration/5]
(root,0,0,00:32:04/229-16:14:26,42) [ksoftirqd/5]
(root,0,0,00:00:00/229-16:14:26,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/229-16:14:26,45) [cpuhp/6]
(root,0,0,00:00:00/229-16:14:26,46) [idle_inject/6]
(root,0,0,00:00:49/229-16:14:26,47) [migration/6]
(root,0,0,00:11:26/229-16:14:26,48) [ksoftirqd/6]
(root,0,0,00:00:00/229-16:14:26,50) [kworker/6:0H]
(root,0,0,00:00:00/229-16:14:26,51) [cpuhp/7]
(root,0,0,00:00:00/229-16:14:26,52) [idle_inject/7]
(root,0,0,00:00:53/229-16:14:26,53) [migration/7]
(root,0,0,00:01:09/229-16:14:26,54) [ksoftirqd/7]
(root,0,0,00:00:00/229-16:14:26,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/229-16:14:26,57) [kdevtmpfs]
(root,0,0,00:00:00/229-16:14:26,58) [netns]
(root,0,0,00:00:00/229-16:14:26,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/229-16:14:26,60) [kauditd]
(root,0,0,00:00:07/229-16:14:26,62) [khungtaskd]
(root,0,0,00:00:00/229-16:14:26,63) [oom_reaper]
(root,0,0,00:00:00/229-16:14:26,64) [writeback]
(root,0,0,00:00:00/229-16:14:26,65) [kcompactd0]
(root,0,0,00:00:00/229-16:14:26,66) [ksmd]
(root,0,0,00:01:48/229-16:14:26,67) [khugepaged]
(root,0,0,00:00:00/229-16:14:26,113) [kintegrityd]
(root,0,0,00:00:00/229-16:14:26,114) [kblockd]
(root,0,0,00:00:00/229-16:14:26,115) [blkcg_punt_bio]
(root,0,0,00:00:00/229-16:14:26,116) [tpm_dev_wq]
(root,0,0,00:00:00/229-16:14:26,117) [ata_sff]
(root,0,0,00:00:00/229-16:14:26,118) [md]
(root,0,0,00:00:00/229-16:14:26,119) [edac-poller]
(root,0,0,00:00:00/229-16:14:26,120) [devfreq_wq]
(root,0,0,00:00:00/229-16:14:26,121) [watchdogd]
(root,0,0,00:13:47/229-16:14:26,126) [kswapd0]
(root,0,0,00:00:00/229-16:14:26,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/229-16:14:26,129) [kthrotld]
(root,0,0,00:00:00/229-16:14:26,130) [acpi_thermal_pm]
(root,0,0,00:00:00/229-16:14:26,131) [nvme-wq]
(root,0,0,00:00:00/229-16:14:26,132) [nvme-reset-wq]
(root,0,0,00:00:00/229-16:14:26,133) [nvme-delete-wq]
(root,0,0,00:00:00/229-16:14:26,136) [ipv6_addrconf]
(root,0,0,00:00:00/229-16:14:26,145) [kstrp]
(root,0,0,00:00:00/229-16:14:26,146) [kworker/u17:0]
(root,0,0,00:00:00/229-16:14:26,161) [charger_manager]
(root,0,0,00:00:00/229-16:14:25,207) [scsi_eh_0]
(root,0,0,00:00:00/229-16:14:25,208) [scsi_tmf_0]
(root,0,0,00:00:00/229-16:14:25,209) [scsi_eh_1]
(root,0,0,00:00:00/229-16:14:25,210) [scsi_tmf_1]
(root,0,0,00:00:00/229-16:14:25,211) [scsi_eh_2]
(root,0,0,00:00:00/229-16:14:25,212) [scsi_tmf_2]
(root,0,0,00:00:00/229-16:14:25,213) [scsi_eh_3]
(root,0,0,00:00:00/229-16:14:25,214) [scsi_tmf_3]
(root,0,0,00:00:00/229-16:14:25,215) [scsi_eh_4]
(root,0,0,00:00:00/229-16:14:25,216) [scsi_tmf_4]
(root,0,0,00:00:00/229-16:14:25,217) [scsi_eh_5]
(root,0,0,00:00:00/229-16:14:25,218) [scsi_tmf_5]
(root,0,0,00:06:42/229-16:14:25,224) [kworker/1:1H-kblockd]
(root,0,0,00:05:16/229-16:14:25,225) [kworker/5:1H-kblockd]
(root,0,0,00:07:09/229-16:14:25,236) [kworker/0:1H-kblockd]
(root,0,0,00:05:26/229-16:14:25,237) [kworker/4:1H-kblockd]
(root,0,0,01:24:52/229-16:14:25,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/229-16:14:24,250) [raid5wq]
(root,0,0,00:07:23/229-16:14:19,309) [kworker/7:1H-kblockd]
(root,0,0,00:05:25/229-16:14:04,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:43/229-16:14:04,452) [md0_raid1]
(root,0,0,00:00:02/229-16:14:04,456) [md1_raid1]
(root,0,0,01:33:12/229-16:14:04,460) [md2_raid1]
(root,0,0,00:12:52/229-16:14:04,476) [jbd2/md2-8]
(root,0,0,00:00:00/229-16:14:04,477) [ext4-rsv-conver]
(root,0,0,00:05:38/229-16:14:04,490) [kworker/3:1H-kblockd]
(root,224320,113540,01:25:40/229-16:14:04,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/229-16:14:03,543) [rpciod]
(root,0,0,00:00:00/229-16:14:03,544) [xprtiod]
(root,0,0,00:00:00/229-16:14:03,547) [spl_system_task]
(root,0,0,00:00:00/229-16:14:03,548) [spl_delay_taskq]
(root,0,0,00:00:00/229-16:14:03,549) [spl_dynamic_tas]
(root,0,0,00:00:00/229-16:14:03,550) [spl_kmem_cache]
(root,22980,4700,00:24:58/229-16:14:03,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/229-16:14:03,560) [zvol]
(root,0,0,00:00:00/229-16:14:03,563) [arc_prune]
(root,0,0,00:05:52/229-16:14:03,564) [arc_evict]
(root,0,0,00:05:28/229-16:14:03,565) [arc_reap]
(root,0,0,00:00:00/229-16:14:03,567) [dbu_evict]
(root,0,0,00:05:18/229-16:14:03,568) [dbuf_evict]
(root,0,0,00:00:00/229-16:14:03,640) [z_vdev_file]
(root,0,0,00:02:45/229-16:14:03,642) [l2arc_feed]
(root,0,0,00:00:00/229-16:14:03,679) [cryptd]
(root,4816,2412,00:00:07/229-16:14:03,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/229-16:14:03,719) [jbd2/md1-8]
(root,0,0,00:00:00/229-16:14:03,720) [ext4-rsv-conver]
(_rpc,7396,4056,00:00:29/229-16:14:03,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,5308,00:00:18/229-16:14:03,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:40:44/229-16:14:03,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:08:07/229-16:14:03,787) /usr/sbin/watchdog-mux
(messagebus,9524,4224,00:17:47/229-16:14:03,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,3900,00:32:54/229-16:14:03,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,4860,00:02:05/229-16:14:03,792) /lib/systemd/systemd-logind
(root,12244,5060,00:00:05/229-16:14:03,795) /usr/sbin/smartd -n
(root,164148,3716,00:00:00/229-16:14:03,798) /usr/sbin/zed -F
(root,224732,1980,00:00:23/229-16:14:03,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1036,00:00:00/229-16:14:03,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1300,00:00:05/229-16:14:03,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1996,00:00:00/229-16:14:02,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:07:43/229-16:14:02,969) bpfilter_umh
(root,13808,6032,00:13:48/229-16:14:02,983) /usr/sbin/sshd -D
(root,5940,1436,00:00:00/229-16:14:02,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,796380,3888,00:58:25/229-16:14:02,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,748056,61276,04:06:49/229-16:14:02,1104) /usr/bin/pmxcfs
(root,9600,2004,00:01:02/229-16:14:02,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4112,00:00:44/229-16:14:02,1203) /usr/lib/postfix/sbin/master -w
(postfix,43960,7344,00:00:09/229-16:14:02,1205) qmgr -l -t unix -u
(root,8832,2380,00:00:24/229-16:14:01,1218) /usr/sbin/cron -f
(root,304368,31312,08:34:46/229-16:14:01,1224) pve-firewall
(root,303056,38732,20:14:43/229-16:14:01,1226) pvestatd
(root,353788,3968,00:02:40/229-16:14:00,1249) pvedaemon
(root,336348,9156,00:18:54/229-16:14:00,1258) pve-ha-crm
(www-data,355204,142340,00:05:47/229-16:14:00,1259) pveproxy
(www-data,68820,57804,00:03:42/229-16:13:59,1265) spiceproxy
(root,335964,32400,00:31:07/229-16:13:59,1267) pve-ha-lrm
(root,5449912,2744832,10-20:29:30/229-16:13:58,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:16/229-16:13:58,1285) [kvm-nx-lpage-re]
(root,0,0,19:09:17/229-16:13:58,1305) [vhost-1281]
(root,0,0,16:32:53/229-16:13:58,1324) [vhost-1281]
(root,0,0,01:35:29/229-16:13:58,1329) [kvm-pit/1281]
(root,14343344,8768948,52-09:38:08/229-16:13:55,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:08:07/229-16:13:55,1348) [kvm-nx-lpage-re]
(root,0,0,01:24:36/229-16:13:54,1367) [vhost-1344]
(root,0,0,01:52:12/229-16:13:54,1372) [kvm-pit/1344]
(root,0,0,00:00:00/229-16:13:51,1374) [dio/md2]
(root,3258760,2101024,53-09:57:43/229-16:13:51,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:25/229-16:13:51,1415) [kvm-nx-lpage-re]
(root,0,0,09:30:01/229-16:13:50,1434) [vhost-1411]
(root,0,0,00:00:00/229-16:13:50,1437) [kvm-pit/1411]
(root,0,0,00:00:00/229-16:13:49,1455) [ib-comp-wq]
(root,0,0,00:00:00/229-16:13:49,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/229-16:13:49,1457) [ib_mcast]
(root,0,0,00:00:00/229-16:13:49,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/229-16:13:49,1459) [rdma_cm]
(root,0,0,00:00:00/229-16:13:49,1460) [cifsiod]
(root,0,0,00:00:00/229-16:13:49,1461) [smb3decryptd]
(root,0,0,00:00:00/229-16:13:49,1462) [cifsfileinfoput]
(root,0,0,00:00:00/229-16:13:49,1463) [cifsoplockd]
(root,0,0,00:14:26/229-16:13:49,1465) [cifsd]
(root,0,0,00:17:23/229-16:13:49,1498) [cifsd]
(root,7234496,4177312,15-02:43:08/229-16:13:46,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:30/229-16:13:46,1519) [kvm-nx-lpage-re]
(root,0,0,02:54:42/229-16:13:46,1538) [vhost-1515]
(root,0,0,00:00:00/229-16:13:46,1543) [kvm-pit/1515]
(root,20848936,17094028,18-02:43:15/229-16:13:42,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:24/229-16:13:42,1561) [kvm-nx-lpage-re]
(root,0,0,01:19:18/229-16:13:42,1580) [vhost-1557]
(root,0,0,00:00:00/229-16:13:42,1585) [kvm-pit/1557]
(root,19190296,7147744,12-18:16:30/229-16:13:38,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:49/229-16:13:38,1628) [kvm-nx-lpage-re]
(root,0,0,00:03:34/229-16:13:38,1647) [vhost-1624]
(root,0,0,00:00:00/229-16:13:38,1652) [kvm-pit/1624]
(root,6019372,4535076,29-07:14:17/229-16:13:34,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:46/229-16:13:34,1669) [kvm-nx-lpage-re]
(root,0,0,01:37:21/229-16:13:34,1690) [vhost-1665]
(root,0,0,00:00:00/229-16:13:34,1693) [kvm-pit/1665]
(root,10588520,7415920,12-18:29:03/229-16:13:30,1733) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:44/229-16:13:30,1737) [kvm-nx-lpage-re]
(root,0,0,00:08:41/229-16:13:30,1756) [vhost-1733]
(root,0,0,01:49:57/229-16:13:30,1761) [kvm-pit/1733]
(root,361880,30520,00:00:08/2-18:54:55,4968) pvedaemon worker
(root,361880,30644,00:00:09/2-16:54:11,5452) pvedaemon worker
(postfix,43844,7760,00:00:00/01:27:00,6462) pickup -l -t unix -u -c
(root,361880,30876,00:00:10/2-16:26:06,12713) pvedaemon worker
(root,0,0,00:00:00/42:15,18030) [kworker/5:1-cgroup_destroy]
(root,0,0,00:00:00/36:15,19584) [kworker/2:0-mm_percpu_wq]
(root,0,0,00:00:00/36:00,19640) [kworker/3:2-events]
(root,0,0,00:00:00/32:15,20627) [kworker/4:1-cgroup_destroy]
(root,0,0,00:00:00/28:19,21682) [kworker/u16:2-events_unbound]
(www-data,76868,54804,00:00:00/08:23:14,21701) spiceproxy worker
(www-data,363408,132388,00:00:01/08:23:13,21702) pveproxy worker
(www-data,363408,132384,00:00:01/08:23:13,21703) pveproxy worker
(www-data,363408,132392,00:00:01/08:23:13,21704) pveproxy worker
(root,86168,2036,00:00:01/08:23:13,21707) /usr/sbin/pvefw-logger
(root,0,0,00:00:00/23:15,23050) [kworker/4:2-events]
(root,0,0,00:00:00/23:06,23082) [kworker/7:2-events]
(root,0,0,00:00:00/18:15,24375) [kworker/7:3-cgroup_destroy]
(root,0,0,00:00:00/18:07,24403) [kworker/1:0-cgroup_destroy]
(root,0,0,00:00:00/16:15,24896) [kworker/1:2-events]
(root,0,0,00:00:00/15:15,25156) [kworker/0:2-events]
(root,0,0,00:00:00/13:05,25699) [kworker/6:1-events]
(root,0,0,00:00:00/12:44,25760) [kworker/2:1-events]
(root,0,0,00:00:00/11:15,26195) [kworker/5:3-events]
(root,0,0,00:00:00/10:11,26468) [kworker/3:1]
(root,0,0,00:00:00/06:35,27417) [kworker/1:1-events]
(root,0,0,00:00:00/06:15,27484) [kworker/0:1]
(root,0,0,00:00:00/05:34,27687) [kworker/u16:0-events_power_efficient]
(root,0,0,00:00:00/05:15,27750) [kworker/6:2-dio/md2]
(root,0,0,00:00:00/05:15,27751) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/03:15,28265) [kworker/1:3-events]
(root,0,0,00:00:00/02:15,28525) [kworker/2:2-events]
(root,0,0,00:00:00/00:15,29037) [kworker/4:3-events]
(root,7188,3272,00:00:00/00:00,29213) /bin/bash /usr/bin/check_mk_agent
(root,7632,2692,00:00:00/00:00,29239) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,996,00:00:00/00:00,29240) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:cd:91:13:59:dc brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-02-20 07:23

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42685110d6

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,7416,00:20:57/215-12:55:27,1) /sbin/init
(root,0,0,00:00:13/215-12:55:27,2) [kthreadd]
(root,0,0,00:00:00/215-12:55:27,3) [rcu_gp]
(root,0,0,00:00:00/215-12:55:27,4) [rcu_par_gp]
(root,0,0,00:00:00/215-12:55:27,6) [kworker/0:0H]
(root,0,0,00:00:00/215-12:55:27,9) [mm_percpu_wq]
(root,0,0,00:04:31/215-12:55:27,10) [ksoftirqd/0]
(root,0,0,00:44:39/215-12:55:27,11) [rcu_sched]
(root,0,0,00:00:49/215-12:55:27,12) [migration/0]
(root,0,0,00:00:00/215-12:55:27,13) [idle_inject/0]
(root,0,0,00:00:00/215-12:55:27,14) [cpuhp/0]
(root,0,0,00:00:00/215-12:55:27,15) [cpuhp/1]
(root,0,0,00:00:00/215-12:55:27,16) [idle_inject/1]
(root,0,0,00:00:48/215-12:55:27,17) [migration/1]
(root,0,0,00:03:27/215-12:55:27,18) [ksoftirqd/1]
(root,0,0,00:00:00/215-12:55:27,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/215-12:55:27,21) [cpuhp/2]
(root,0,0,00:00:00/215-12:55:27,22) [idle_inject/2]
(root,0,0,00:00:48/215-12:55:27,23) [migration/2]
(root,0,0,00:02:40/215-12:55:27,24) [ksoftirqd/2]
(root,0,0,00:00:00/215-12:55:27,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/215-12:55:27,27) [cpuhp/3]
(root,0,0,00:00:00/215-12:55:27,28) [idle_inject/3]
(root,0,0,00:01:08/215-12:55:27,29) [migration/3]
(root,0,0,00:02:05/215-12:55:27,30) [ksoftirqd/3]
(root,0,0,00:00:00/215-12:55:27,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/215-12:55:27,33) [cpuhp/4]
(root,0,0,00:00:00/215-12:55:27,34) [idle_inject/4]
(root,0,0,00:00:47/215-12:55:27,35) [migration/4]
(root,0,0,00:01:52/215-12:55:27,36) [ksoftirqd/4]
(root,0,0,00:00:00/215-12:55:27,38) [kworker/4:0H]
(root,0,0,00:00:00/215-12:55:27,39) [cpuhp/5]
(root,0,0,00:00:00/215-12:55:27,40) [idle_inject/5]
(root,0,0,00:00:50/215-12:55:27,41) [migration/5]
(root,0,0,00:29:53/215-12:55:27,42) [ksoftirqd/5]
(root,0,0,00:00:00/215-12:55:27,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/215-12:55:27,45) [cpuhp/6]
(root,0,0,00:00:00/215-12:55:27,46) [idle_inject/6]
(root,0,0,00:00:46/215-12:55:27,47) [migration/6]
(root,0,0,00:10:13/215-12:55:27,48) [ksoftirqd/6]
(root,0,0,00:00:00/215-12:55:27,50) [kworker/6:0H]
(root,0,0,00:00:00/215-12:55:27,51) [cpuhp/7]
(root,0,0,00:00:00/215-12:55:27,52) [idle_inject/7]
(root,0,0,00:00:50/215-12:55:27,53) [migration/7]
(root,0,0,00:01:05/215-12:55:27,54) [ksoftirqd/7]
(root,0,0,00:00:00/215-12:55:27,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/215-12:55:27,57) [kdevtmpfs]
(root,0,0,00:00:00/215-12:55:27,58) [netns]
(root,0,0,00:00:00/215-12:55:27,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/215-12:55:27,60) [kauditd]
(root,0,0,00:00:06/215-12:55:27,62) [khungtaskd]
(root,0,0,00:00:00/215-12:55:27,63) [oom_reaper]
(root,0,0,00:00:00/215-12:55:27,64) [writeback]
(root,0,0,00:00:00/215-12:55:27,65) [kcompactd0]
(root,0,0,00:00:00/215-12:55:27,66) [ksmd]
(root,0,0,00:01:45/215-12:55:27,67) [khugepaged]
(root,0,0,00:00:00/215-12:55:27,113) [kintegrityd]
(root,0,0,00:00:00/215-12:55:27,114) [kblockd]
(root,0,0,00:00:00/215-12:55:27,115) [blkcg_punt_bio]
(root,0,0,00:00:00/215-12:55:27,116) [tpm_dev_wq]
(root,0,0,00:00:00/215-12:55:27,117) [ata_sff]
(root,0,0,00:00:00/215-12:55:27,118) [md]
(root,0,0,00:00:00/215-12:55:27,119) [edac-poller]
(root,0,0,00:00:00/215-12:55:27,120) [devfreq_wq]
(root,0,0,00:00:00/215-12:55:27,121) [watchdogd]
(root,0,0,00:12:33/215-12:55:27,126) [kswapd0]
(root,0,0,00:00:00/215-12:55:27,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/215-12:55:27,129) [kthrotld]
(root,0,0,00:00:00/215-12:55:27,130) [acpi_thermal_pm]
(root,0,0,00:00:00/215-12:55:27,131) [nvme-wq]
(root,0,0,00:00:00/215-12:55:27,132) [nvme-reset-wq]
(root,0,0,00:00:00/215-12:55:27,133) [nvme-delete-wq]
(root,0,0,00:00:00/215-12:55:27,136) [ipv6_addrconf]
(root,0,0,00:00:00/215-12:55:27,145) [kstrp]
(root,0,0,00:00:00/215-12:55:27,146) [kworker/u17:0]
(root,0,0,00:00:00/215-12:55:27,161) [charger_manager]
(root,0,0,00:00:00/215-12:55:26,207) [scsi_eh_0]
(root,0,0,00:00:00/215-12:55:26,208) [scsi_tmf_0]
(root,0,0,00:00:00/215-12:55:26,209) [scsi_eh_1]
(root,0,0,00:00:00/215-12:55:26,210) [scsi_tmf_1]
(root,0,0,00:00:00/215-12:55:26,211) [scsi_eh_2]
(root,0,0,00:00:00/215-12:55:26,212) [scsi_tmf_2]
(root,0,0,00:00:00/215-12:55:26,213) [scsi_eh_3]
(root,0,0,00:00:00/215-12:55:26,214) [scsi_tmf_3]
(root,0,0,00:00:00/215-12:55:26,215) [scsi_eh_4]
(root,0,0,00:00:00/215-12:55:26,216) [scsi_tmf_4]
(root,0,0,00:00:00/215-12:55:26,217) [scsi_eh_5]
(root,0,0,00:00:00/215-12:55:26,218) [scsi_tmf_5]
(root,0,0,00:06:00/215-12:55:26,224) [kworker/1:1H-kblockd]
(root,0,0,00:04:38/215-12:55:26,225) [kworker/5:1H-kblockd]
(root,0,0,00:06:25/215-12:55:26,236) [kworker/0:1H-kblockd]
(root,0,0,00:04:47/215-12:55:26,237) [kworker/4:1H-kblockd]
(root,0,0,01:11:54/215-12:55:26,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/215-12:55:25,250) [raid5wq]
(root,0,0,00:06:37/215-12:55:20,309) [kworker/7:1H-kblockd]
(root,0,0,00:04:47/215-12:55:05,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:43/215-12:55:05,452) [md0_raid1]
(root,0,0,00:00:02/215-12:55:05,456) [md1_raid1]
(root,0,0,01:32:29/215-12:55:05,460) [md2_raid1]
(root,0,0,00:11:27/215-12:55:05,476) [jbd2/md2-8]
(root,0,0,00:00:00/215-12:55:05,477) [ext4-rsv-conver]
(root,0,0,00:04:59/215-12:55:05,490) [kworker/3:1H-kblockd]
(root,133692,43556,01:18:49/215-12:55:05,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/215-12:55:04,543) [rpciod]
(root,0,0,00:00:00/215-12:55:04,544) [xprtiod]
(root,0,0,00:00:00/215-12:55:04,547) [spl_system_task]
(root,0,0,00:00:00/215-12:55:04,548) [spl_delay_taskq]
(root,0,0,00:00:00/215-12:55:04,549) [spl_dynamic_tas]
(root,0,0,00:00:00/215-12:55:04,550) [spl_kmem_cache]
(root,22980,4704,00:23:25/215-12:55:04,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/215-12:55:04,560) [zvol]
(root,0,0,00:00:00/215-12:55:04,563) [arc_prune]
(root,0,0,00:05:31/215-12:55:04,564) [arc_evict]
(root,0,0,00:05:09/215-12:55:04,565) [arc_reap]
(root,0,0,00:00:00/215-12:55:04,567) [dbu_evict]
(root,0,0,00:05:00/215-12:55:04,568) [dbuf_evict]
(root,0,0,00:00:00/215-12:55:04,640) [z_vdev_file]
(root,0,0,00:02:34/215-12:55:04,642) [l2arc_feed]
(root,0,0,00:00:00/215-12:55:04,679) [cryptd]
(root,4816,2528,00:00:07/215-12:55:04,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/215-12:55:04,719) [jbd2/md1-8]
(root,0,0,00:00:00/215-12:55:04,720) [ext4-rsv-conver]
(_rpc,7268,3984,00:00:27/215-12:55:04,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,4384,00:00:17/215-12:55:04,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:36:33/215-12:55:04,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:07:38/215-12:55:04,787) /usr/sbin/watchdog-mux
(messagebus,9524,4224,00:16:57/215-12:55:04,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,4044,00:30:18/215-12:55:04,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,5212,00:01:57/215-12:55:04,792) /lib/systemd/systemd-logind
(root,12244,5184,00:00:04/215-12:55:04,795) /usr/sbin/smartd -n
(root,164148,3720,00:00:00/215-12:55:04,798) /usr/sbin/zed -F
(root,224732,1980,00:00:22/215-12:55:04,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1036,00:00:00/215-12:55:04,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1300,00:00:05/215-12:55:04,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,1996,00:00:00/215-12:55:03,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:07:16/215-12:55:03,969) bpfilter_umh
(root,13808,6036,00:12:45/215-12:55:03,983) /usr/sbin/sshd -D
(root,5940,1440,00:00:00/215-12:55:03,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,796380,3940,00:56:30/215-12:55:03,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,748056,62252,03:52:19/215-12:55:03,1104) /usr/bin/pmxcfs
(root,9600,2064,00:00:58/215-12:55:03,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4124,00:00:42/215-12:55:03,1203) /usr/lib/postfix/sbin/master -w
(postfix,43956,7272,00:00:08/215-12:55:03,1205) qmgr -l -t unix -u
(root,8832,2416,00:00:22/215-12:55:02,1218) /usr/sbin/cron -f
(root,304368,31344,08:01:57/215-12:55:02,1224) pve-firewall
(root,303056,38760,18:58:35/215-12:55:02,1226) pvestatd
(root,353788,4016,00:02:29/215-12:55:01,1249) pvedaemon
(root,336348,9288,00:17:45/215-12:55:01,1258) pve-ha-crm
(www-data,355148,143528,00:05:27/215-12:55:01,1259) pveproxy
(www-data,68864,57828,00:03:29/215-12:55:00,1265) spiceproxy
(root,335964,32492,00:29:13/215-12:55:00,1267) pve-ha-lrm
(root,5449912,2699896,10-03:56:58/215-12:54:59,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:15/215-12:54:59,1285) [kvm-nx-lpage-re]
(root,0,0,17:53:29/215-12:54:59,1305) [vhost-1281]
(root,0,0,15:28:58/215-12:54:59,1324) [vhost-1281]
(root,0,0,01:29:59/215-12:54:59,1329) [kvm-pit/1281]
(root,14207220,8740788,48-22:46:56/215-12:54:56,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:07:37/215-12:54:56,1348) [kvm-nx-lpage-re]
(root,0,0,01:18:45/215-12:54:55,1367) [vhost-1344]
(root,0,0,01:45:40/215-12:54:55,1372) [kvm-pit/1344]
(root,0,0,00:00:00/215-12:54:52,1374) [dio/md2]
(root,3258760,2104928,49-18:05:00/215-12:54:52,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:24/215-12:54:52,1415) [kvm-nx-lpage-re]
(root,0,0,08:53:13/215-12:54:51,1434) [vhost-1411]
(root,0,0,00:00:00/215-12:54:51,1437) [kvm-pit/1411]
(root,0,0,00:00:00/215-12:54:50,1455) [ib-comp-wq]
(root,0,0,00:00:00/215-12:54:50,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/215-12:54:50,1457) [ib_mcast]
(root,0,0,00:00:00/215-12:54:50,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/215-12:54:50,1459) [rdma_cm]
(root,0,0,00:00:00/215-12:54:50,1460) [cifsiod]
(root,0,0,00:00:00/215-12:54:50,1461) [smb3decryptd]
(root,0,0,00:00:00/215-12:54:50,1462) [cifsfileinfoput]
(root,0,0,00:00:00/215-12:54:50,1463) [cifsoplockd]
(root,0,0,00:13:25/215-12:54:50,1465) [cifsd]
(root,0,0,00:16:14/215-12:54:50,1498) [cifsd]
(root,7174352,4031356,14-04:05:53/215-12:54:47,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:24/215-12:54:47,1519) [kvm-nx-lpage-re]
(root,0,0,02:44:10/215-12:54:47,1538) [vhost-1515]
(root,0,0,00:00:00/215-12:54:47,1543) [kvm-pit/1515]
(root,20788840,17084004,16-22:05:23/215-12:54:43,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:11/215-12:54:43,1561) [kvm-nx-lpage-re]
(root,0,0,01:14:00/215-12:54:43,1580) [vhost-1557]
(root,0,0,00:00:00/215-12:54:43,1585) [kvm-pit/1557]
(root,18993688,6889496,11-23:19:59/215-12:54:39,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:45/215-12:54:39,1628) [kvm-nx-lpage-re]
(root,0,0,00:03:20/215-12:54:39,1647) [vhost-1624]
(root,0,0,00:00:00/215-12:54:39,1652) [kvm-pit/1624]
(root,5959856,4490040,27-11:00:21/215-12:54:35,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:35/215-12:54:35,1669) [kvm-nx-lpage-re]
(root,0,0,01:31:19/215-12:54:35,1690) [vhost-1665]
(root,0,0,00:00:00/215-12:54:35,1693) [kvm-pit/1665]
(root,10484220,7384796,10-15:58:41/215-12:54:31,1733) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:37/215-12:54:31,1737) [kvm-nx-lpage-re]
(root,0,0,00:07:46/215-12:54:31,1756) [vhost-1733]
(root,0,0,01:43:34/215-12:54:31,1761) [kvm-pit/1733]
(root,361880,28964,00:00:04/15:15:23,10061) pvedaemon worker
(www-data,76924,55108,00:00:00/05:04:15,10512) spiceproxy worker
(www-data,363480,132648,00:00:01/05:04:14,10533) pveproxy worker
(www-data,363344,132652,00:00:01/05:04:14,10534) pveproxy worker
(www-data,367880,137180,00:00:01/05:04:14,10535) pveproxy worker
(root,86168,2004,00:00:01/05:04:14,10537) /usr/sbin/pvefw-logger
(root,0,0,00:00:00/54:16,12923) [kworker/4:3-mm_percpu_wq]
(root,361880,30340,00:00:07/1-03:12:01,14222) pvedaemon worker
(root,0,0,00:00:00/48:24,14364) [kworker/u16:1-events_unbound]
(root,0,0,00:00:00/48:16,14467) [kworker/3:0-events]
(root,0,0,00:00:00/43:16,15767) [kworker/5:0-events]
(root,0,0,00:00:01/29:16,19350) [kworker/6:0-dio/md2]
(root,0,0,00:00:00/21:16,21402) [kworker/4:0-events]
(root,0,0,00:00:00/18:16,22169) [kworker/7:1-events]
(root,0,0,00:00:00/17:16,22426) [kworker/1:3-events]
(root,361880,29192,00:00:04/18:35:21,22704) pvedaemon worker
(root,0,0,00:00:00/14:50,23016) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/14:16,23193) [kworker/3:2-events]
(root,0,0,00:00:00/13:16,23447) [kworker/0:1-events]
(root,0,0,00:00:00/11:16,23959) [kworker/2:1-mm_percpu_wq]
(root,0,0,00:00:00/11:16,23960) [kworker/2:3-events]
(root,0,0,00:00:00/09:25,24364) [kworker/1:0-events]
(root,0,0,00:00:00/09:16,24467) [kworker/6:2-dio/md2]
(root,0,0,00:00:00/07:16,24982) [kworker/7:2]
(root,0,0,00:00:00/06:16,25237) [kworker/5:2-cgroup_destroy]
(postfix,43844,7748,00:00:00/05:53,25308) pickup -l -t unix -u -c
(root,0,0,00:00:00/05:28,25374) [kworker/0:2-events]
(root,0,0,00:00:00/03:56,25806) [kworker/3:1-events]
(root,0,0,00:00:00/03:52,25832) [kworker/1:1-events]
(root,0,0,00:00:00/03:37,25860) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:00/03:33,25879) [kworker/6:1-dio/md2]
(root,0,0,00:00:00/03:33,25880) [kworker/6:3-dio/md2]
(root,0,0,00:00:00/03:33,25881) [kworker/6:4-dio/md2]
(root,0,0,00:00:00/03:32,25882) [kworker/6:5-dio/md2]
(root,0,0,00:00:00/03:32,25883) [kworker/6:6-dio/md2]
(root,0,0,00:00:00/03:32,25884) [kworker/6:7-dio/md2]
(root,0,0,00:00:00/03:32,25885) [kworker/6:8-dio/md2]
(root,0,0,00:00:00/03:32,25886) [kworker/6:9-dio/md2]
(root,0,0,00:00:00/03:32,25887) [kworker/6:10-dio/md2]
(root,0,0,00:00:00/03:32,25888) [kworker/6:11-dio/md2]
(root,0,0,00:00:00/03:32,25889) [kworker/6:12-dio/md2]
(root,0,0,00:00:00/03:32,25890) [kworker/6:13]
(root,0,0,00:00:00/03:28,25894) [kworker/4:1-cgroup_destroy]
(root,0,0,00:00:00/00:16,26791) [kworker/5:1-cgroup_destroy]
(root,0,0,00:00:00/00:16,26792) [kworker/5:3-events]
(root,7188,3288,00:00:00/00:00,26966) /bin/bash /usr/bin/check_mk_agent
(root,7632,2728,00:00:00/00:00,26992) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,924,00:00:00/00:00,26993) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:cd:91:13:59:dc brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-02-06 04:04

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c4222fc5466

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,7688,00:20:35/211-09:58:10,1) /sbin/init
(root,0,0,00:00:12/211-09:58:10,2) [kthreadd]
(root,0,0,00:00:00/211-09:58:10,3) [rcu_gp]
(root,0,0,00:00:00/211-09:58:10,4) [rcu_par_gp]
(root,0,0,00:00:00/211-09:58:10,6) [kworker/0:0H]
(root,0,0,00:00:00/211-09:58:10,9) [mm_percpu_wq]
(root,0,0,00:04:26/211-09:58:10,10) [ksoftirqd/0]
(root,0,0,00:43:52/211-09:58:10,11) [rcu_sched]
(root,0,0,00:00:48/211-09:58:10,12) [migration/0]
(root,0,0,00:00:00/211-09:58:10,13) [idle_inject/0]
(root,0,0,00:00:00/211-09:58:10,14) [cpuhp/0]
(root,0,0,00:00:00/211-09:58:10,15) [cpuhp/1]
(root,0,0,00:00:00/211-09:58:10,16) [idle_inject/1]
(root,0,0,00:00:47/211-09:58:10,17) [migration/1]
(root,0,0,00:03:23/211-09:58:10,18) [ksoftirqd/1]
(root,0,0,00:00:00/211-09:58:10,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/211-09:58:10,21) [cpuhp/2]
(root,0,0,00:00:00/211-09:58:10,22) [idle_inject/2]
(root,0,0,00:00:47/211-09:58:10,23) [migration/2]
(root,0,0,00:02:37/211-09:58:10,24) [ksoftirqd/2]
(root,0,0,00:00:00/211-09:58:10,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/211-09:58:10,27) [cpuhp/3]
(root,0,0,00:00:00/211-09:58:10,28) [idle_inject/3]
(root,0,0,00:01:07/211-09:58:10,29) [migration/3]
(root,0,0,00:02:03/211-09:58:10,30) [ksoftirqd/3]
(root,0,0,00:00:00/211-09:58:10,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/211-09:58:10,33) [cpuhp/4]
(root,0,0,00:00:00/211-09:58:10,34) [idle_inject/4]
(root,0,0,00:00:46/211-09:58:10,35) [migration/4]
(root,0,0,00:01:50/211-09:58:10,36) [ksoftirqd/4]
(root,0,0,00:00:00/211-09:58:10,38) [kworker/4:0H]
(root,0,0,00:00:00/211-09:58:10,39) [cpuhp/5]
(root,0,0,00:00:00/211-09:58:10,40) [idle_inject/5]
(root,0,0,00:00:49/211-09:58:10,41) [migration/5]
(root,0,0,00:29:13/211-09:58:10,42) [ksoftirqd/5]
(root,0,0,00:00:00/211-09:58:10,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/211-09:58:10,45) [cpuhp/6]
(root,0,0,00:00:00/211-09:58:10,46) [idle_inject/6]
(root,0,0,00:00:45/211-09:58:10,47) [migration/6]
(root,0,0,00:09:52/211-09:58:10,48) [ksoftirqd/6]
(root,0,0,00:00:00/211-09:58:10,50) [kworker/6:0H]
(root,0,0,00:00:00/211-09:58:10,51) [cpuhp/7]
(root,0,0,00:00:00/211-09:58:10,52) [idle_inject/7]
(root,0,0,00:00:48/211-09:58:10,53) [migration/7]
(root,0,0,00:01:03/211-09:58:10,54) [ksoftirqd/7]
(root,0,0,00:00:00/211-09:58:10,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/211-09:58:10,57) [kdevtmpfs]
(root,0,0,00:00:00/211-09:58:10,58) [netns]
(root,0,0,00:00:00/211-09:58:10,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/211-09:58:10,60) [kauditd]
(root,0,0,00:00:06/211-09:58:10,62) [khungtaskd]
(root,0,0,00:00:00/211-09:58:10,63) [oom_reaper]
(root,0,0,00:00:00/211-09:58:10,64) [writeback]
(root,0,0,00:00:00/211-09:58:10,65) [kcompactd0]
(root,0,0,00:00:00/211-09:58:10,66) [ksmd]
(root,0,0,00:01:44/211-09:58:10,67) [khugepaged]
(root,0,0,00:00:00/211-09:58:10,113) [kintegrityd]
(root,0,0,00:00:00/211-09:58:10,114) [kblockd]
(root,0,0,00:00:00/211-09:58:10,115) [blkcg_punt_bio]
(root,0,0,00:00:00/211-09:58:10,116) [tpm_dev_wq]
(root,0,0,00:00:00/211-09:58:10,117) [ata_sff]
(root,0,0,00:00:00/211-09:58:10,118) [md]
(root,0,0,00:00:00/211-09:58:10,119) [edac-poller]
(root,0,0,00:00:00/211-09:58:10,120) [devfreq_wq]
(root,0,0,00:00:00/211-09:58:10,121) [watchdogd]
(root,0,0,00:12:08/211-09:58:10,126) [kswapd0]
(root,0,0,00:00:00/211-09:58:10,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/211-09:58:10,129) [kthrotld]
(root,0,0,00:00:00/211-09:58:10,130) [acpi_thermal_pm]
(root,0,0,00:00:00/211-09:58:10,131) [nvme-wq]
(root,0,0,00:00:00/211-09:58:10,132) [nvme-reset-wq]
(root,0,0,00:00:00/211-09:58:10,133) [nvme-delete-wq]
(root,0,0,00:00:00/211-09:58:10,136) [ipv6_addrconf]
(root,0,0,00:00:00/211-09:58:10,145) [kstrp]
(root,0,0,00:00:00/211-09:58:10,146) [kworker/u17:0]
(root,0,0,00:00:00/211-09:58:10,161) [charger_manager]
(root,0,0,00:00:00/211-09:58:09,207) [scsi_eh_0]
(root,0,0,00:00:00/211-09:58:09,208) [scsi_tmf_0]
(root,0,0,00:00:00/211-09:58:09,209) [scsi_eh_1]
(root,0,0,00:00:00/211-09:58:09,210) [scsi_tmf_1]
(root,0,0,00:00:00/211-09:58:09,211) [scsi_eh_2]
(root,0,0,00:00:00/211-09:58:09,212) [scsi_tmf_2]
(root,0,0,00:00:00/211-09:58:09,213) [scsi_eh_3]
(root,0,0,00:00:00/211-09:58:09,214) [scsi_tmf_3]
(root,0,0,00:00:00/211-09:58:09,215) [scsi_eh_4]
(root,0,0,00:00:00/211-09:58:09,216) [scsi_tmf_4]
(root,0,0,00:00:00/211-09:58:09,217) [scsi_eh_5]
(root,0,0,00:00:00/211-09:58:09,218) [scsi_tmf_5]
(root,0,0,00:05:47/211-09:58:09,224) [kworker/1:1H-kblockd]
(root,0,0,00:04:26/211-09:58:09,225) [kworker/5:1H-kblockd]
(root,0,0,00:06:12/211-09:58:09,236) [kworker/0:1H-kblockd]
(root,0,0,00:04:35/211-09:58:09,237) [kworker/4:1H-kblockd]
(root,0,0,01:07:57/211-09:58:09,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/211-09:58:08,250) [raid5wq]
(root,0,0,00:06:24/211-09:58:03,309) [kworker/7:1H-kblockd]
(root,0,0,00:04:36/211-09:57:48,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:43/211-09:57:48,452) [md0_raid1]
(root,0,0,00:00:02/211-09:57:48,456) [md1_raid1]
(root,0,0,01:32:16/211-09:57:48,460) [md2_raid1]
(root,0,0,00:11:03/211-09:57:48,476) [jbd2/md2-8]
(root,0,0,00:00:00/211-09:57:48,477) [ext4-rsv-conver]
(root,0,0,00:04:47/211-09:57:48,490) [kworker/3:1H-kblockd]
(root,198572,100980,01:17:02/211-09:57:48,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/211-09:57:47,543) [rpciod]
(root,0,0,00:00:00/211-09:57:47,544) [xprtiod]
(root,0,0,00:00:00/211-09:57:47,547) [spl_system_task]
(root,0,0,00:00:00/211-09:57:47,548) [spl_delay_taskq]
(root,0,0,00:00:00/211-09:57:47,549) [spl_dynamic_tas]
(root,0,0,00:00:00/211-09:57:47,550) [spl_kmem_cache]
(root,22980,4708,00:22:57/211-09:57:47,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/211-09:57:47,560) [zvol]
(root,0,0,00:00:00/211-09:57:47,563) [arc_prune]
(root,0,0,00:05:25/211-09:57:47,564) [arc_evict]
(root,0,0,00:05:04/211-09:57:47,565) [arc_reap]
(root,0,0,00:00:00/211-09:57:47,567) [dbu_evict]
(root,0,0,00:04:54/211-09:57:47,568) [dbuf_evict]
(root,0,0,00:00:00/211-09:57:47,640) [z_vdev_file]
(root,0,0,00:02:31/211-09:57:47,642) [l2arc_feed]
(root,0,0,00:00:00/211-09:57:47,679) [cryptd]
(root,4816,2592,00:00:06/211-09:57:47,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/211-09:57:47,719) [jbd2/md1-8]
(root,0,0,00:00:00/211-09:57:47,720) [ext4-rsv-conver]
(_rpc,7268,3984,00:00:27/211-09:57:47,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,4412,00:00:17/211-09:57:47,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:35:19/211-09:57:47,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:07:29/211-09:57:47,787) /usr/sbin/watchdog-mux
(messagebus,9524,4224,00:16:45/211-09:57:47,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,4044,00:29:37/211-09:57:47,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,5240,00:01:55/211-09:57:47,792) /lib/systemd/systemd-logind
(root,12244,5100,00:00:04/211-09:57:47,795) /usr/sbin/smartd -n
(root,164148,3720,00:00:00/211-09:57:47,798) /usr/sbin/zed -F
(root,224732,1980,00:00:21/211-09:57:47,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1036,00:00:00/211-09:57:47,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1300,00:00:05/211-09:57:47,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2000,00:00:00/211-09:57:46,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:07:08/211-09:57:46,969) bpfilter_umh
(root,13808,6048,00:12:31/211-09:57:46,983) /usr/sbin/sshd -D
(root,5940,1480,00:00:00/211-09:57:46,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,796380,3940,00:55:57/211-09:57:46,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,754260,65384,03:48:05/211-09:57:46,1104) /usr/bin/pmxcfs
(root,9600,2064,00:00:57/211-09:57:46,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4132,00:00:41/211-09:57:46,1203) /usr/lib/postfix/sbin/master -w
(postfix,43956,7284,00:00:08/211-09:57:46,1205) qmgr -l -t unix -u
(root,8832,2456,00:00:22/211-09:57:45,1218) /usr/sbin/cron -f
(root,304368,31348,07:51:59/211-09:57:45,1224) pve-firewall
(root,303056,38776,18:35:58/211-09:57:45,1226) pvestatd
(root,353788,3980,00:02:26/211-09:57:44,1249) pvedaemon
(root,336348,9312,00:17:24/211-09:57:44,1258) pve-ha-crm
(www-data,355216,145112,00:05:21/211-09:57:44,1259) pveproxy
(www-data,68844,57784,00:03:25/211-09:57:43,1265) spiceproxy
(root,335964,32516,00:28:39/211-09:57:43,1267) pve-ha-lrm
(root,5449912,2701128,9-23:08:23/211-09:57:42,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:15/211-09:57:42,1285) [kvm-nx-lpage-re]
(root,0,0,17:32:31/211-09:57:42,1305) [vhost-1281]
(root,0,0,15:11:32/211-09:57:42,1324) [vhost-1281]
(root,0,0,01:28:28/211-09:57:42,1329) [kvm-pit/1281]
(root,14192116,8726048,47-07:31:16/211-09:57:39,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:07:27/211-09:57:39,1348) [kvm-nx-lpage-re]
(root,0,0,01:17:38/211-09:57:38,1367) [vhost-1344]
(root,0,0,01:43:50/211-09:57:38,1372) [kvm-pit/1344]
(root,0,0,00:00:00/211-09:57:35,1374) [dio/md2]
(root,3258760,2105636,48-15:58:09/211-09:57:35,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:23/211-09:57:35,1415) [kvm-nx-lpage-re]
(root,0,0,08:42:42/211-09:57:34,1434) [vhost-1411]
(root,0,0,00:00:00/211-09:57:34,1437) [kvm-pit/1411]
(root,0,0,00:00:00/211-09:57:33,1455) [ib-comp-wq]
(root,0,0,00:00:00/211-09:57:33,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/211-09:57:33,1457) [ib_mcast]
(root,0,0,00:00:00/211-09:57:33,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/211-09:57:33,1459) [rdma_cm]
(root,0,0,00:00:00/211-09:57:33,1460) [cifsiod]
(root,0,0,00:00:00/211-09:57:33,1461) [smb3decryptd]
(root,0,0,00:00:00/211-09:57:33,1462) [cifsfileinfoput]
(root,0,0,00:00:00/211-09:57:33,1463) [cifsoplockd]
(root,0,0,00:13:08/211-09:57:33,1465) [cifsd]
(root,0,0,00:15:52/211-09:57:33,1498) [cifsd]
(root,7152872,4010652,13-21:16:25/211-09:57:30,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:22/211-09:57:30,1519) [kvm-nx-lpage-re]
(root,0,0,02:41:13/211-09:57:30,1538) [vhost-1515]
(root,0,0,00:00:00/211-09:57:30,1543) [kvm-pit/1515]
(root,20767380,17065380,16-13:47:09/211-09:57:26,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:08/211-09:57:26,1561) [kvm-nx-lpage-re]
(root,361880,29104,00:00:05/2-10:40:40,1566) pvedaemon worker
(root,0,0,01:12:40/211-09:57:26,1580) [vhost-1557]
(root,0,0,00:00:00/211-09:57:26,1585) [kvm-pit/1557]
(root,18993688,6887476,11-17:44:09/211-09:57:22,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:44/211-09:57:22,1628) [kvm-nx-lpage-re]
(root,0,0,00:03:16/211-09:57:22,1647) [vhost-1624]
(root,0,0,00:00:00/211-09:57:22,1652) [kvm-pit/1624]
(root,5937816,4470324,26-21:57:16/211-09:57:18,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:32/211-09:57:18,1669) [kvm-nx-lpage-re]
(root,0,0,01:29:42/211-09:57:18,1690) [vhost-1665]
(root,0,0,00:00:00/211-09:57:18,1693) [kvm-pit/1665]
(root,10505932,7366568,10-01:25:48/211-09:57:14,1733) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:35/211-09:57:14,1737) [kvm-nx-lpage-re]
(root,0,0,00:07:30/211-09:57:14,1756) [vhost-1733]
(root,0,0,01:41:48/211-09:57:14,1761) [kvm-pit/1733]
(postfix,43844,7800,00:00:00/32:45,5064) pickup -l -t unix -u -c
(root,0,0,00:00:00/29:59,5802) [kworker/7:0-events]
(root,0,0,00:00:00/24:59,7097) [kworker/4:1-mm_percpu_wq]
(root,0,0,00:00:00/24:59,7098) [kworker/4:2-cgroup_destroy]
(root,0,0,00:00:00/23:59,7359) [kworker/2:0-events]
(root,0,0,00:00:00/23:59,7360) [kworker/2:3-events]
(root,0,0,00:00:00/19:59,8393) [kworker/6:2-events]
(root,0,0,00:00:00/16:59,9168) [kworker/6:3-dio/md2]
(root,0,0,00:00:00/13:59,9947) [kworker/5:1-events]
(root,0,0,00:00:00/13:59,9948) [kworker/5:3-events]
(root,0,0,00:00:52/13:15,10162) [kworker/u16:0-events_unbound]
(root,0,0,00:00:00/12:59,10214) [kworker/3:1-events]
(root,0,0,00:00:00/12:42,10264) [kworker/1:0-events]
(root,0,0,00:00:00/09:35,11080) [kworker/6:0-cgroup_destroy]
(root,0,0,00:00:00/08:59,11279) [kworker/0:2-events]
(root,0,0,00:00:00/08:59,11280) [kworker/0:3-events]
(root,0,0,00:00:00/07:59,11540) [kworker/1:3-events]
(root,0,0,00:00:00/06:59,11834) [kworker/2:1-cgroup_destroy]
(root,9796,2428,00:00:00/06:59,11835) /usr/sbin/CRON -f
(root,2380,752,00:00:00/06:59,11836) /bin/sh -c vzdump 101 103 104 106 110 --storage Backup03 --compress lzo --quiet 1 --mailto rzbackup@ago-it.de --node node01 --mode snapshot --mailnotification always
(root,330160,117028,00:00:00/06:59,11837) /usr/bin/perl -T /usr/bin/vzdump 101 103 104 106 110 --storage Backup03 --compress lzo --quiet 1 --mailto rzbackup@ago-it.de --node node01 --mode snapshot --mailnotification always
(root,337436,102788,00:00:00/06:58,11839) task UPID:node01:00002E3F:6CDF826C:63DB0B11:vzdump::root@pam:
(root,5212,1836,00:00:32/06:57,11853) lzop
(root,0,0,00:00:00/06:53,11861) [kworker/7:2-events]
(root,0,0,00:00:00/06:53,11862) [kworker/u16:2]
(root,0,0,00:00:00/06:48,11882) [kworker/3:0-mm_percpu_wq]
(root,361880,29540,00:00:06/2-11:59:45,11957) pvedaemon worker
(www-data,69644,54024,00:00:00/02:06:57,12364) spiceproxy worker
(root,86168,1952,00:00:00/02:06:57,12366) /usr/sbin/pvefw-logger
(www-data,363424,133136,00:00:00/02:06:57,12371) pveproxy worker
(www-data,363416,133156,00:00:00/02:06:57,12372) pveproxy worker
(www-data,363424,133120,00:00:00/02:06:57,12373) pveproxy worker
(root,0,0,00:00:00/04:59,12390) [kworker/6:1-dio/md2]
(root,0,0,00:00:00/04:38,12445) [kworker/5:0]
(root,0,0,00:00:00/02:40,12974) [kworker/1:1-cifsiod]
(root,0,0,00:00:00/02:39,12975) [kworker/u16:3-events_power_efficient]
(root,0,0,00:00:00/01:58,13180) [kworker/2:2]
(root,13808,6736,00:00:00/01:04,13424) sshd: [accepted]
(sshd,13808,4992,00:00:00/01:00,13451) sshd: [net]
(root,0,0,00:00:00/00:59,13452) [kworker/7:1-cgroup_destroy]
(root,7188,3140,00:00:00/00:00,13815) /bin/bash /usr/bin/check_mk_agent
(root,7632,2736,00:00:00/00:00,13841) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,928,00:00:00/00:00,13842) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:05/01:06:17,28697) [kworker/u16:1-flush-9:2]
(root,361880,28464,00:00:04/2-08:52:08,31210) pvedaemon worker

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:cd:91:13:59:dc brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-02-02 01:06

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42742317b7

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,7484,00:19:11/196-13:07:40,1) /sbin/init
(root,0,0,00:00:11/196-13:07:40,2) [kthreadd]
(root,0,0,00:00:00/196-13:07:40,3) [rcu_gp]
(root,0,0,00:00:00/196-13:07:40,4) [rcu_par_gp]
(root,0,0,00:00:00/196-13:07:40,6) [kworker/0:0H]
(root,0,0,00:00:00/196-13:07:40,9) [mm_percpu_wq]
(root,0,0,00:04:08/196-13:07:40,10) [ksoftirqd/0]
(root,0,0,00:41:06/196-13:07:40,11) [rcu_sched]
(root,0,0,00:00:45/196-13:07:40,12) [migration/0]
(root,0,0,00:00:00/196-13:07:40,13) [idle_inject/0]
(root,0,0,00:00:00/196-13:07:40,14) [cpuhp/0]
(root,0,0,00:00:00/196-13:07:40,15) [cpuhp/1]
(root,0,0,00:00:00/196-13:07:40,16) [idle_inject/1]
(root,0,0,00:00:44/196-13:07:40,17) [migration/1]
(root,0,0,00:03:09/196-13:07:40,18) [ksoftirqd/1]
(root,0,0,00:00:00/196-13:07:40,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/196-13:07:40,21) [cpuhp/2]
(root,0,0,00:00:00/196-13:07:40,22) [idle_inject/2]
(root,0,0,00:00:44/196-13:07:40,23) [migration/2]
(root,0,0,00:02:26/196-13:07:40,24) [ksoftirqd/2]
(root,0,0,00:00:00/196-13:07:40,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/196-13:07:40,27) [cpuhp/3]
(root,0,0,00:00:00/196-13:07:40,28) [idle_inject/3]
(root,0,0,00:01:02/196-13:07:40,29) [migration/3]
(root,0,0,00:01:54/196-13:07:40,30) [ksoftirqd/3]
(root,0,0,00:00:00/196-13:07:40,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/196-13:07:40,33) [cpuhp/4]
(root,0,0,00:00:00/196-13:07:40,34) [idle_inject/4]
(root,0,0,00:00:42/196-13:07:40,35) [migration/4]
(root,0,0,00:01:42/196-13:07:40,36) [ksoftirqd/4]
(root,0,0,00:00:00/196-13:07:40,38) [kworker/4:0H]
(root,0,0,00:00:00/196-13:07:40,39) [cpuhp/5]
(root,0,0,00:00:00/196-13:07:40,40) [idle_inject/5]
(root,0,0,00:00:45/196-13:07:40,41) [migration/5]
(root,0,0,00:26:58/196-13:07:40,42) [ksoftirqd/5]
(root,0,0,00:00:00/196-13:07:40,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/196-13:07:40,45) [cpuhp/6]
(root,0,0,00:00:00/196-13:07:40,46) [idle_inject/6]
(root,0,0,00:00:42/196-13:07:40,47) [migration/6]
(root,0,0,00:08:40/196-13:07:40,48) [ksoftirqd/6]
(root,0,0,00:00:00/196-13:07:40,50) [kworker/6:0H]
(root,0,0,00:00:00/196-13:07:40,51) [cpuhp/7]
(root,0,0,00:00:00/196-13:07:40,52) [idle_inject/7]
(root,0,0,00:00:45/196-13:07:40,53) [migration/7]
(root,0,0,00:00:59/196-13:07:40,54) [ksoftirqd/7]
(root,0,0,00:00:00/196-13:07:40,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/196-13:07:40,57) [kdevtmpfs]
(root,0,0,00:00:00/196-13:07:40,58) [netns]
(root,0,0,00:00:00/196-13:07:40,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/196-13:07:40,60) [kauditd]
(root,0,0,00:00:06/196-13:07:40,62) [khungtaskd]
(root,0,0,00:00:00/196-13:07:40,63) [oom_reaper]
(root,0,0,00:00:00/196-13:07:40,64) [writeback]
(root,0,0,00:00:00/196-13:07:40,65) [kcompactd0]
(root,0,0,00:00:00/196-13:07:40,66) [ksmd]
(root,0,0,00:01:41/196-13:07:40,67) [khugepaged]
(root,0,0,00:00:00/196-13:07:40,113) [kintegrityd]
(root,0,0,00:00:00/196-13:07:40,114) [kblockd]
(root,0,0,00:00:00/196-13:07:40,115) [blkcg_punt_bio]
(root,0,0,00:00:00/196-13:07:40,116) [tpm_dev_wq]
(root,0,0,00:00:00/196-13:07:40,117) [ata_sff]
(root,0,0,00:00:00/196-13:07:40,118) [md]
(root,0,0,00:00:00/196-13:07:40,119) [edac-poller]
(root,0,0,00:00:00/196-13:07:40,120) [devfreq_wq]
(root,0,0,00:00:00/196-13:07:40,121) [watchdogd]
(root,0,0,00:10:59/196-13:07:40,126) [kswapd0]
(root,0,0,00:00:00/196-13:07:40,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/196-13:07:40,129) [kthrotld]
(root,0,0,00:00:00/196-13:07:40,130) [acpi_thermal_pm]
(root,0,0,00:00:00/196-13:07:40,131) [nvme-wq]
(root,0,0,00:00:00/196-13:07:40,132) [nvme-reset-wq]
(root,0,0,00:00:00/196-13:07:40,133) [nvme-delete-wq]
(root,0,0,00:00:00/196-13:07:40,136) [ipv6_addrconf]
(root,0,0,00:00:00/196-13:07:40,145) [kstrp]
(root,0,0,00:00:00/196-13:07:40,146) [kworker/u17:0]
(root,0,0,00:00:00/196-13:07:40,161) [charger_manager]
(root,0,0,00:00:00/196-13:07:39,207) [scsi_eh_0]
(root,0,0,00:00:00/196-13:07:39,208) [scsi_tmf_0]
(root,0,0,00:00:00/196-13:07:39,209) [scsi_eh_1]
(root,0,0,00:00:00/196-13:07:39,210) [scsi_tmf_1]
(root,0,0,00:00:00/196-13:07:39,211) [scsi_eh_2]
(root,0,0,00:00:00/196-13:07:39,212) [scsi_tmf_2]
(root,0,0,00:00:00/196-13:07:39,213) [scsi_eh_3]
(root,0,0,00:00:00/196-13:07:39,214) [scsi_tmf_3]
(root,0,0,00:00:00/196-13:07:39,215) [scsi_eh_4]
(root,0,0,00:00:00/196-13:07:39,216) [scsi_tmf_4]
(root,0,0,00:00:00/196-13:07:39,217) [scsi_eh_5]
(root,0,0,00:00:00/196-13:07:39,218) [scsi_tmf_5]
(root,0,0,00:05:02/196-13:07:39,224) [kworker/1:1H-kblockd]
(root,0,0,00:03:47/196-13:07:39,225) [kworker/5:1H-kblockd]
(root,0,0,00:05:26/196-13:07:39,236) [kworker/0:1H-kblockd]
(root,0,0,00:03:55/196-13:07:39,237) [kworker/4:1H-kblockd]
(root,0,0,00:55:11/196-13:07:39,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/196-13:07:38,250) [raid5wq]
(root,0,0,00:05:36/196-13:07:33,309) [kworker/7:1H-kblockd]
(root,0,0,00:03:56/196-13:07:18,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:37/196-13:07:18,452) [md0_raid1]
(root,0,0,00:00:02/196-13:07:18,456) [md1_raid1]
(root,0,0,01:25:24/196-13:07:18,460) [md2_raid1]
(root,0,0,00:09:25/196-13:07:18,476) [jbd2/md2-8]
(root,0,0,00:00:00/196-13:07:18,477) [ext4-rsv-conver]
(root,0,0,00:04:06/196-13:07:18,490) [kworker/3:1H-kblockd]
(root,187724,91744,01:10:37/196-13:07:18,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/196-13:07:17,543) [rpciod]
(root,0,0,00:00:00/196-13:07:17,544) [xprtiod]
(root,0,0,00:00:00/196-13:07:17,547) [spl_system_task]
(root,0,0,00:00:00/196-13:07:17,548) [spl_delay_taskq]
(root,0,0,00:00:00/196-13:07:17,549) [spl_dynamic_tas]
(root,0,0,00:00:00/196-13:07:17,550) [spl_kmem_cache]
(root,22980,4716,00:21:18/196-13:07:17,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/196-13:07:17,560) [zvol]
(root,0,0,00:00:00/196-13:07:17,563) [arc_prune]
(root,0,0,00:05:04/196-13:07:17,564) [arc_evict]
(root,0,0,00:04:44/196-13:07:17,565) [arc_reap]
(root,0,0,00:00:00/196-13:07:17,567) [dbu_evict]
(root,0,0,00:04:35/196-13:07:17,568) [dbuf_evict]
(root,0,0,00:00:00/196-13:07:17,640) [z_vdev_file]
(root,0,0,00:02:21/196-13:07:17,642) [l2arc_feed]
(root,0,0,00:00:00/196-13:07:17,679) [cryptd]
(root,4816,2672,00:00:06/196-13:07:17,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/196-13:07:17,719) [jbd2/md1-8]
(root,0,0,00:00:00/196-13:07:17,720) [ext4-rsv-conver]
(_rpc,7268,3984,00:00:25/196-13:07:17,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,4464,00:00:16/196-13:07:17,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:31:03/196-13:07:17,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:06:59/196-13:07:17,787) /usr/sbin/watchdog-mux
(messagebus,9524,4264,00:15:44/196-13:07:17,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,4044,00:27:10/196-13:07:17,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,5292,00:01:47/196-13:07:17,792) /lib/systemd/systemd-logind
(root,12244,5216,00:00:04/196-13:07:17,795) /usr/sbin/smartd -n
(root,164148,3720,00:00:00/196-13:07:17,798) /usr/sbin/zed -F
(root,224732,1980,00:00:20/196-13:07:17,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1036,00:00:00/196-13:07:17,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1340,00:00:05/196-13:07:17,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2004,00:00:00/196-13:07:16,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:06:40/196-13:07:16,969) bpfilter_umh
(root,13808,6052,00:11:45/196-13:07:16,983) /usr/sbin/sshd -D
(root,5940,1500,00:00:00/196-13:07:16,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,796380,4124,00:53:57/196-13:07:16,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,735648,55156,03:32:50/196-13:07:16,1104) /usr/bin/pmxcfs
(root,9600,2064,00:00:53/196-13:07:16,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4136,00:00:38/196-13:07:16,1203) /usr/lib/postfix/sbin/master -w
(postfix,43956,7336,00:00:07/196-13:07:16,1205) qmgr -l -t unix -u
(root,8832,2480,00:00:20/196-13:07:15,1218) /usr/sbin/cron -f
(root,304368,31352,07:16:58/196-13:07:15,1224) pve-firewall
(root,303056,38776,17:16:28/196-13:07:15,1226) pvestatd
(root,353788,3900,00:02:16/196-13:07:14,1249) pvedaemon
(root,336348,9328,00:16:11/196-13:07:14,1258) pve-ha-crm
(www-data,355132,144124,00:04:58/196-13:07:14,1259) pveproxy
(www-data,68908,57564,00:03:10/196-13:07:13,1265) spiceproxy
(root,335964,32520,00:26:40/196-13:07:13,1267) pve-ha-lrm
(root,5449912,2513492,9-05:30:47/196-13:07:12,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:14/196-13:07:12,1285) [kvm-nx-lpage-re]
(root,0,0,16:12:04/196-13:07:12,1305) [vhost-1281]
(root,0,0,14:03:02/196-13:07:12,1324) [vhost-1281]
(root,0,0,01:22:44/196-13:07:12,1329) [kvm-pit/1281]
(root,14266556,8678756,44-14:25:37/196-13:07:09,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:06:54/196-13:07:09,1348) [kvm-nx-lpage-re]
(root,0,0,01:09:24/196-13:07:08,1367) [vhost-1344]
(root,0,0,01:36:59/196-13:07:08,1372) [kvm-pit/1344]
(root,0,0,00:00:00/196-13:07:05,1374) [dio/md2]
(root,3258760,2105576,44-19:49:47/196-13:07:05,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:22/196-13:07:05,1415) [kvm-nx-lpage-re]
(root,0,0,08:04:25/196-13:07:04,1434) [vhost-1411]
(root,0,0,00:00:00/196-13:07:04,1437) [kvm-pit/1411]
(root,0,0,00:00:00/196-13:07:03,1455) [ib-comp-wq]
(root,0,0,00:00:00/196-13:07:03,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/196-13:07:03,1457) [ib_mcast]
(root,0,0,00:00:00/196-13:07:03,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/196-13:07:03,1459) [rdma_cm]
(root,0,0,00:00:00/196-13:07:03,1460) [cifsiod]
(root,0,0,00:00:00/196-13:07:03,1461) [smb3decryptd]
(root,0,0,00:00:00/196-13:07:03,1462) [cifsfileinfoput]
(root,0,0,00:00:00/196-13:07:03,1463) [cifsoplockd]
(root,0,0,00:12:04/196-13:07:03,1465) [cifsd]
(root,0,0,00:14:46/196-13:07:03,1498) [cifsd]
(root,7092728,4034112,12-20:55:31/196-13:07:00,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:16/196-13:07:00,1519) [kvm-nx-lpage-re]
(root,0,0,02:29:56/196-13:07:00,1538) [vhost-1515]
(root,0,0,00:00:00/196-13:07:00,1543) [kvm-pit/1515]
(root,20715288,17042060,15-09:29:22/196-13:06:56,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:55/196-13:06:56,1561) [kvm-nx-lpage-re]
(root,0,0,01:07:26/196-13:06:56,1580) [vhost-1557]
(root,0,0,00:00:00/196-13:06:56,1585) [kvm-pit/1557]
(root,18993688,6625364,10-21:37:11/196-13:06:52,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:41/196-13:06:52,1628) [kvm-nx-lpage-re]
(root,0,0,00:03:02/196-13:06:52,1647) [vhost-1624]
(root,0,0,00:00:00/196-13:06:52,1652) [kvm-pit/1624]
(root,5877720,4422088,24-23:40:53/196-13:06:48,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:02:21/196-13:06:48,1669) [kvm-nx-lpage-re]
(root,0,0,01:23:55/196-13:06:48,1690) [vhost-1665]
(root,0,0,00:00:00/196-13:06:48,1693) [kvm-pit/1665]
(root,0,0,00:00:00/47:17,1705) [kworker/1:1-cgroup_destroy]
(root,10397520,7333348,6-20:36:27/196-13:06:44,1733) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:30/196-13:06:44,1737) [kvm-nx-lpage-re]
(root,0,0,00:05:51/196-13:06:44,1756) [vhost-1733]
(root,0,0,01:35:08/196-13:06:44,1761) [kvm-pit/1733]
(root,0,0,00:00:00/33:29,5515) [kworker/3:1-events]
(root,0,0,00:00:00/27:42,7058) [kworker/u16:0-events_power_efficient]
(root,0,0,00:00:00/25:29,7619) [kworker/3:0-events]
(root,0,0,00:00:00/24:29,7875) [kworker/5:3-cgroup_destroy]
(root,361880,28440,00:00:09/7-06:48:29,8921) pvedaemon worker
(root,0,0,00:00:00/19:29,9191) [kworker/2:2-events]
(root,0,0,00:00:00/19:01,9276) [kworker/6:4-dio/md2]
(root,0,0,00:00:00/18:29,9458) [kworker/7:3-events]
(root,0,0,00:00:00/16:29,9985) [kworker/2:3-events]
(root,0,0,00:00:00/15:44,10218) [kworker/5:0-events]
(root,0,0,00:00:00/13:20,10812) [kworker/7:1-cgroup_destroy]
(root,0,0,00:00:00/12:29,11050) [kworker/4:1-cgroup_destroy]
(root,0,0,00:00:00/12:29,11051) [kworker/4:3-events]
(root,0,0,00:00:00/11:01,11405) [kworker/0:1-events]
(root,0,0,00:00:00/09:04,11936) [kworker/6:0-cgroup_destroy]
(root,0,0,00:00:00/08:03,12201) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/07:29,12381) [kworker/0:3-events]
(root,0,0,00:00:00/07:00,12469) [kworker/1:2-events]
(root,0,0,00:00:00/06:29,12648) [kworker/5:1-cgroup_destroy]
(root,0,0,00:00:00/03:29,13450) [kworker/4:0-events]
(root,0,0,00:00:00/02:52,13568) [kworker/6:1-dio/md2]
(root,0,0,00:00:00/02:29,13716) [kworker/7:0]
(root,0,0,00:00:00/01:45,13929) [kworker/1:0-events]
(root,0,0,00:00:00/01:29,13984) [kworker/5:2-events]
(root,0,0,00:00:00/00:29,14249) [kworker/1:3-events]
(root,7188,3264,00:00:00/00:00,14508) /bin/bash /usr/bin/check_mk_agent
(root,7632,2688,00:00:00/00:00,14534) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,980,00:00:00/00:00,14535) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,361880,27512,00:00:08/6-16:27:17,14612) pvedaemon worker
(root,361880,32088,00:00:20/11-20:28:21,18044) pvedaemon worker
(www-data,76912,54812,00:00:00/05:16:28,26451) spiceproxy worker
(root,86168,2112,00:00:01/05:16:27,26453) /usr/sbin/pvefw-logger
(www-data,356252,131996,00:00:00/05:16:27,26457) pveproxy worker
(www-data,357196,132704,00:00:00/05:16:27,26458) pveproxy worker
(www-data,370696,140452,00:00:00/05:16:27,26459) pveproxy worker
(postfix,43844,7744,00:00:00/01:12:07,27051) pickup -l -t unix -u -c

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:cd:91:13:59:dc brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-01-18 04:16

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c423124ff7c

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,7560,00:16:06/164-07:26:06,1) /sbin/init
(root,0,0,00:00:09/164-07:26:06,2) [kthreadd]
(root,0,0,00:00:00/164-07:26:06,3) [rcu_gp]
(root,0,0,00:00:00/164-07:26:06,4) [rcu_par_gp]
(root,0,0,00:00:00/164-07:26:06,6) [kworker/0:0H]
(root,0,0,00:00:00/164-07:26:06,9) [mm_percpu_wq]
(root,0,0,00:03:28/164-07:26:06,10) [ksoftirqd/0]
(root,0,0,00:34:31/164-07:26:06,11) [rcu_sched]
(root,0,0,00:00:37/164-07:26:06,12) [migration/0]
(root,0,0,00:00:00/164-07:26:06,13) [idle_inject/0]
(root,0,0,00:00:00/164-07:26:06,14) [cpuhp/0]
(root,0,0,00:00:00/164-07:26:06,15) [cpuhp/1]
(root,0,0,00:00:00/164-07:26:06,16) [idle_inject/1]
(root,0,0,00:00:36/164-07:26:06,17) [migration/1]
(root,0,0,00:02:38/164-07:26:06,18) [ksoftirqd/1]
(root,0,0,00:00:00/164-07:26:06,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/164-07:26:06,21) [cpuhp/2]
(root,0,0,00:00:00/164-07:26:06,22) [idle_inject/2]
(root,0,0,00:00:37/164-07:26:06,23) [migration/2]
(root,0,0,00:02:02/164-07:26:06,24) [ksoftirqd/2]
(root,0,0,00:00:00/164-07:26:06,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/164-07:26:06,27) [cpuhp/3]
(root,0,0,00:00:00/164-07:26:06,28) [idle_inject/3]
(root,0,0,00:00:52/164-07:26:06,29) [migration/3]
(root,0,0,00:01:35/164-07:26:06,30) [ksoftirqd/3]
(root,0,0,00:00:00/164-07:26:06,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/164-07:26:06,33) [cpuhp/4]
(root,0,0,00:00:00/164-07:26:06,34) [idle_inject/4]
(root,0,0,00:00:35/164-07:26:06,35) [migration/4]
(root,0,0,00:01:25/164-07:26:06,36) [ksoftirqd/4]
(root,0,0,00:00:00/164-07:26:06,38) [kworker/4:0H]
(root,0,0,00:00:00/164-07:26:06,39) [cpuhp/5]
(root,0,0,00:00:00/164-07:26:06,40) [idle_inject/5]
(root,0,0,00:00:37/164-07:26:06,41) [migration/5]
(root,0,0,00:22:04/164-07:26:06,42) [ksoftirqd/5]
(root,0,0,00:00:00/164-07:26:06,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/164-07:26:06,45) [cpuhp/6]
(root,0,0,00:00:00/164-07:26:06,46) [idle_inject/6]
(root,0,0,00:00:35/164-07:26:06,47) [migration/6]
(root,0,0,00:06:52/164-07:26:06,48) [ksoftirqd/6]
(root,0,0,00:00:00/164-07:26:06,50) [kworker/6:0H]
(root,0,0,00:00:00/164-07:26:06,51) [cpuhp/7]
(root,0,0,00:00:00/164-07:26:06,52) [idle_inject/7]
(root,0,0,00:00:37/164-07:26:06,53) [migration/7]
(root,0,0,00:00:49/164-07:26:06,54) [ksoftirqd/7]
(root,0,0,00:00:00/164-07:26:06,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/164-07:26:06,57) [kdevtmpfs]
(root,0,0,00:00:00/164-07:26:06,58) [netns]
(root,0,0,00:00:00/164-07:26:06,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/164-07:26:06,60) [kauditd]
(root,0,0,00:00:05/164-07:26:06,62) [khungtaskd]
(root,0,0,00:00:00/164-07:26:06,63) [oom_reaper]
(root,0,0,00:00:00/164-07:26:06,64) [writeback]
(root,0,0,00:00:00/164-07:26:06,65) [kcompactd0]
(root,0,0,00:00:00/164-07:26:06,66) [ksmd]
(root,0,0,00:01:34/164-07:26:06,67) [khugepaged]
(root,0,0,00:00:00/164-07:26:06,113) [kintegrityd]
(root,0,0,00:00:00/164-07:26:06,114) [kblockd]
(root,0,0,00:00:00/164-07:26:06,115) [blkcg_punt_bio]
(root,0,0,00:00:00/164-07:26:06,116) [tpm_dev_wq]
(root,0,0,00:00:00/164-07:26:06,117) [ata_sff]
(root,0,0,00:00:00/164-07:26:06,118) [md]
(root,0,0,00:00:00/164-07:26:06,119) [edac-poller]
(root,0,0,00:00:00/164-07:26:06,120) [devfreq_wq]
(root,0,0,00:00:00/164-07:26:06,121) [watchdogd]
(root,0,0,00:08:47/164-07:26:06,126) [kswapd0]
(root,0,0,00:00:00/164-07:26:06,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/164-07:26:06,129) [kthrotld]
(root,0,0,00:00:00/164-07:26:06,130) [acpi_thermal_pm]
(root,0,0,00:00:00/164-07:26:06,131) [nvme-wq]
(root,0,0,00:00:00/164-07:26:06,132) [nvme-reset-wq]
(root,0,0,00:00:00/164-07:26:06,133) [nvme-delete-wq]
(root,0,0,00:00:00/164-07:26:06,136) [ipv6_addrconf]
(root,0,0,00:00:00/164-07:26:06,145) [kstrp]
(root,0,0,00:00:00/164-07:26:06,146) [kworker/u17:0]
(root,0,0,00:00:00/164-07:26:06,161) [charger_manager]
(root,0,0,00:00:00/164-07:26:05,207) [scsi_eh_0]
(root,0,0,00:00:00/164-07:26:05,208) [scsi_tmf_0]
(root,0,0,00:00:00/164-07:26:05,209) [scsi_eh_1]
(root,0,0,00:00:00/164-07:26:05,210) [scsi_tmf_1]
(root,0,0,00:00:00/164-07:26:05,211) [scsi_eh_2]
(root,0,0,00:00:00/164-07:26:05,212) [scsi_tmf_2]
(root,0,0,00:00:00/164-07:26:05,213) [scsi_eh_3]
(root,0,0,00:00:00/164-07:26:05,214) [scsi_tmf_3]
(root,0,0,00:00:00/164-07:26:05,215) [scsi_eh_4]
(root,0,0,00:00:00/164-07:26:05,216) [scsi_tmf_4]
(root,0,0,00:00:00/164-07:26:05,217) [scsi_eh_5]
(root,0,0,00:00:00/164-07:26:05,218) [scsi_tmf_5]
(root,0,0,00:04:03/164-07:26:05,224) [kworker/1:1H-kblockd]
(root,0,0,00:02:59/164-07:26:05,225) [kworker/5:1H-kblockd]
(root,0,0,00:04:23/164-07:26:05,236) [kworker/0:1H-kblockd]
(root,0,0,00:03:06/164-07:26:05,237) [kworker/4:1H-kblockd]
(root,0,0,00:41:58/164-07:26:05,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/164-07:26:04,250) [raid5wq]
(root,0,0,00:04:31/164-07:25:59,309) [kworker/7:1H-kblockd]
(root,0,0,00:03:07/164-07:25:44,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:31/164-07:25:44,452) [md0_raid1]
(root,0,0,00:00:01/164-07:25:44,456) [md1_raid1]
(root,0,0,01:12:53/164-07:25:44,460) [md2_raid1]
(root,0,0,00:07:27/164-07:25:44,476) [jbd2/md2-8]
(root,0,0,00:00:00/164-07:25:44,477) [ext4-rsv-conver]
(root,0,0,00:03:15/164-07:25:44,490) [kworker/3:1H-kblockd]
(root,362408,11556,00:01:33/91-11:20:21,513) pvedaemon worker
(root,250272,147508,00:57:03/164-07:25:44,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/164-07:25:43,543) [rpciod]
(root,0,0,00:00:00/164-07:25:43,544) [xprtiod]
(root,0,0,00:00:00/164-07:25:43,547) [spl_system_task]
(root,0,0,00:00:00/164-07:25:43,548) [spl_delay_taskq]
(root,0,0,00:00:00/164-07:25:43,549) [spl_dynamic_tas]
(root,0,0,00:00:00/164-07:25:43,550) [spl_kmem_cache]
(root,22980,4872,00:17:47/164-07:25:43,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/164-07:25:43,560) [zvol]
(root,0,0,00:00:00/164-07:25:43,563) [arc_prune]
(root,0,0,00:04:15/164-07:25:43,564) [arc_evict]
(root,0,0,00:03:58/164-07:25:43,565) [arc_reap]
(root,0,0,00:00:00/164-07:25:43,567) [dbu_evict]
(root,0,0,00:03:51/164-07:25:43,568) [dbuf_evict]
(root,0,0,00:00:00/164-07:25:43,640) [z_vdev_file]
(root,0,0,00:01:57/164-07:25:43,642) [l2arc_feed]
(root,0,0,00:00:00/164-07:25:43,679) [cryptd]
(root,4816,2672,00:00:05/164-07:25:43,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/164-07:25:43,719) [jbd2/md1-8]
(root,0,0,00:00:00/164-07:25:43,720) [ext4-rsv-conver]
(_rpc,7268,3984,00:00:21/164-07:25:43,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,5000,00:00:13/164-07:25:43,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:24:55/164-07:25:43,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:05:51/164-07:25:43,787) /usr/sbin/watchdog-mux
(messagebus,9524,4240,00:13:26/164-07:25:43,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,4052,00:21:45/164-07:25:43,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,5800,00:01:29/164-07:25:43,792) /lib/systemd/systemd-logind
(root,12244,5216,00:00:03/164-07:25:43,795) /usr/sbin/smartd -n
(root,164148,3772,00:00:00/164-07:25:43,798) /usr/sbin/zed -F
(root,224732,1980,00:00:16/164-07:25:43,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1036,00:00:00/164-07:25:43,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1340,00:00:04/164-07:25:43,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2112,00:00:00/164-07:25:42,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:05:35/164-07:25:42,969) bpfilter_umh
(root,13808,6056,00:09:59/164-07:25:42,983) /usr/sbin/sshd -D
(root,5940,1500,00:00:00/164-07:25:42,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,804576,3980,00:47:09/164-07:25:42,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,735648,56188,02:59:33/164-07:25:42,1104) /usr/bin/pmxcfs
(root,9600,2064,00:00:44/164-07:25:42,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4164,00:00:32/164-07:25:42,1203) /usr/lib/postfix/sbin/master -w
(postfix,43956,7480,00:00:06/164-07:25:42,1205) qmgr -l -t unix -u
(root,8832,2512,00:00:17/164-07:25:41,1218) /usr/sbin/cron -f
(root,304368,31640,06:03:13/164-07:25:41,1224) pve-firewall
(root,303056,38932,14:26:09/164-07:25:41,1226) pvestatd
(root,353788,3168,00:01:53/164-07:25:40,1249) pvedaemon
(root,336348,9628,00:13:32/164-07:25:40,1258) pve-ha-crm
(www-data,355140,144072,00:04:10/164-07:25:40,1259) pveproxy
(www-data,68828,57768,00:02:39/164-07:25:39,1265) spiceproxy
(root,335964,32792,00:22:18/164-07:25:39,1267) pve-ha-lrm
(root,5449912,2456852,7-15:45:24/164-07:25:38,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:12/164-07:25:38,1285) [kvm-nx-lpage-re]
(root,0,0,13:15:53/164-07:25:38,1305) [vhost-1281]
(root,0,0,11:33:34/164-07:25:38,1324) [vhost-1281]
(root,0,0,01:09:36/164-07:25:38,1329) [kvm-pit/1281]
(root,14050984,8560264,36-23:02:12/164-07:25:35,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:44/164-07:25:35,1348) [kvm-nx-lpage-re]
(root,0,0,00:53:51/164-07:25:34,1367) [vhost-1344]
(root,0,0,01:21:38/164-07:25:34,1372) [kvm-pit/1344]
(root,0,0,00:00:00/164-07:25:31,1374) [dio/md2]
(root,3258760,2101532,36-14:04:29/164-07:25:31,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:18/164-07:25:31,1415) [kvm-nx-lpage-re]
(root,0,0,06:37:46/164-07:25:30,1434) [vhost-1411]
(root,0,0,00:00:00/164-07:25:30,1437) [kvm-pit/1411]
(root,0,0,00:00:00/164-07:25:29,1455) [ib-comp-wq]
(root,0,0,00:00:00/164-07:25:29,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/164-07:25:29,1457) [ib_mcast]
(root,0,0,00:00:00/164-07:25:29,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/164-07:25:29,1459) [rdma_cm]
(root,0,0,00:00:00/164-07:25:29,1460) [cifsiod]
(root,0,0,00:00:00/164-07:25:29,1461) [smb3decryptd]
(root,0,0,00:00:00/164-07:25:29,1462) [cifsfileinfoput]
(root,0,0,00:00:00/164-07:25:29,1463) [cifsoplockd]
(root,0,0,00:09:40/164-07:25:29,1465) [cifsd]
(root,0,0,00:12:13/164-07:25:29,1498) [cifsd]
(root,6950960,3906836,10-17:13:59/164-07:25:26,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:03/164-07:25:26,1519) [kvm-nx-lpage-re]
(root,0,0,02:05:38/164-07:25:26,1538) [vhost-1515]
(root,0,0,00:00:00/164-07:25:26,1543) [kvm-pit/1515]
(root,20565632,16893248,12-19:59:35/164-07:25:22,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:31/164-07:25:22,1561) [kvm-nx-lpage-re]
(root,0,0,00:55:38/164-07:25:22,1580) [vhost-1557]
(root,0,0,00:00:00/164-07:25:22,1585) [kvm-pit/1557]
(root,18993688,5953892,9-02:28:10/164-07:25:18,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:34/164-07:25:18,1628) [kvm-nx-lpage-re]
(root,0,0,00:02:33/164-07:25:18,1647) [vhost-1624]
(root,0,0,00:00:00/164-07:25:18,1652) [kvm-pit/1624]
(root,5736068,4297068,20-19:47:28/164-07:25:14,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:57/164-07:25:14,1669) [kvm-nx-lpage-re]
(root,0,0,01:10:49/164-07:25:14,1690) [vhost-1665]
(root,0,0,00:00:00/164-07:25:14,1693) [kvm-pit/1665]
(root,10301100,7245364,4-16:03:25/164-07:25:10,1733) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:24/164-07:25:10,1737) [kvm-nx-lpage-re]
(root,0,0,00:03:52/164-07:25:10,1756) [vhost-1733]
(root,0,0,01:19:45/164-07:25:10,1761) [kvm-pit/1733]
(root,363192,11848,00:01:31/91-10:42:17,10840) pvedaemon worker
(root,362400,12548,00:01:07/66-05:53:40,16649) pvedaemon worker
(root,0,0,00:00:00/38:55,17720) [kworker/1:2-mm_percpu_wq]
(root,0,0,00:00:00/34:42,18888) [kworker/6:2-events]
(root,0,0,00:00:00/34:39,18892) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/29:55,20236) [kworker/0:3-cgroup_destroy]
(root,0,0,00:00:00/28:55,20518) [kworker/2:2-cgroup_destroy]
(postfix,43844,7692,00:00:00/25:28,21441) pickup -l -t unix -u -c
(root,0,0,00:00:00/18:55,23276) [kworker/5:0-events]
(root,86168,2004,00:00:04/23:34:54,24025) /usr/sbin/pvefw-logger
(www-data,76956,54968,00:00:01/23:34:54,24028) spiceproxy worker
(www-data,355584,130252,00:00:00/23:34:54,24029) pveproxy worker
(www-data,355860,131024,00:00:00/23:34:54,24030) pveproxy worker
(www-data,367808,137676,00:00:00/23:34:54,24031) pveproxy worker
(root,0,0,00:00:00/15:55,24114) [kworker/3:0-events]
(root,0,0,00:00:00/14:55,24387) [kworker/0:1-events]
(root,0,0,00:00:00/12:55,24930) [kworker/5:1-cgroup_destroy]
(root,0,0,00:00:00/11:55,25214) [kworker/4:0-events]
(root,0,0,00:00:00/11:55,25215) [kworker/4:2-events]
(root,0,0,00:00:00/10:29,25568) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/09:21,25879) [kworker/1:1-events]
(root,0,0,00:00:00/08:55,26029) [kworker/3:2-events]
(root,0,0,00:00:00/08:00,26302) [kworker/6:1]
(root,0,0,00:00:00/06:55,26585) [kworker/7:2-events]
(root,0,0,00:00:00/06:55,26586) [kworker/7:3-events]
(root,0,0,00:00:00/05:56,26865) [kworker/2:1-events]
(root,0,0,00:00:00/05:56,26866) [kworker/2:3-events]
(root,0,0,00:00:00/04:53,27183) [kworker/4:1]
(root,0,0,00:00:00/04:02,27416) [kworker/1:0-cgroup_destroy]
(root,0,0,00:00:00/02:55,27705) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/02:55,27706) [kworker/0:2-events]
(root,0,0,00:00:00/01:55,27988) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/00:55,28274) [kworker/1:3-events]
(root,0,0,00:00:00/00:50,28301) [kworker/u16:0-events_unbound]
(root,14736,7644,00:00:00/00:08,28509) sshd: root [priv]
(sshd,13808,4840,00:00:00/00:08,28510) sshd: root [net]
(root,7188,3260,00:00:00/00:00,28653) /bin/bash /usr/bin/check_mk_agent
(root,7632,2672,00:00:00/00:00,28679) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,984,00:00:00/00:00,28680) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:cd:91:13:59:dc brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-12-16 22:34

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c4233381647

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,7584,00:15:04/154-05:50:32,1) /sbin/init
(root,0,0,00:00:09/154-05:50:32,2) [kthreadd]
(root,0,0,00:00:00/154-05:50:32,3) [rcu_gp]
(root,0,0,00:00:00/154-05:50:32,4) [rcu_par_gp]
(root,0,0,00:00:00/154-05:50:32,6) [kworker/0:0H]
(root,0,0,00:00:00/154-05:50:32,9) [mm_percpu_wq]
(root,0,0,00:03:13/154-05:50:32,10) [ksoftirqd/0]
(root,0,0,00:32:21/154-05:50:32,11) [rcu_sched]
(root,0,0,00:00:35/154-05:50:32,12) [migration/0]
(root,0,0,00:00:00/154-05:50:32,13) [idle_inject/0]
(root,0,0,00:00:00/154-05:50:32,14) [cpuhp/0]
(root,0,0,00:00:00/154-05:50:32,15) [cpuhp/1]
(root,0,0,00:00:00/154-05:50:32,16) [idle_inject/1]
(root,0,0,00:00:34/154-05:50:32,17) [migration/1]
(root,0,0,00:02:27/154-05:50:32,18) [ksoftirqd/1]
(root,0,0,00:00:00/154-05:50:32,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/154-05:50:32,21) [cpuhp/2]
(root,0,0,00:00:00/154-05:50:32,22) [idle_inject/2]
(root,0,0,00:00:34/154-05:50:32,23) [migration/2]
(root,0,0,00:01:54/154-05:50:32,24) [ksoftirqd/2]
(root,0,0,00:00:00/154-05:50:32,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/154-05:50:32,27) [cpuhp/3]
(root,0,0,00:00:00/154-05:50:32,28) [idle_inject/3]
(root,0,0,00:00:49/154-05:50:32,29) [migration/3]
(root,0,0,00:01:29/154-05:50:32,30) [ksoftirqd/3]
(root,0,0,00:00:00/154-05:50:32,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/154-05:50:32,33) [cpuhp/4]
(root,0,0,00:00:00/154-05:50:32,34) [idle_inject/4]
(root,0,0,00:00:33/154-05:50:32,35) [migration/4]
(root,0,0,00:01:20/154-05:50:32,36) [ksoftirqd/4]
(root,0,0,00:00:00/154-05:50:32,38) [kworker/4:0H]
(root,0,0,00:00:00/154-05:50:32,39) [cpuhp/5]
(root,0,0,00:00:00/154-05:50:32,40) [idle_inject/5]
(root,0,0,00:00:35/154-05:50:32,41) [migration/5]
(root,0,0,00:20:42/154-05:50:32,42) [ksoftirqd/5]
(root,0,0,00:00:00/154-05:50:32,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/154-05:50:32,45) [cpuhp/6]
(root,0,0,00:00:00/154-05:50:32,46) [idle_inject/6]
(root,0,0,00:00:33/154-05:50:32,47) [migration/6]
(root,0,0,00:06:24/154-05:50:32,48) [ksoftirqd/6]
(root,0,0,00:00:00/154-05:50:32,50) [kworker/6:0H]
(root,0,0,00:00:00/154-05:50:32,51) [cpuhp/7]
(root,0,0,00:00:00/154-05:50:32,52) [idle_inject/7]
(root,0,0,00:00:35/154-05:50:32,53) [migration/7]
(root,0,0,00:00:46/154-05:50:32,54) [ksoftirqd/7]
(root,0,0,00:00:00/154-05:50:32,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/154-05:50:32,57) [kdevtmpfs]
(root,0,0,00:00:00/154-05:50:32,58) [netns]
(root,0,0,00:00:00/154-05:50:32,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/154-05:50:32,60) [kauditd]
(root,0,0,00:00:04/154-05:50:32,62) [khungtaskd]
(root,0,0,00:00:00/154-05:50:32,63) [oom_reaper]
(root,0,0,00:00:00/154-05:50:32,64) [writeback]
(root,0,0,00:00:00/154-05:50:32,65) [kcompactd0]
(root,0,0,00:00:00/154-05:50:32,66) [ksmd]
(root,0,0,00:01:24/154-05:50:32,67) [khugepaged]
(root,0,0,00:00:00/154-05:50:32,113) [kintegrityd]
(root,0,0,00:00:00/154-05:50:32,114) [kblockd]
(root,0,0,00:00:00/154-05:50:32,115) [blkcg_punt_bio]
(root,0,0,00:00:00/154-05:50:32,116) [tpm_dev_wq]
(root,0,0,00:00:00/154-05:50:32,117) [ata_sff]
(root,0,0,00:00:00/154-05:50:32,118) [md]
(root,0,0,00:00:00/154-05:50:32,119) [edac-poller]
(root,0,0,00:00:00/154-05:50:32,120) [devfreq_wq]
(root,0,0,00:00:00/154-05:50:32,121) [watchdogd]
(root,0,0,00:08:09/154-05:50:32,126) [kswapd0]
(root,0,0,00:00:00/154-05:50:32,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/154-05:50:32,129) [kthrotld]
(root,0,0,00:00:00/154-05:50:32,130) [acpi_thermal_pm]
(root,0,0,00:00:00/154-05:50:32,131) [nvme-wq]
(root,0,0,00:00:00/154-05:50:32,132) [nvme-reset-wq]
(root,0,0,00:00:00/154-05:50:32,133) [nvme-delete-wq]
(root,0,0,00:00:00/154-05:50:32,136) [ipv6_addrconf]
(root,0,0,00:00:00/154-05:50:32,145) [kstrp]
(root,0,0,00:00:00/154-05:50:32,146) [kworker/u17:0]
(root,0,0,00:00:00/154-05:50:32,161) [charger_manager]
(root,0,0,00:00:00/154-05:50:31,207) [scsi_eh_0]
(root,0,0,00:00:00/154-05:50:31,208) [scsi_tmf_0]
(root,0,0,00:00:00/154-05:50:31,209) [scsi_eh_1]
(root,0,0,00:00:00/154-05:50:31,210) [scsi_tmf_1]
(root,0,0,00:00:00/154-05:50:31,211) [scsi_eh_2]
(root,0,0,00:00:00/154-05:50:31,212) [scsi_tmf_2]
(root,0,0,00:00:00/154-05:50:31,213) [scsi_eh_3]
(root,0,0,00:00:00/154-05:50:31,214) [scsi_tmf_3]
(root,0,0,00:00:00/154-05:50:31,215) [scsi_eh_4]
(root,0,0,00:00:00/154-05:50:31,216) [scsi_tmf_4]
(root,0,0,00:00:00/154-05:50:31,217) [scsi_eh_5]
(root,0,0,00:00:00/154-05:50:31,218) [scsi_tmf_5]
(root,0,0,00:03:49/154-05:50:31,224) [kworker/1:1H-kblockd]
(root,0,0,00:02:49/154-05:50:31,225) [kworker/5:1H-kblockd]
(root,0,0,00:04:07/154-05:50:31,236) [kworker/0:1H-kblockd]
(root,0,0,00:02:55/154-05:50:31,237) [kworker/4:1H-kblockd]
(root,0,0,00:39:05/154-05:50:31,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/154-05:50:30,250) [raid5wq]
(root,0,0,00:04:15/154-05:50:25,309) [kworker/7:1H-kblockd]
(root,0,0,00:02:56/154-05:50:10,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:31/154-05:50:10,452) [md0_raid1]
(root,0,0,00:00:01/154-05:50:10,456) [md1_raid1]
(root,0,0,01:10:16/154-05:50:10,460) [md2_raid1]
(root,0,0,00:06:57/154-05:50:10,476) [jbd2/md2-8]
(root,0,0,00:00:00/154-05:50:10,477) [ext4-rsv-conver]
(root,0,0,00:03:04/154-05:50:10,490) [kworker/3:1H-kblockd]
(root,362408,11932,00:01:23/81-09:44:47,513) pvedaemon worker
(root,232300,133056,00:52:22/154-05:50:10,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/154-05:50:09,543) [rpciod]
(root,0,0,00:00:00/154-05:50:09,544) [xprtiod]
(root,0,0,00:00:00/154-05:50:09,547) [spl_system_task]
(root,0,0,00:00:00/154-05:50:09,548) [spl_delay_taskq]
(root,0,0,00:00:00/154-05:50:09,549) [spl_dynamic_tas]
(root,0,0,00:00:00/154-05:50:09,550) [spl_kmem_cache]
(root,22980,4872,00:16:40/154-05:50:09,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/154-05:50:09,560) [zvol]
(root,0,0,00:00:00/154-05:50:09,563) [arc_prune]
(root,0,0,00:04:00/154-05:50:09,564) [arc_evict]
(root,0,0,00:03:44/154-05:50:09,565) [arc_reap]
(root,0,0,00:00:00/154-05:50:09,567) [dbu_evict]
(root,0,0,00:03:37/154-05:50:09,568) [dbuf_evict]
(root,0,0,00:00:00/154-05:50:09,640) [z_vdev_file]
(root,0,0,00:01:51/154-05:50:09,642) [l2arc_feed]
(root,0,0,00:00:00/154-05:50:09,679) [cryptd]
(root,4816,2672,00:00:05/154-05:50:09,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/154-05:50:09,719) [jbd2/md1-8]
(root,0,0,00:00:00/154-05:50:09,720) [ext4-rsv-conver]
(_rpc,7268,3984,00:00:19/154-05:50:09,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,5000,00:00:12/154-05:50:09,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:23:16/154-05:50:09,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:05:30/154-05:50:09,787) /usr/sbin/watchdog-mux
(messagebus,9524,4240,00:12:25/154-05:50:09,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,4060,00:19:53/154-05:50:09,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,5800,00:01:24/154-05:50:09,792) /lib/systemd/systemd-logind
(root,12244,5216,00:00:03/154-05:50:09,795) /usr/sbin/smartd -n
(root,164148,3772,00:00:00/154-05:50:09,798) /usr/sbin/zed -F
(root,224732,1980,00:00:15/154-05:50:09,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1036,00:00:00/154-05:50:09,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1340,00:00:04/154-05:50:09,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2112,00:00:00/154-05:50:08,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:05:14/154-05:50:08,969) bpfilter_umh
(root,13808,6056,00:09:16/154-05:50:08,983) /usr/sbin/sshd -D
(root,5940,1500,00:00:00/154-05:50:08,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,804576,3980,00:44:14/154-05:50:08,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,748056,62448,02:48:58/154-05:50:08,1104) /usr/bin/pmxcfs
(root,9600,2064,00:00:41/154-05:50:08,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4164,00:00:30/154-05:50:08,1203) /usr/lib/postfix/sbin/master -w
(postfix,43956,7492,00:00:06/154-05:50:08,1205) qmgr -l -t unix -u
(root,8832,2520,00:00:16/154-05:50:07,1218) /usr/sbin/cron -f
(root,304368,31728,05:40:55/154-05:50:07,1224) pve-firewall
(root,303056,39028,13:34:05/154-05:50:07,1226) pvestatd
(root,353788,3172,00:01:46/154-05:50:06,1249) pvedaemon
(root,336348,9708,00:12:42/154-05:50:06,1258) pve-ha-crm
(www-data,355168,144664,00:03:55/154-05:50:06,1259) pveproxy
(www-data,68848,57856,00:02:29/154-05:50:05,1265) spiceproxy
(root,335964,32872,00:20:55/154-05:50:05,1267) pve-ha-lrm
(root,5449912,2428444,7-03:53:41/154-05:50:04,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:11/154-05:50:04,1285) [kvm-nx-lpage-re]
(root,0,0,12:22:59/154-05:50:04,1305) [vhost-1281]
(root,0,0,10:47:59/154-05:50:04,1324) [vhost-1281]
(root,0,0,01:05:13/154-05:50:04,1329) [kvm-pit/1281]
(root,14062576,8519240,35-12:44:45/154-05:50:01,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:21/154-05:50:01,1348) [kvm-nx-lpage-re]
(root,0,0,00:50:39/154-05:50:00,1367) [vhost-1344]
(root,0,0,01:16:34/154-05:50:00,1372) [kvm-pit/1344]
(root,0,0,00:00:00/154-05:49:57,1374) [dio/md2]
(root,3258760,2105256,34-01:46:33/154-05:49:57,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:17/154-05:49:57,1415) [kvm-nx-lpage-re]
(root,0,0,06:10:00/154-05:49:56,1434) [vhost-1411]
(root,0,0,00:00:00/154-05:49:56,1437) [kvm-pit/1411]
(root,0,0,00:00:00/154-05:49:55,1455) [ib-comp-wq]
(root,0,0,00:00:00/154-05:49:55,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/154-05:49:55,1457) [ib_mcast]
(root,0,0,00:00:00/154-05:49:55,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/154-05:49:55,1459) [rdma_cm]
(root,0,0,00:00:00/154-05:49:55,1460) [cifsiod]
(root,0,0,00:00:00/154-05:49:55,1461) [smb3decryptd]
(root,0,0,00:00:00/154-05:49:55,1462) [cifsfileinfoput]
(root,0,0,00:00:00/154-05:49:55,1463) [cifsoplockd]
(root,0,0,00:08:53/154-05:49:55,1465) [cifsd]
(root,0,0,00:11:24/154-05:49:55,1498) [cifsd]
(root,6908000,3865668,10-00:57:44/154-05:49:52,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:59/154-05:49:52,1519) [kvm-nx-lpage-re]
(root,0,0,01:57:26/154-05:49:52,1538) [vhost-1515]
(root,0,0,00:00:00/154-05:49:52,1543) [kvm-pit/1515]
(root,20521680,16871724,12-00:33:28/154-05:49:48,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:24/154-05:49:48,1561) [kvm-nx-lpage-re]
(root,0,0,00:52:27/154-05:49:48,1580) [vhost-1557]
(root,0,0,00:00:00/154-05:49:48,1585) [kvm-pit/1557]
(root,18993688,5631884,8-12:49:31/154-05:49:44,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:32/154-05:49:44,1628) [kvm-nx-lpage-re]
(root,0,0,00:02:23/154-05:49:44,1647) [vhost-1624]
(root,0,0,00:00:00/154-05:49:44,1652) [kvm-pit/1624]
(root,5693144,4258604,19-13:02:54/154-05:49:40,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:50/154-05:49:40,1669) [kvm-nx-lpage-re]
(root,0,0,01:06:38/154-05:49:40,1690) [vhost-1665]
(root,0,0,00:00:00/154-05:49:40,1693) [kvm-pit/1665]
(root,10256120,6915596,4-09:46:38/154-05:49:36,1733) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:24/154-05:49:36,1737) [kvm-nx-lpage-re]
(root,0,0,00:03:44/154-05:49:36,1756) [vhost-1733]
(root,0,0,01:14:41/154-05:49:36,1761) [kvm-pit/1733]
(root,0,0,00:00:00/40:48,9232) [kworker/1:0-events]
(root,0,0,00:00:00/35:21,10640) [kworker/3:0-cgroup_destroy]
(root,363192,12336,00:01:21/81-09:06:43,10840) pvedaemon worker
(root,0,0,00:00:00/30:52,11931) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/27:21,12910) [kworker/4:3-events]
(root,0,0,00:00:00/26:21,13196) [kworker/3:3-events]
(postfix,43844,7744,00:00:00/22:40,14196) pickup -l -t unix -u -c
(root,0,0,00:00:00/18:21,15307) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/17:21,15574) [kworker/0:1-events]
(root,0,0,00:00:00/14:21,16350) [kworker/5:2-events]
(root,0,0,00:00:00/13:21,16608) [kworker/5:3-cgroup_destroy]
(root,362400,13144,00:00:57/56-04:18:06,16649) pvedaemon worker
(root,0,0,00:00:00/12:21,16869) [kworker/7:1-events]
(root,0,0,00:00:00/12:21,16870) [kworker/7:2-cgroup_destroy]
(root,0,0,00:00:00/11:25,17120) [kworker/u16:2-events_unbound]
(root,0,0,00:00:00/11:21,17128) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/11:21,17129) [kworker/2:3-events]
(root,0,0,00:00:00/10:21,17393) [kworker/6:2-dio/md2]
(root,0,0,00:00:00/09:21,17647) [kworker/0:2-events]
(root,0,0,00:00:00/08:21,17902) [kworker/6:3-events]
(root,0,0,00:00:00/06:41,18355) [kworker/1:2-events]
(root,0,0,00:00:00/03:21,19189) [kworker/4:1-events]
(root,0,0,00:00:00/03:21,19190) [kworker/4:2]
(root,0,0,00:00:00/03:19,19208) [kworker/6:0-events]
(root,0,0,00:00:00/02:21,19447) [kworker/7:0-events]
(root,0,0,00:00:00/01:36,19687) [kworker/u16:0]
(root,0,0,00:00:00/01:21,19739) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/00:55,19840) [kworker/1:1-events]
(root,0,0,00:00:00/00:21,20035) [kworker/0:3]
(root,14792,7808,00:00:00/00:00,20270) sshd: unknown [priv]
(sshd,13808,4872,00:00:00/00:00,20271) sshd: unknown [net]
(root,7188,3264,00:00:00/00:00,20275) /bin/bash /usr/bin/check_mk_agent
(root,7632,2700,00:00:00/00:00,20301) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,924,00:00:00/00:00,20302) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,86168,2036,00:00:04/21:59:20,23260) /usr/sbin/pvefw-logger
(www-data,76888,54812,00:00:00/21:59:20,23267) spiceproxy worker
(www-data,367840,137620,00:00:00/21:59:20,23269) pveproxy worker
(www-data,371496,141732,00:00:01/21:59:20,23270) pveproxy worker
(www-data,367712,138040,00:00:00/21:59:20,23271) pveproxy worker

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:cd:91:13:59:dc brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-12-06 20:59

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c4249494aca

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,7584,00:14:42/150-14:49:10,1) /sbin/init
(root,0,0,00:00:08/150-14:49:10,2) [kthreadd]
(root,0,0,00:00:00/150-14:49:10,3) [rcu_gp]
(root,0,0,00:00:00/150-14:49:10,4) [rcu_par_gp]
(root,0,0,00:00:00/150-14:49:10,6) [kworker/0:0H]
(root,0,0,00:00:00/150-14:49:10,9) [mm_percpu_wq]
(root,0,0,00:03:07/150-14:49:10,10) [ksoftirqd/0]
(root,0,0,00:31:35/150-14:49:10,11) [rcu_sched]
(root,0,0,00:00:34/150-14:49:10,12) [migration/0]
(root,0,0,00:00:00/150-14:49:10,13) [idle_inject/0]
(root,0,0,00:00:00/150-14:49:10,14) [cpuhp/0]
(root,0,0,00:00:00/150-14:49:10,15) [cpuhp/1]
(root,0,0,00:00:00/150-14:49:10,16) [idle_inject/1]
(root,0,0,00:00:34/150-14:49:10,17) [migration/1]
(root,0,0,00:02:23/150-14:49:10,18) [ksoftirqd/1]
(root,0,0,00:00:00/150-14:49:10,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/150-14:49:10,21) [cpuhp/2]
(root,0,0,00:00:00/150-14:49:10,22) [idle_inject/2]
(root,0,0,00:00:34/150-14:49:10,23) [migration/2]
(root,0,0,00:01:51/150-14:49:10,24) [ksoftirqd/2]
(root,0,0,00:00:00/150-14:49:10,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/150-14:49:10,27) [cpuhp/3]
(root,0,0,00:00:00/150-14:49:10,28) [idle_inject/3]
(root,0,0,00:00:47/150-14:49:10,29) [migration/3]
(root,0,0,00:01:26/150-14:49:10,30) [ksoftirqd/3]
(root,0,0,00:00:00/150-14:49:10,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/150-14:49:10,33) [cpuhp/4]
(root,0,0,00:00:00/150-14:49:10,34) [idle_inject/4]
(root,0,0,00:00:32/150-14:49:10,35) [migration/4]
(root,0,0,00:01:18/150-14:49:10,36) [ksoftirqd/4]
(root,0,0,00:00:00/150-14:49:10,38) [kworker/4:0H]
(root,0,0,00:00:00/150-14:49:10,39) [cpuhp/5]
(root,0,0,00:00:00/150-14:49:10,40) [idle_inject/5]
(root,0,0,00:00:35/150-14:49:10,41) [migration/5]
(root,0,0,00:20:17/150-14:49:10,42) [ksoftirqd/5]
(root,0,0,00:00:00/150-14:49:10,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/150-14:49:10,45) [cpuhp/6]
(root,0,0,00:00:00/150-14:49:10,46) [idle_inject/6]
(root,0,0,00:00:32/150-14:49:10,47) [migration/6]
(root,0,0,00:06:14/150-14:49:10,48) [ksoftirqd/6]
(root,0,0,00:00:00/150-14:49:10,50) [kworker/6:0H]
(root,0,0,00:00:00/150-14:49:10,51) [cpuhp/7]
(root,0,0,00:00:00/150-14:49:10,52) [idle_inject/7]
(root,0,0,00:00:34/150-14:49:10,53) [migration/7]
(root,0,0,00:00:45/150-14:49:10,54) [ksoftirqd/7]
(root,0,0,00:00:00/150-14:49:10,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/150-14:49:10,57) [kdevtmpfs]
(root,0,0,00:00:00/150-14:49:10,58) [netns]
(root,0,0,00:00:00/150-14:49:10,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/150-14:49:10,60) [kauditd]
(root,0,0,00:00:04/150-14:49:10,62) [khungtaskd]
(root,0,0,00:00:00/150-14:49:10,63) [oom_reaper]
(root,0,0,00:00:00/150-14:49:10,64) [writeback]
(root,0,0,00:00:00/150-14:49:10,65) [kcompactd0]
(root,0,0,00:00:00/150-14:49:10,66) [ksmd]
(root,0,0,00:01:16/150-14:49:10,67) [khugepaged]
(root,0,0,00:00:00/150-14:49:10,113) [kintegrityd]
(root,0,0,00:00:00/150-14:49:10,114) [kblockd]
(root,0,0,00:00:00/150-14:49:10,115) [blkcg_punt_bio]
(root,0,0,00:00:00/150-14:49:10,116) [tpm_dev_wq]
(root,0,0,00:00:00/150-14:49:10,117) [ata_sff]
(root,0,0,00:00:00/150-14:49:10,118) [md]
(root,0,0,00:00:00/150-14:49:10,119) [edac-poller]
(root,0,0,00:00:00/150-14:49:10,120) [devfreq_wq]
(root,0,0,00:00:00/150-14:49:10,121) [watchdogd]
(root,0,0,00:07:58/150-14:49:10,126) [kswapd0]
(root,0,0,00:00:00/150-14:49:10,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/150-14:49:10,129) [kthrotld]
(root,0,0,00:00:00/150-14:49:10,130) [acpi_thermal_pm]
(root,0,0,00:00:00/150-14:49:10,131) [nvme-wq]
(root,0,0,00:00:00/150-14:49:10,132) [nvme-reset-wq]
(root,0,0,00:00:00/150-14:49:10,133) [nvme-delete-wq]
(root,0,0,00:00:00/150-14:49:10,136) [ipv6_addrconf]
(root,0,0,00:00:00/150-14:49:10,145) [kstrp]
(root,0,0,00:00:00/150-14:49:10,146) [kworker/u17:0]
(root,0,0,00:00:00/150-14:49:10,161) [charger_manager]
(root,0,0,00:00:00/150-14:49:09,207) [scsi_eh_0]
(root,0,0,00:00:00/150-14:49:09,208) [scsi_tmf_0]
(root,0,0,00:00:00/150-14:49:09,209) [scsi_eh_1]
(root,0,0,00:00:00/150-14:49:09,210) [scsi_tmf_1]
(root,0,0,00:00:00/150-14:49:09,211) [scsi_eh_2]
(root,0,0,00:00:00/150-14:49:09,212) [scsi_tmf_2]
(root,0,0,00:00:00/150-14:49:09,213) [scsi_eh_3]
(root,0,0,00:00:00/150-14:49:09,214) [scsi_tmf_3]
(root,0,0,00:00:00/150-14:49:09,215) [scsi_eh_4]
(root,0,0,00:00:00/150-14:49:09,216) [scsi_tmf_4]
(root,0,0,00:00:00/150-14:49:09,217) [scsi_eh_5]
(root,0,0,00:00:00/150-14:49:09,218) [scsi_tmf_5]
(root,0,0,00:03:44/150-14:49:09,224) [kworker/1:1H-kblockd]
(root,0,0,00:02:45/150-14:49:09,225) [kworker/5:1H-kblockd]
(root,0,0,00:04:02/150-14:49:09,236) [kworker/0:1H-kblockd]
(root,0,0,00:02:51/150-14:49:09,237) [kworker/4:1H-kblockd]
(root,0,0,00:38:08/150-14:49:09,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/150-14:49:08,250) [raid5wq]
(root,0,0,00:04:10/150-14:49:03,309) [kworker/7:1H-kblockd]
(root,0,0,00:02:52/150-14:48:48,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:31/150-14:48:48,452) [md0_raid1]
(root,0,0,00:00:01/150-14:48:48,456) [md1_raid1]
(root,0,0,01:09:19/150-14:48:48,460) [md2_raid1]
(root,0,0,00:06:47/150-14:48:48,476) [jbd2/md2-8]
(root,0,0,00:00:00/150-14:48:48,477) [ext4-rsv-conver]
(root,0,0,00:03:00/150-14:48:48,490) [kworker/3:1H-kblockd]
(root,362408,12004,00:01:19/77-18:43:25,513) pvedaemon worker
(root,215424,111444,00:50:47/150-14:48:48,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/150-14:48:47,543) [rpciod]
(root,0,0,00:00:00/150-14:48:47,544) [xprtiod]
(root,0,0,00:00:00/150-14:48:47,547) [spl_system_task]
(root,0,0,00:00:00/150-14:48:47,548) [spl_delay_taskq]
(root,0,0,00:00:00/150-14:48:47,549) [spl_dynamic_tas]
(root,0,0,00:00:00/150-14:48:47,550) [spl_kmem_cache]
(root,22980,4872,00:16:17/150-14:48:47,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/150-14:48:47,560) [zvol]
(root,0,0,00:00:00/150-14:48:47,563) [arc_prune]
(root,0,0,00:03:55/150-14:48:47,564) [arc_evict]
(root,0,0,00:03:39/150-14:48:47,565) [arc_reap]
(root,0,0,00:00:00/150-14:48:47,567) [dbu_evict]
(root,0,0,00:03:32/150-14:48:47,568) [dbuf_evict]
(root,0,0,00:00:00/150-14:48:47,640) [z_vdev_file]
(root,0,0,00:01:48/150-14:48:47,642) [l2arc_feed]
(root,0,0,00:00:00/150-14:48:47,679) [cryptd]
(root,4816,2672,00:00:04/150-14:48:47,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/150-14:48:47,719) [jbd2/md1-8]
(root,0,0,00:00:00/150-14:48:47,720) [ext4-rsv-conver]
(_rpc,7192,3908,00:00:19/150-14:48:47,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,5000,00:00:12/150-14:48:47,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:22:44/150-14:48:47,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:05:23/150-14:48:47,787) /usr/sbin/watchdog-mux
(messagebus,9524,4240,00:12:07/150-14:48:47,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,4060,00:19:15/150-14:48:47,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,5800,00:01:22/150-14:48:47,792) /lib/systemd/systemd-logind
(root,12244,5216,00:00:03/150-14:48:47,795) /usr/sbin/smartd -n
(root,164148,3772,00:00:00/150-14:48:47,798) /usr/sbin/zed -F
(root,224732,1980,00:00:15/150-14:48:47,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1036,00:00:00/150-14:48:47,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1340,00:00:03/150-14:48:47,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2112,00:00:00/150-14:48:46,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:05:06/150-14:48:46,969) bpfilter_umh
(root,13808,6056,00:09:02/150-14:48:46,983) /usr/sbin/sshd -D
(root,5940,1500,00:00:00/150-14:48:46,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,804576,3980,00:43:12/150-14:48:46,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,735648,56184,02:45:09/150-14:48:46,1104) /usr/bin/pmxcfs
(root,9600,2112,00:00:40/150-14:48:46,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4164,00:00:29/150-14:48:46,1203) /usr/lib/postfix/sbin/master -w
(postfix,43956,7492,00:00:05/150-14:48:46,1205) qmgr -l -t unix -u
(root,8832,2520,00:00:15/150-14:48:45,1218) /usr/sbin/cron -f
(root,304368,31728,05:32:54/150-14:48:45,1224) pve-firewall
(root,303056,39028,13:15:32/150-14:48:45,1226) pvestatd
(root,353788,3172,00:01:44/150-14:48:44,1249) pvedaemon
(root,336348,9708,00:12:24/150-14:48:44,1258) pve-ha-crm
(www-data,355252,144464,00:03:50/150-14:48:44,1259) pveproxy
(www-data,68908,57684,00:02:26/150-14:48:43,1265) spiceproxy
(root,335964,32872,00:20:25/150-14:48:43,1267) pve-ha-lrm
(root,5449912,2416316,6-23:46:01/150-14:48:42,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:11/150-14:48:42,1285) [kvm-nx-lpage-re]
(root,0,0,12:05:51/150-14:48:42,1305) [vhost-1281]
(root,0,0,10:33:26/150-14:48:42,1324) [vhost-1281]
(root,0,0,01:03:36/150-14:48:42,1329) [kvm-pit/1281]
(root,14049708,8506092,35-03:49:07/150-14:48:39,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:05:13/150-14:48:39,1348) [kvm-nx-lpage-re]
(root,0,0,00:50:09/150-14:48:38,1367) [vhost-1344]
(root,0,0,01:14:42/150-14:48:38,1372) [kvm-pit/1344]
(root,0,0,00:00:00/150-14:48:35,1374) [dio/md2]
(www-data,76952,54800,00:00:00/06:57:58,1375) spiceproxy worker
(root,86168,2076,00:00:01/06:57:58,1377) /usr/sbin/pvefw-logger
(www-data,355548,130592,00:00:00/06:57:58,1388) pveproxy worker
(www-data,355828,131344,00:00:00/06:57:58,1389) pveproxy worker
(www-data,367804,137712,00:00:00/06:57:58,1390) pveproxy worker
(root,3258760,2105616,33-06:48:24/150-14:48:35,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:16/150-14:48:35,1415) [kvm-nx-lpage-re]
(root,0,0,06:01:20/150-14:48:34,1434) [vhost-1411]
(root,0,0,00:00:00/150-14:48:34,1437) [kvm-pit/1411]
(root,0,0,00:00:00/150-14:48:33,1455) [ib-comp-wq]
(root,0,0,00:00:00/150-14:48:33,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/150-14:48:33,1457) [ib_mcast]
(root,0,0,00:00:00/150-14:48:33,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/150-14:48:33,1459) [rdma_cm]
(root,0,0,00:00:00/150-14:48:33,1460) [cifsiod]
(root,0,0,00:00:00/150-14:48:33,1461) [smb3decryptd]
(root,0,0,00:00:00/150-14:48:33,1462) [cifsfileinfoput]
(root,0,0,00:00:00/150-14:48:33,1463) [cifsoplockd]
(root,0,0,00:08:36/150-14:48:33,1465) [cifsd]
(root,0,0,00:11:09/150-14:48:33,1498) [cifsd]
(root,6884832,3856212,9-19:01:34/150-14:48:30,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:57/150-14:48:30,1519) [kvm-nx-lpage-re]
(root,0,0,01:54:21/150-14:48:30,1538) [vhost-1515]
(root,0,0,00:00:00/150-14:48:30,1543) [kvm-pit/1515]
(root,20509828,16863004,11-17:40:11/150-14:48:26,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:22/150-14:48:26,1561) [kvm-nx-lpage-re]
(root,0,0,00:51:14/150-14:48:26,1580) [vhost-1557]
(root,0,0,00:00:00/150-14:48:26,1585) [kvm-pit/1557]
(root,18993688,5617812,8-07:56:36/150-14:48:22,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:31/150-14:48:22,1628) [kvm-nx-lpage-re]
(root,0,0,00:02:20/150-14:48:22,1647) [vhost-1624]
(root,0,0,00:00:00/150-14:48:22,1652) [kvm-pit/1624]
(root,5680264,4247340,19-02:04:37/150-14:48:18,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:47/150-14:48:18,1669) [kvm-nx-lpage-re]
(root,0,0,01:05:14/150-14:48:18,1690) [vhost-1665]
(root,0,0,00:00:00/150-14:48:18,1693) [kvm-pit/1665]
(root,10247356,7022184,4-07:48:43/150-14:48:14,1733) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:23/150-14:48:14,1737) [kvm-nx-lpage-re]
(root,0,0,00:03:42/150-14:48:14,1756) [vhost-1733]
(root,0,0,01:12:50/150-14:48:14,1761) [kvm-pit/1733]
(root,363192,12404,00:01:17/77-18:05:21,10840) pvedaemon worker
(root,0,0,00:00:00/28:59,10946) [kworker/5:0-events]
(root,0,0,00:00:00/25:32,11923) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:00/24:59,12023) [kworker/2:2-events]
(root,0,0,00:00:00/23:59,12295) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/23:59,12296) [kworker/4:3-events]
(root,0,0,00:00:00/23:00,12571) [kworker/u16:0-events_unbound]
(root,0,0,00:00:00/22:59,12574) [kworker/7:2-events]
(root,0,0,00:00:00/22:59,12576) [kworker/7:3-events]
(root,0,0,00:00:00/19:59,13411) [kworker/5:1-events]
(root,0,0,00:00:00/18:59,13689) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/17:26,14157) [kworker/1:1-events]
(root,0,0,00:00:00/11:59,15735) [kworker/6:0-events]
(root,0,0,00:00:00/11:59,15736) [kworker/6:3-dio/md2]
(root,0,0,00:00:00/11:04,15997) [kworker/u16:1-events_unbound]
(root,362400,13232,00:00:53/52-13:16:44,16649) pvedaemon worker
(root,0,0,00:00:00/08:07,16812) [kworker/1:0-events]
(root,0,0,00:00:00/06:59,17123) [kworker/7:0-events]
(root,0,0,00:00:00/06:59,17124) [kworker/0:0-memcg_kmem_cache]
(root,0,0,00:00:00/05:59,17412) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/05:59,17413) [kworker/3:2-events]
(root,0,0,00:00:00/05:37,17477) [kworker/6:1-cgroup_destroy]
(root,0,0,00:00:00/05:00,17691) [kworker/u16:2-events_unbound]
(root,0,0,00:00:00/04:59,17693) [kworker/4:1-cgroup_destroy]
(root,0,0,00:00:00/04:59,17694) [kworker/4:2-events]
(root,0,0,00:00:00/03:59,17969) [kworker/7:1-events]
(root,0,0,00:00:00/03:50,17993) [kworker/6:2]
(root,0,0,00:00:00/02:53,18266) [kworker/1:2-events]
(root,15460,9460,00:00:00/00:00,19226) /usr/bin/perl -T /usr/bin/pvesr run --mail 1
(root,7188,3220,00:00:00/00:00,19227) /bin/bash /usr/bin/check_mk_agent
(root,22980,2524,00:00:00/00:00,19235) /lib/systemd/systemd-udevd
(root,22980,2460,00:00:00/00:00,19236) /lib/systemd/systemd-udevd
(root,22980,2460,00:00:00/00:00,19237) /lib/systemd/systemd-udevd
(root,22980,2460,00:00:00/00:00,19239) /lib/systemd/systemd-udevd
(root,22980,2460,00:00:00/00:00,19240) /lib/systemd/systemd-udevd
(root,22980,2460,00:00:00/00:00,19241) /lib/systemd/systemd-udevd
(root,7632,2696,00:00:00/00:00,19259) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,980,00:00:00/00:00,19260) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:cd:91:13:59:dc brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-12-03 05:57

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42cd7aaeec

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,7584,00:13:48/141-21:38:04,1) /sbin/init
(root,0,0,00:00:08/141-21:38:04,2) [kthreadd]
(root,0,0,00:00:00/141-21:38:04,3) [rcu_gp]
(root,0,0,00:00:00/141-21:38:04,4) [rcu_par_gp]
(root,0,0,00:00:00/141-21:38:04,6) [kworker/0:0H]
(root,0,0,00:00:00/141-21:38:04,9) [mm_percpu_wq]
(root,0,0,00:02:55/141-21:38:04,10) [ksoftirqd/0]
(root,0,0,00:29:44/141-21:38:04,11) [rcu_sched]
(root,0,0,00:00:32/141-21:38:04,12) [migration/0]
(root,0,0,00:00:00/141-21:38:04,13) [idle_inject/0]
(root,0,0,00:00:00/141-21:38:04,14) [cpuhp/0]
(root,0,0,00:00:00/141-21:38:04,15) [cpuhp/1]
(root,0,0,00:00:00/141-21:38:04,16) [idle_inject/1]
(root,0,0,00:00:32/141-21:38:04,17) [migration/1]
(root,0,0,00:02:14/141-21:38:04,18) [ksoftirqd/1]
(root,0,0,00:00:00/141-21:38:04,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/141-21:38:04,21) [cpuhp/2]
(root,0,0,00:00:00/141-21:38:04,22) [idle_inject/2]
(root,0,0,00:00:32/141-21:38:04,23) [migration/2]
(root,0,0,00:01:44/141-21:38:04,24) [ksoftirqd/2]
(root,0,0,00:00:00/141-21:38:04,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/141-21:38:04,27) [cpuhp/3]
(root,0,0,00:00:00/141-21:38:04,28) [idle_inject/3]
(root,0,0,00:00:45/141-21:38:04,29) [migration/3]
(root,0,0,00:01:21/141-21:38:04,30) [ksoftirqd/3]
(root,0,0,00:00:00/141-21:38:04,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/141-21:38:04,33) [cpuhp/4]
(root,0,0,00:00:00/141-21:38:04,34) [idle_inject/4]
(root,0,0,00:00:30/141-21:38:04,35) [migration/4]
(root,0,0,00:01:13/141-21:38:04,36) [ksoftirqd/4]
(root,0,0,00:00:00/141-21:38:04,38) [kworker/4:0H]
(root,0,0,00:00:00/141-21:38:04,39) [cpuhp/5]
(root,0,0,00:00:00/141-21:38:04,40) [idle_inject/5]
(root,0,0,00:00:33/141-21:38:04,41) [migration/5]
(root,0,0,00:19:08/141-21:38:04,42) [ksoftirqd/5]
(root,0,0,00:00:00/141-21:38:04,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/141-21:38:04,45) [cpuhp/6]
(root,0,0,00:00:00/141-21:38:04,46) [idle_inject/6]
(root,0,0,00:00:30/141-21:38:04,47) [migration/6]
(root,0,0,00:05:51/141-21:38:04,48) [ksoftirqd/6]
(root,0,0,00:00:00/141-21:38:04,50) [kworker/6:0H]
(root,0,0,00:00:00/141-21:38:04,51) [cpuhp/7]
(root,0,0,00:00:00/141-21:38:04,52) [idle_inject/7]
(root,0,0,00:00:32/141-21:38:04,53) [migration/7]
(root,0,0,00:00:42/141-21:38:04,54) [ksoftirqd/7]
(root,0,0,00:00:00/141-21:38:04,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/141-21:38:04,57) [kdevtmpfs]
(root,0,0,00:00:00/141-21:38:04,58) [netns]
(root,0,0,00:00:00/141-21:38:04,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/141-21:38:04,60) [kauditd]
(root,0,0,00:00:04/141-21:38:04,62) [khungtaskd]
(root,0,0,00:00:00/141-21:38:04,63) [oom_reaper]
(root,0,0,00:00:00/141-21:38:04,64) [writeback]
(root,0,0,00:00:00/141-21:38:04,65) [kcompactd0]
(root,0,0,00:00:00/141-21:38:04,66) [ksmd]
(root,0,0,00:01:07/141-21:38:04,67) [khugepaged]
(root,0,0,00:00:00/141-21:38:04,113) [kintegrityd]
(root,0,0,00:00:00/141-21:38:04,114) [kblockd]
(root,0,0,00:00:00/141-21:38:04,115) [blkcg_punt_bio]
(root,0,0,00:00:00/141-21:38:04,116) [tpm_dev_wq]
(root,0,0,00:00:00/141-21:38:04,117) [ata_sff]
(root,0,0,00:00:00/141-21:38:04,118) [md]
(root,0,0,00:00:00/141-21:38:04,119) [edac-poller]
(root,0,0,00:00:00/141-21:38:04,120) [devfreq_wq]
(root,0,0,00:00:00/141-21:38:04,121) [watchdogd]
(root,0,0,00:07:23/141-21:38:04,126) [kswapd0]
(root,0,0,00:00:00/141-21:38:04,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/141-21:38:04,129) [kthrotld]
(root,0,0,00:00:00/141-21:38:04,130) [acpi_thermal_pm]
(root,0,0,00:00:00/141-21:38:04,131) [nvme-wq]
(root,0,0,00:00:00/141-21:38:04,132) [nvme-reset-wq]
(root,0,0,00:00:00/141-21:38:04,133) [nvme-delete-wq]
(root,0,0,00:00:00/141-21:38:04,136) [ipv6_addrconf]
(root,0,0,00:00:00/141-21:38:04,145) [kstrp]
(root,0,0,00:00:00/141-21:38:04,146) [kworker/u17:0]
(root,0,0,00:00:00/141-21:38:04,161) [charger_manager]
(root,0,0,00:00:00/141-21:38:03,207) [scsi_eh_0]
(root,0,0,00:00:00/141-21:38:03,208) [scsi_tmf_0]
(root,0,0,00:00:00/141-21:38:03,209) [scsi_eh_1]
(root,0,0,00:00:00/141-21:38:03,210) [scsi_tmf_1]
(root,0,0,00:00:00/141-21:38:03,211) [scsi_eh_2]
(root,0,0,00:00:00/141-21:38:03,212) [scsi_tmf_2]
(root,0,0,00:00:00/141-21:38:03,213) [scsi_eh_3]
(root,0,0,00:00:00/141-21:38:03,214) [scsi_tmf_3]
(root,0,0,00:00:00/141-21:38:03,215) [scsi_eh_4]
(root,0,0,00:00:00/141-21:38:03,216) [scsi_tmf_4]
(root,0,0,00:00:00/141-21:38:03,217) [scsi_eh_5]
(root,0,0,00:00:00/141-21:38:03,218) [scsi_tmf_5]
(root,0,0,00:03:32/141-21:38:03,224) [kworker/1:1H-kblockd]
(root,0,0,00:02:37/141-21:38:03,225) [kworker/5:1H-kblockd]
(root,0,0,00:03:49/141-21:38:03,236) [kworker/0:1H-kblockd]
(root,0,0,00:02:42/141-21:38:03,237) [kworker/4:1H-kblockd]
(root,0,0,00:35:48/141-21:38:03,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/141-21:38:02,250) [raid5wq]
(root,0,0,00:03:56/141-21:37:57,309) [kworker/7:1H-kblockd]
(root,0,0,00:02:43/141-21:37:42,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:31/141-21:37:42,452) [md0_raid1]
(root,0,0,00:00:01/141-21:37:42,456) [md1_raid1]
(root,0,0,01:07:02/141-21:37:42,460) [md2_raid1]
(root,0,0,00:06:22/141-21:37:42,476) [jbd2/md2-8]
(root,0,0,00:00:00/141-21:37:42,477) [ext4-rsv-conver]
(root,0,0,00:02:50/141-21:37:42,490) [kworker/3:1H-kblockd]
(root,362408,13516,00:01:11/69-01:32:19,513) pvedaemon worker
(root,129300,48688,00:46:57/141-21:37:42,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/141-21:37:41,543) [rpciod]
(root,0,0,00:00:00/141-21:37:41,544) [xprtiod]
(root,0,0,00:00:00/141-21:37:41,547) [spl_system_task]
(root,0,0,00:00:00/141-21:37:41,548) [spl_delay_taskq]
(root,0,0,00:00:00/141-21:37:41,549) [spl_dynamic_tas]
(root,0,0,00:00:00/141-21:37:41,550) [spl_kmem_cache]
(root,22980,4872,00:15:20/141-21:37:41,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/141-21:37:41,560) [zvol]
(root,0,0,00:00:00/141-21:37:41,563) [arc_prune]
(root,0,0,00:03:41/141-21:37:41,564) [arc_evict]
(root,0,0,00:03:27/141-21:37:41,565) [arc_reap]
(root,0,0,00:00:00/141-21:37:41,567) [dbu_evict]
(root,0,0,00:03:20/141-21:37:41,568) [dbuf_evict]
(root,0,0,00:00:00/141-21:37:41,640) [z_vdev_file]
(root,0,0,00:01:42/141-21:37:41,642) [l2arc_feed]
(root,0,0,00:00:00/141-21:37:41,679) [cryptd]
(root,4816,2672,00:00:04/141-21:37:41,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/141-21:37:41,719) [jbd2/md1-8]
(root,0,0,00:00:00/141-21:37:41,720) [ext4-rsv-conver]
(_rpc,7084,3812,00:00:18/141-21:37:41,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,5004,00:00:11/141-21:37:41,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:21:22/141-21:37:41,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:05:05/141-21:37:41,787) /usr/sbin/watchdog-mux
(messagebus,9524,4240,00:11:13/141-21:37:41,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,4080,00:17:43/141-21:37:41,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,5800,00:01:17/141-21:37:41,792) /lib/systemd/systemd-logind
(root,12244,5216,00:00:03/141-21:37:41,795) /usr/sbin/smartd -n
(root,164148,3772,00:00:00/141-21:37:41,798) /usr/sbin/zed -F
(root,224732,1980,00:00:14/141-21:37:41,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1036,00:00:00/141-21:37:41,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1340,00:00:03/141-21:37:41,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2112,00:00:00/141-21:37:40,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:04:47/141-21:37:40,969) bpfilter_umh
(root,13808,6144,00:08:29/141-21:37:40,983) /usr/sbin/sshd -D
(root,5940,1500,00:00:00/141-21:37:40,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,804576,3980,00:40:43/141-21:37:40,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,735648,56180,02:36:00/141-21:37:40,1104) /usr/bin/pmxcfs
(root,9600,2112,00:00:38/141-21:37:40,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4196,00:00:27/141-21:37:40,1203) /usr/lib/postfix/sbin/master -w
(postfix,43956,7524,00:00:05/141-21:37:40,1205) qmgr -l -t unix -u
(root,8832,2536,00:00:14/141-21:37:39,1218) /usr/sbin/cron -f
(root,304368,31928,05:13:41/141-21:37:39,1224) pve-firewall
(root,303056,39220,12:30:08/141-21:37:39,1226) pvestatd
(root,353788,3208,00:01:38/141-21:37:38,1249) pvedaemon
(root,336348,9968,00:11:40/141-21:37:38,1258) pve-ha-crm
(www-data,355208,143632,00:03:37/141-21:37:38,1259) pveproxy
(www-data,68848,57432,00:02:18/141-21:37:37,1265) spiceproxy
(root,335964,33072,00:19:13/141-21:37:37,1267) pve-ha-lrm
(root,5449912,2413796,6-13:46:11/141-21:37:36,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:10/141-21:37:36,1285) [kvm-nx-lpage-re]
(root,0,0,11:22:56/141-21:37:36,1305) [vhost-1281]
(root,0,0,09:56:32/141-21:37:36,1324) [vhost-1281]
(root,0,0,00:59:45/141-21:37:36,1329) [kvm-pit/1281]
(root,14011100,8492260,34-00:51:39/141-21:37:33,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:04:54/141-21:37:33,1348) [kvm-nx-lpage-re]
(root,0,0,00:48:37/141-21:37:32,1367) [vhost-1344]
(root,0,0,01:10:16/141-21:37:32,1372) [kvm-pit/1344]
(root,0,0,00:00:00/141-21:37:29,1374) [dio/md2]
(root,3258760,2097804,31-08:42:51/141-21:37:29,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:15/141-21:37:29,1415) [kvm-nx-lpage-re]
(root,0,0,05:40:00/141-21:37:28,1434) [vhost-1411]
(root,0,0,00:00:00/141-21:37:28,1437) [kvm-pit/1411]
(root,0,0,00:00:00/141-21:37:27,1455) [ib-comp-wq]
(root,0,0,00:00:00/141-21:37:27,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/141-21:37:27,1457) [ib_mcast]
(root,0,0,00:00:00/141-21:37:27,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/141-21:37:27,1459) [rdma_cm]
(root,0,0,00:00:00/141-21:37:27,1460) [cifsiod]
(root,0,0,00:00:00/141-21:37:27,1461) [smb3decryptd]
(root,0,0,00:00:00/141-21:37:27,1462) [cifsfileinfoput]
(root,0,0,00:00:00/141-21:37:27,1463) [cifsoplockd]
(root,0,0,00:07:54/141-21:37:27,1465) [cifsd]
(root,0,0,00:10:26/141-21:37:27,1498) [cifsd]
(root,6846168,3859992,9-04:44:19/141-21:37:24,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:54/141-21:37:24,1519) [kvm-nx-lpage-re]
(root,0,0,01:46:51/141-21:37:24,1538) [vhost-1515]
(root,0,0,00:00:00/141-21:37:24,1543) [kvm-pit/1515]
(root,20470684,16833380,11-00:28:38/141-21:37:20,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:16/141-21:37:20,1561) [kvm-nx-lpage-re]
(root,0,0,00:47:35/141-21:37:20,1580) [vhost-1557]
(root,0,0,00:00:00/141-21:37:20,1585) [kvm-pit/1557]
(root,18993688,5387292,7-20:07:52/141-21:37:16,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:29/141-21:37:16,1628) [kvm-nx-lpage-re]
(root,0,0,00:02:11/141-21:37:16,1647) [vhost-1624]
(root,0,0,00:00:00/141-21:37:16,1652) [kvm-pit/1624]
(root,5641632,4228612,17-23:33:00/141-21:37:12,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:41/141-21:37:12,1669) [kvm-nx-lpage-re]
(root,0,0,01:01:47/141-21:37:12,1690) [vhost-1665]
(root,0,0,00:00:00/141-21:37:12,1693) [kvm-pit/1665]
(root,10195360,8200160,4-01:55:20/141-21:37:08,1733) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:23/141-21:37:08,1737) [kvm-nx-lpage-re]
(root,0,0,00:03:30/141-21:37:08,1756) [vhost-1733]
(root,0,0,01:08:25/141-21:37:08,1761) [kvm-pit/1733]
(root,363192,14036,00:01:09/69-00:54:15,10840) pvedaemon worker
(postfix,43844,7804,00:00:00/41:53,15199) pickup -l -t unix -u -c
(root,0,0,00:00:00/39:53,15818) [kworker/5:0-events]
(root,362400,15692,00:00:45/43-20:05:38,16649) pvedaemon worker
(root,0,0,00:00:00/31:53,18346) [kworker/7:2-cgroup_destroy]
(root,0,0,00:00:00/24:09,20750) [kworker/u16:0-events_unbound]
(root,0,0,00:00:00/23:53,20895) [kworker/5:2-events]
(root,0,0,00:00:00/22:53,21209) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/20:53,21827) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/20:14,21979) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/16:53,23101) [kworker/0:0-events]
(root,0,0,00:00:00/15:53,23410) [kworker/6:1-dio/md2]
(root,0,0,00:00:00/14:53,23718) [kworker/7:0-events]
(root,0,0,00:00:00/14:05,23940) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/11:53,24662) [kworker/2:0-events]
(root,0,0,00:00:00/09:52,25281) [kworker/6:2-events]
(root,0,0,00:00:00/08:53,25582) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/08:53,25583) [kworker/3:3-events]
(root,0,0,00:00:00/07:56,25875) [kworker/1:2-events]
(www-data,77016,54696,00:00:00/13:46:52,26243) spiceproxy worker
(root,86168,2028,00:00:02/13:46:52,26245) /usr/sbin/pvefw-logger
(www-data,367704,136832,00:00:00/13:46:52,26249) pveproxy worker
(www-data,355636,130108,00:00:00/13:46:52,26250) pveproxy worker
(www-data,355908,130632,00:00:00/13:46:52,26251) pveproxy worker
(root,0,0,00:00:00/05:53,26527) [kworker/4:1-events]
(root,0,0,00:00:00/05:53,26528) [kworker/4:2-cgroup_destroy]
(root,0,0,00:00:00/04:53,26840) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/04:53,26841) [kworker/2:3-events]
(root,0,0,00:00:00/02:33,27531) [kworker/1:0-events]
(root,0,0,00:00:00/00:53,28082) [kworker/1:3-mm_percpu_wq]
(root,14792,7944,00:00:00/00:01,28363) sshd: unknown [priv]
(sshd,13808,4944,00:00:00/00:01,28364) sshd: unknown [net]
(root,7188,3132,00:00:00/00:00,28469) /bin/bash /usr/bin/check_mk_agent
(root,7632,2620,00:00:00/00:00,28495) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,996,00:00:00/00:00,28496) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:cd:91:13:59:dc brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-11-24 12:46

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c4288f49b23

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,7664,00:13:02/135-10:10:40,1) /sbin/init
(root,0,0,00:00:07/135-10:10:40,2) [kthreadd]
(root,0,0,00:00:00/135-10:10:40,3) [rcu_gp]
(root,0,0,00:00:00/135-10:10:40,4) [rcu_par_gp]
(root,0,0,00:00:00/135-10:10:40,6) [kworker/0:0H]
(root,0,0,00:00:00/135-10:10:40,9) [mm_percpu_wq]
(root,0,0,00:02:45/135-10:10:40,10) [ksoftirqd/0]
(root,0,0,00:28:15/135-10:10:40,11) [rcu_sched]
(root,0,0,00:00:31/135-10:10:40,12) [migration/0]
(root,0,0,00:00:00/135-10:10:40,13) [idle_inject/0]
(root,0,0,00:00:00/135-10:10:40,14) [cpuhp/0]
(root,0,0,00:00:00/135-10:10:40,15) [cpuhp/1]
(root,0,0,00:00:00/135-10:10:40,16) [idle_inject/1]
(root,0,0,00:00:30/135-10:10:40,17) [migration/1]
(root,0,0,00:02:07/135-10:10:40,18) [ksoftirqd/1]
(root,0,0,00:00:00/135-10:10:40,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/135-10:10:40,21) [cpuhp/2]
(root,0,0,00:00:00/135-10:10:40,22) [idle_inject/2]
(root,0,0,00:00:30/135-10:10:40,23) [migration/2]
(root,0,0,00:01:39/135-10:10:40,24) [ksoftirqd/2]
(root,0,0,00:00:00/135-10:10:40,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/135-10:10:40,27) [cpuhp/3]
(root,0,0,00:00:00/135-10:10:40,28) [idle_inject/3]
(root,0,0,00:00:43/135-10:10:40,29) [migration/3]
(root,0,0,00:01:17/135-10:10:40,30) [ksoftirqd/3]
(root,0,0,00:00:00/135-10:10:40,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/135-10:10:40,33) [cpuhp/4]
(root,0,0,00:00:00/135-10:10:40,34) [idle_inject/4]
(root,0,0,00:00:29/135-10:10:40,35) [migration/4]
(root,0,0,00:01:10/135-10:10:40,36) [ksoftirqd/4]
(root,0,0,00:00:00/135-10:10:40,38) [kworker/4:0H]
(root,0,0,00:00:00/135-10:10:40,39) [cpuhp/5]
(root,0,0,00:00:00/135-10:10:40,40) [idle_inject/5]
(root,0,0,00:00:31/135-10:10:40,41) [migration/5]
(root,0,0,00:18:13/135-10:10:40,42) [ksoftirqd/5]
(root,0,0,00:00:00/135-10:10:40,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/135-10:10:40,45) [cpuhp/6]
(root,0,0,00:00:00/135-10:10:40,46) [idle_inject/6]
(root,0,0,00:00:29/135-10:10:40,47) [migration/6]
(root,0,0,00:05:34/135-10:10:40,48) [ksoftirqd/6]
(root,0,0,00:00:00/135-10:10:40,50) [kworker/6:0H]
(root,0,0,00:00:00/135-10:10:40,51) [cpuhp/7]
(root,0,0,00:00:00/135-10:10:40,52) [idle_inject/7]
(root,0,0,00:00:31/135-10:10:40,53) [migration/7]
(root,0,0,00:00:40/135-10:10:40,54) [ksoftirqd/7]
(root,0,0,00:00:00/135-10:10:40,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/135-10:10:40,57) [kdevtmpfs]
(root,0,0,00:00:00/135-10:10:40,58) [netns]
(root,0,0,00:00:00/135-10:10:40,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/135-10:10:40,60) [kauditd]
(root,0,0,00:00:04/135-10:10:40,62) [khungtaskd]
(root,0,0,00:00:00/135-10:10:40,63) [oom_reaper]
(root,0,0,00:00:00/135-10:10:40,64) [writeback]
(root,0,0,00:00:00/135-10:10:40,65) [kcompactd0]
(root,0,0,00:00:00/135-10:10:40,66) [ksmd]
(root,0,0,00:01:05/135-10:10:40,67) [khugepaged]
(root,0,0,00:00:00/135-10:10:40,113) [kintegrityd]
(root,0,0,00:00:00/135-10:10:40,114) [kblockd]
(root,0,0,00:00:00/135-10:10:40,115) [blkcg_punt_bio]
(root,0,0,00:00:00/135-10:10:40,116) [tpm_dev_wq]
(root,0,0,00:00:00/135-10:10:40,117) [ata_sff]
(root,0,0,00:00:00/135-10:10:40,118) [md]
(root,0,0,00:00:00/135-10:10:40,119) [edac-poller]
(root,0,0,00:00:00/135-10:10:40,120) [devfreq_wq]
(root,0,0,00:00:00/135-10:10:40,121) [watchdogd]
(root,0,0,00:07:02/135-10:10:40,126) [kswapd0]
(root,0,0,00:00:00/135-10:10:40,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/135-10:10:40,129) [kthrotld]
(root,0,0,00:00:00/135-10:10:40,130) [acpi_thermal_pm]
(root,0,0,00:00:00/135-10:10:40,131) [nvme-wq]
(root,0,0,00:00:00/135-10:10:40,132) [nvme-reset-wq]
(root,0,0,00:00:00/135-10:10:40,133) [nvme-delete-wq]
(root,0,0,00:00:00/135-10:10:40,136) [ipv6_addrconf]
(root,0,0,00:00:00/135-10:10:40,145) [kstrp]
(root,0,0,00:00:00/135-10:10:40,146) [kworker/u17:0]
(root,0,0,00:00:00/135-10:10:40,161) [charger_manager]
(root,0,0,00:00:00/135-10:10:39,207) [scsi_eh_0]
(root,0,0,00:00:00/135-10:10:39,208) [scsi_tmf_0]
(root,0,0,00:00:00/135-10:10:39,209) [scsi_eh_1]
(root,0,0,00:00:00/135-10:10:39,210) [scsi_tmf_1]
(root,0,0,00:00:00/135-10:10:39,211) [scsi_eh_2]
(root,0,0,00:00:00/135-10:10:39,212) [scsi_tmf_2]
(root,0,0,00:00:00/135-10:10:39,213) [scsi_eh_3]
(root,0,0,00:00:00/135-10:10:39,214) [scsi_tmf_3]
(root,0,0,00:00:00/135-10:10:39,215) [scsi_eh_4]
(root,0,0,00:00:00/135-10:10:39,216) [scsi_tmf_4]
(root,0,0,00:00:00/135-10:10:39,217) [scsi_eh_5]
(root,0,0,00:00:00/135-10:10:39,218) [scsi_tmf_5]
(root,0,0,00:03:19/135-10:10:39,224) [kworker/1:1H-kblockd]
(root,0,0,00:02:27/135-10:10:39,225) [kworker/5:1H-kblockd]
(root,0,0,00:03:35/135-10:10:39,236) [kworker/0:1H-kblockd]
(root,0,0,00:02:32/135-10:10:39,237) [kworker/4:1H-kblockd]
(root,0,0,00:33:55/135-10:10:39,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/135-10:10:38,250) [raid5wq]
(root,0,0,00:03:42/135-10:10:33,309) [kworker/7:1H-kblockd]
(root,0,0,00:02:33/135-10:10:18,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:25/135-10:10:18,452) [md0_raid1]
(root,0,0,00:00:01/135-10:10:18,456) [md1_raid1]
(root,0,0,00:59:38/135-10:10:18,460) [md2_raid1]
(root,0,0,00:06:03/135-10:10:18,476) [jbd2/md2-8]
(root,0,0,00:00:00/135-10:10:18,477) [ext4-rsv-conver]
(root,0,0,00:02:39/135-10:10:18,490) [kworker/3:1H-kblockd]
(root,362408,14548,00:01:05/62-14:04:55,513) pvedaemon worker
(root,230016,131956,00:43:30/135-10:10:18,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/135-10:10:17,543) [rpciod]
(root,0,0,00:00:00/135-10:10:17,544) [xprtiod]
(root,0,0,00:00:00/135-10:10:17,547) [spl_system_task]
(root,0,0,00:00:00/135-10:10:17,548) [spl_delay_taskq]
(root,0,0,00:00:00/135-10:10:17,549) [spl_dynamic_tas]
(root,0,0,00:00:00/135-10:10:17,550) [spl_kmem_cache]
(root,22980,4888,00:14:37/135-10:10:17,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/135-10:10:17,560) [zvol]
(root,0,0,00:00:00/135-10:10:17,563) [arc_prune]
(root,0,0,00:03:32/135-10:10:17,564) [arc_evict]
(root,0,0,00:03:18/135-10:10:17,565) [arc_reap]
(root,0,0,00:00:00/135-10:10:17,567) [dbu_evict]
(root,0,0,00:03:12/135-10:10:17,568) [dbuf_evict]
(root,0,0,00:00:00/135-10:10:17,640) [z_vdev_file]
(root,0,0,00:01:38/135-10:10:17,642) [l2arc_feed]
(root,0,0,00:00:00/135-10:10:17,679) [cryptd]
(root,4816,2672,00:00:04/135-10:10:17,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/135-10:10:17,719) [jbd2/md1-8]
(root,0,0,00:00:00/135-10:10:17,720) [ext4-rsv-conver]
(_rpc,7084,3812,00:00:17/135-10:10:17,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,5100,00:00:11/135-10:10:17,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:20:15/135-10:10:17,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:04:52/135-10:10:17,787) /usr/sbin/watchdog-mux
(messagebus,9524,4232,00:10:13/135-10:10:17,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,4068,00:16:22/135-10:10:17,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,5896,00:01:13/135-10:10:17,792) /lib/systemd/systemd-logind
(root,12244,5216,00:00:03/135-10:10:17,795) /usr/sbin/smartd -n
(root,164148,3800,00:00:00/135-10:10:17,798) /usr/sbin/zed -F
(root,224732,1980,00:00:13/135-10:10:17,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1036,00:00:00/135-10:10:17,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1340,00:00:03/135-10:10:17,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2112,00:00:00/135-10:10:16,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:04:34/135-10:10:16,969) bpfilter_umh
(root,13808,6144,00:07:55/135-10:10:16,983) /usr/sbin/sshd -D
(root,5940,1500,00:00:00/135-10:10:16,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,804576,3992,00:38:51/135-10:10:16,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,735648,56172,02:29:16/135-10:10:16,1104) /usr/bin/pmxcfs
(root,9600,2112,00:00:36/135-10:10:16,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4504,00:00:26/135-10:10:16,1203) /usr/lib/postfix/sbin/master -w
(postfix,43992,7800,00:00:05/135-10:10:16,1205) qmgr -l -t unix -u
(root,8832,2536,00:00:14/135-10:10:15,1218) /usr/sbin/cron -f
(root,304368,31928,04:59:15/135-10:10:15,1224) pve-firewall
(root,303056,39220,11:56:18/135-10:10:15,1226) pvestatd
(root,353788,3228,00:01:33/135-10:10:14,1249) pvedaemon
(root,336348,10052,00:11:08/135-10:10:14,1258) pve-ha-crm
(www-data,355268,145436,00:03:28/135-10:10:14,1259) pveproxy
(www-data,68848,57868,00:02:12/135-10:10:13,1265) spiceproxy
(root,335964,33140,00:18:20/135-10:10:13,1267) pve-ha-lrm
(root,5449912,2376080,6-06:05:23/135-10:10:12,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:09/135-10:10:12,1285) [kvm-nx-lpage-re]
(root,0,0,10:44:55/135-10:10:12,1305) [vhost-1281]
(root,0,0,09:23:00/135-10:10:12,1324) [vhost-1281]
(root,0,0,00:56:57/135-10:10:12,1329) [kvm-pit/1281]
(root,13987420,8482376,32-23:29:23/135-10:10:09,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:04:40/135-10:10:09,1348) [kvm-nx-lpage-re]
(root,0,0,00:46:23/135-10:10:08,1367) [vhost-1344]
(root,0,0,01:07:01/135-10:10:08,1372) [kvm-pit/1344]
(root,0,0,00:00:00/135-10:10:05,1374) [dio/md2]
(root,3258760,2101752,29-22:25:02/135-10:10:05,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:14/135-10:10:05,1415) [kvm-nx-lpage-re]
(root,0,0,05:24:29/135-10:10:04,1434) [vhost-1411]
(root,0,0,00:00:00/135-10:10:04,1437) [kvm-pit/1411]
(root,0,0,00:00:00/135-10:10:03,1455) [ib-comp-wq]
(root,0,0,00:00:00/135-10:10:03,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/135-10:10:03,1457) [ib_mcast]
(root,0,0,00:00:00/135-10:10:03,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/135-10:10:03,1459) [rdma_cm]
(root,0,0,00:00:00/135-10:10:03,1460) [cifsiod]
(root,0,0,00:00:00/135-10:10:03,1461) [smb3decryptd]
(root,0,0,00:00:00/135-10:10:03,1462) [cifsfileinfoput]
(root,0,0,00:00:00/135-10:10:03,1463) [cifsoplockd]
(root,0,0,00:07:25/135-10:10:03,1465) [cifsd]
(root,0,0,00:09:57/135-10:10:03,1498) [cifsd]
(root,6820392,3895736,8-18:29:35/135-10:10:00,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:51/135-10:10:00,1519) [kvm-nx-lpage-re]
(root,0,0,01:41:52/135-10:10:00,1538) [vhost-1515]
(root,0,0,00:00:00/135-10:10:00,1543) [kvm-pit/1515]
(root,20444152,16847600,10-12:09:03/135-10:09:56,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:12/135-10:09:56,1561) [kvm-nx-lpage-re]
(root,0,0,00:45:30/135-10:09:56,1580) [vhost-1557]
(root,0,0,00:00:00/135-10:09:56,1585) [kvm-pit/1557]
(root,0,0,00:00:00/20:29,1597) [kworker/0:2-events]
(root,18993688,5266604,7-11:24:13/135-10:09:52,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:28/135-10:09:52,1628) [kvm-nx-lpage-re]
(root,0,0,00:02:05/135-10:09:52,1647) [vhost-1624]
(root,0,0,00:00:00/135-10:09:52,1652) [kvm-pit/1624]
(root,5615876,4218496,17-03:34:12/135-10:09:48,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:36/135-10:09:48,1669) [kvm-nx-lpage-re]
(root,0,0,00:52:29/135-10:09:48,1690) [vhost-1665]
(root,0,0,00:00:00/135-10:09:48,1693) [kvm-pit/1665]
(root,10139612,8043220,3-21:41:14/135-10:09:44,1733) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:23/135-10:09:44,1737) [kvm-nx-lpage-re]
(root,0,0,00:03:25/135-10:09:44,1756) [vhost-1733]
(root,0,0,01:05:13/135-10:09:44,1761) [kvm-pit/1733]
(root,9796,2428,00:00:00/19:29,1896) /usr/sbin/CRON -f
(root,2380,752,00:00:00/19:29,1897) /bin/sh -c vzdump 101 103 104 106 110 --storage Backup03 --compress lzo --quiet 1 --mailto rzbackup@ago-it.de --node node01 --mode snapshot --mailnotification always
(root,330172,117208,00:00:00/19:29,1898) /usr/bin/perl -T /usr/bin/vzdump 101 103 104 106 110 --storage Backup03 --compress lzo --quiet 1 --mailto rzbackup@ago-it.de --node node01 --mode snapshot --mailnotification always
(root,338616,102608,00:00:07/19:28,1901) task UPID:node01:0000076D:45BBFA70:6376D912:vzdump::root@pam:
(root,0,0,00:02:41/19:02,1990) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/18:50,2023) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/18:45,2143) [kworker/6:12-events]
(root,0,0,00:00:00/18:29,2184) [kworker/3:3-events]
(root,86168,2096,00:00:00/02:19:28,2234) /usr/sbin/pvefw-logger
(www-data,69384,52808,00:00:00/02:19:28,2239) spiceproxy worker
(www-data,355564,130196,00:00:00/02:19:28,2246) pveproxy worker
(www-data,355564,130196,00:00:00/02:19:28,2247) pveproxy worker
(www-data,355564,130192,00:00:00/02:19:28,2248) pveproxy worker
(root,0,0,00:00:00/14:29,3244) [kworker/5:1-events]
(root,0,0,00:00:00/12:29,3782) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/12:29,3783) [kworker/2:3-events]
(root,0,0,00:00:00/11:29,4046) [kworker/5:3]
(root,0,0,00:00:00/10:29,4308) [kworker/0:3-events]
(root,0,0,00:00:00/09:54,4429) [kworker/1:0-events]
(postfix,43844,7828,00:00:00/09:37,4555) pickup -l -t unix -u -c
(root,0,0,00:00:00/09:29,4581) [kworker/4:2-cgroup_destroy]
(root,0,0,00:00:00/09:29,4582) [kworker/4:3-events]
(root,0,0,00:00:00/09:28,4593) [kworker/6:0-dio/md2]
(root,0,0,00:00:00/08:29,4845) [kworker/7:1-cgroup_destroy]
(root,0,0,00:00:00/08:29,4846) [kworker/7:3-events]
(root,0,0,00:00:00/04:29,5923) [kworker/1:2-events]
(root,0,0,00:00:00/04:29,5924) [kworker/1:3-events]
(root,0,0,00:00:00/03:29,6182) [kworker/4:1-events]
(root,0,0,00:00:00/02:29,6453) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/02:29,6458) [kworker/3:2-events]
(root,5212,1852,00:00:39/02:27,6473) lzop
(root,0,0,00:00:10/02:05,6545) [kworker/u16:0-events_unbound]
(root,0,0,00:00:00/01:54,6577) [kworker/u16:3]
(root,0,0,00:00:00/01:29,6727) [kworker/7:0-events]
(root,13808,6752,00:00:00/01:27,6754) sshd: [accepted]
(root,13808,6620,00:00:00/00:18,7031) sshd: [accepted]
(root,7188,3244,00:00:00/00:00,7190) /bin/bash /usr/bin/check_mk_agent
(root,7632,2668,00:00:00/00:00,7216) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,924,00:00:00/00:00,7217) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,363192,15360,00:01:03/62-13:26:51,10840) pvedaemon worker
(root,362400,17596,00:00:38/37-08:38:14,16649) pvedaemon worker
(root,0,0,00:01:55/53:41,25156) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/37:39,29415) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/33:29,30493) [kworker/4:0-cgroup_destroy]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:cd:91:13:59:dc brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-11-18 01:19

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42ec901044

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,7720,00:11:47/122-07:10:15,1) /sbin/init
(root,0,0,00:00:07/122-07:10:15,2) [kthreadd]
(root,0,0,00:00:00/122-07:10:15,3) [rcu_gp]
(root,0,0,00:00:00/122-07:10:15,4) [rcu_par_gp]
(root,0,0,00:00:00/122-07:10:15,6) [kworker/0:0H]
(root,0,0,00:00:00/122-07:10:15,9) [mm_percpu_wq]
(root,0,0,00:02:29/122-07:10:15,10) [ksoftirqd/0]
(root,0,0,00:25:26/122-07:10:15,11) [rcu_sched]
(root,0,0,00:00:28/122-07:10:15,12) [migration/0]
(root,0,0,00:00:00/122-07:10:15,13) [idle_inject/0]
(root,0,0,00:00:00/122-07:10:15,14) [cpuhp/0]
(root,0,0,00:00:00/122-07:10:15,15) [cpuhp/1]
(root,0,0,00:00:00/122-07:10:15,16) [idle_inject/1]
(root,0,0,00:00:27/122-07:10:15,17) [migration/1]
(root,0,0,00:01:54/122-07:10:15,18) [ksoftirqd/1]
(root,0,0,00:00:00/122-07:10:15,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/122-07:10:15,21) [cpuhp/2]
(root,0,0,00:00:00/122-07:10:15,22) [idle_inject/2]
(root,0,0,00:00:27/122-07:10:15,23) [migration/2]
(root,0,0,00:01:29/122-07:10:15,24) [ksoftirqd/2]
(root,0,0,00:00:00/122-07:10:15,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/122-07:10:15,27) [cpuhp/3]
(root,0,0,00:00:00/122-07:10:15,28) [idle_inject/3]
(root,0,0,00:00:39/122-07:10:15,29) [migration/3]
(root,0,0,00:01:09/122-07:10:15,30) [ksoftirqd/3]
(root,0,0,00:00:00/122-07:10:15,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/122-07:10:15,33) [cpuhp/4]
(root,0,0,00:00:00/122-07:10:15,34) [idle_inject/4]
(root,0,0,00:00:26/122-07:10:15,35) [migration/4]
(root,0,0,00:01:03/122-07:10:15,36) [ksoftirqd/4]
(root,0,0,00:00:00/122-07:10:15,38) [kworker/4:0H]
(root,0,0,00:00:00/122-07:10:15,39) [cpuhp/5]
(root,0,0,00:00:00/122-07:10:15,40) [idle_inject/5]
(root,0,0,00:00:28/122-07:10:15,41) [migration/5]
(root,0,0,00:16:26/122-07:10:15,42) [ksoftirqd/5]
(root,0,0,00:00:00/122-07:10:15,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/122-07:10:15,45) [cpuhp/6]
(root,0,0,00:00:00/122-07:10:15,46) [idle_inject/6]
(root,0,0,00:00:26/122-07:10:15,47) [migration/6]
(root,0,0,00:04:57/122-07:10:15,48) [ksoftirqd/6]
(root,0,0,00:00:00/122-07:10:15,50) [kworker/6:0H]
(root,0,0,00:00:00/122-07:10:15,51) [cpuhp/7]
(root,0,0,00:00:00/122-07:10:15,52) [idle_inject/7]
(root,0,0,00:00:28/122-07:10:15,53) [migration/7]
(root,0,0,00:00:36/122-07:10:15,54) [ksoftirqd/7]
(root,0,0,00:00:00/122-07:10:15,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/122-07:10:15,57) [kdevtmpfs]
(root,0,0,00:00:00/122-07:10:15,58) [netns]
(root,0,0,00:00:00/122-07:10:15,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/122-07:10:15,60) [kauditd]
(root,0,0,00:00:03/122-07:10:15,62) [khungtaskd]
(root,0,0,00:00:00/122-07:10:15,63) [oom_reaper]
(root,0,0,00:00:00/122-07:10:15,64) [writeback]
(root,0,0,00:00:00/122-07:10:15,65) [kcompactd0]
(root,0,0,00:00:00/122-07:10:15,66) [ksmd]
(root,0,0,00:00:39/122-07:10:15,67) [khugepaged]
(root,0,0,00:00:00/122-07:10:15,113) [kintegrityd]
(root,0,0,00:00:00/122-07:10:15,114) [kblockd]
(root,0,0,00:00:00/122-07:10:15,115) [blkcg_punt_bio]
(root,0,0,00:00:00/122-07:10:15,116) [tpm_dev_wq]
(root,0,0,00:00:00/122-07:10:15,117) [ata_sff]
(root,0,0,00:00:00/122-07:10:15,118) [md]
(root,0,0,00:00:00/122-07:10:15,119) [edac-poller]
(root,0,0,00:00:00/122-07:10:15,120) [devfreq_wq]
(root,0,0,00:00:00/122-07:10:15,121) [watchdogd]
(root,0,0,00:06:06/122-07:10:15,126) [kswapd0]
(root,0,0,00:00:00/122-07:10:15,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/122-07:10:15,129) [kthrotld]
(root,0,0,00:00:00/122-07:10:15,130) [acpi_thermal_pm]
(root,0,0,00:00:00/122-07:10:15,131) [nvme-wq]
(root,0,0,00:00:00/122-07:10:15,132) [nvme-reset-wq]
(root,0,0,00:00:00/122-07:10:15,133) [nvme-delete-wq]
(root,0,0,00:00:00/122-07:10:15,136) [ipv6_addrconf]
(root,0,0,00:00:00/122-07:10:15,145) [kstrp]
(root,0,0,00:00:00/122-07:10:15,146) [kworker/u17:0]
(root,0,0,00:00:00/122-07:10:15,161) [charger_manager]
(root,0,0,00:00:00/122-07:10:14,207) [scsi_eh_0]
(root,0,0,00:00:00/122-07:10:14,208) [scsi_tmf_0]
(root,0,0,00:00:00/122-07:10:14,209) [scsi_eh_1]
(root,0,0,00:00:00/122-07:10:14,210) [scsi_tmf_1]
(root,0,0,00:00:00/122-07:10:14,211) [scsi_eh_2]
(root,0,0,00:00:00/122-07:10:14,212) [scsi_tmf_2]
(root,0,0,00:00:00/122-07:10:14,213) [scsi_eh_3]
(root,0,0,00:00:00/122-07:10:14,214) [scsi_tmf_3]
(root,0,0,00:00:00/122-07:10:14,215) [scsi_eh_4]
(root,0,0,00:00:00/122-07:10:14,216) [scsi_tmf_4]
(root,0,0,00:00:00/122-07:10:14,217) [scsi_eh_5]
(root,0,0,00:00:00/122-07:10:14,218) [scsi_tmf_5]
(root,0,0,00:03:01/122-07:10:14,224) [kworker/1:1H-kblockd]
(root,0,0,00:02:14/122-07:10:14,225) [kworker/5:1H-kblockd]
(root,0,0,00:03:15/122-07:10:14,236) [kworker/0:1H-kblockd]
(root,0,0,00:02:18/122-07:10:14,237) [kworker/4:1H-kblockd]
(root,0,0,00:30:20/122-07:10:14,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/122-07:10:13,250) [raid5wq]
(root,0,0,00:03:21/122-07:10:08,309) [kworker/7:1H-kblockd]
(root,0,0,00:02:19/122-07:09:53,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:25/122-07:09:53,452) [md0_raid1]
(root,0,0,00:00:01/122-07:09:53,456) [md1_raid1]
(root,0,0,00:56:15/122-07:09:53,460) [md2_raid1]
(root,0,0,00:05:25/122-07:09:53,476) [jbd2/md2-8]
(root,0,0,00:00:00/122-07:09:53,477) [ext4-rsv-conver]
(root,0,0,00:02:25/122-07:09:53,490) [kworker/3:1H-kblockd]
(root,362408,20344,00:00:52/49-11:04:30,513) pvedaemon worker
(root,136828,50768,00:38:02/122-07:09:53,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/122-07:09:52,543) [rpciod]
(root,0,0,00:00:00/122-07:09:52,544) [xprtiod]
(root,0,0,00:00:00/122-07:09:52,547) [spl_system_task]
(root,0,0,00:00:00/122-07:09:52,548) [spl_delay_taskq]
(root,0,0,00:00:00/122-07:09:52,549) [spl_dynamic_tas]
(root,0,0,00:00:00/122-07:09:52,550) [spl_kmem_cache]
(root,22980,4872,00:13:11/122-07:09:52,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/122-07:09:52,560) [zvol]
(root,0,0,00:00:00/122-07:09:52,563) [arc_prune]
(root,0,0,00:03:11/122-07:09:52,564) [arc_evict]
(root,0,0,00:02:58/122-07:09:52,565) [arc_reap]
(root,0,0,00:00:00/122-07:09:52,567) [dbu_evict]
(root,0,0,00:02:53/122-07:09:52,568) [dbuf_evict]
(root,0,0,00:00:00/122-07:09:52,640) [z_vdev_file]
(root,0,0,00:01:28/122-07:09:52,642) [l2arc_feed]
(root,0,0,00:00:00/122-07:09:52,679) [cryptd]
(root,4816,2672,00:00:04/122-07:09:52,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/122-07:09:52,719) [jbd2/md1-8]
(root,0,0,00:00:00/122-07:09:52,720) [ext4-rsv-conver]
(_rpc,7084,3812,00:00:16/122-07:09:52,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,5112,00:00:09/122-07:09:52,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:18:16/122-07:09:52,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:04:23/122-07:09:52,787) /usr/sbin/watchdog-mux
(messagebus,9524,4228,00:09:14/122-07:09:52,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,4084,00:14:09/122-07:09:52,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,5908,00:01:06/122-07:09:52,792) /lib/systemd/systemd-logind
(root,12244,5216,00:00:02/122-07:09:52,795) /usr/sbin/smartd -n
(root,164148,3800,00:00:00/122-07:09:52,798) /usr/sbin/zed -F
(root,224732,1980,00:00:12/122-07:09:52,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1036,00:00:00/122-07:09:52,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1344,00:00:02/122-07:09:52,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2112,00:00:00/122-07:09:51,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:04:08/122-07:09:51,969) bpfilter_umh
(root,13808,6144,00:07:14/122-07:09:51,983) /usr/sbin/sshd -D
(root,5940,1500,00:00:00/122-07:09:51,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,804576,3896,00:34:55/122-07:09:51,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,741852,59104,02:15:37/122-07:09:51,1104) /usr/bin/pmxcfs
(root,9600,2112,00:00:33/122-07:09:51,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4512,00:00:23/122-07:09:51,1203) /usr/lib/postfix/sbin/master -w
(postfix,43956,7784,00:00:04/122-07:09:51,1205) qmgr -l -t unix -u
(root,8832,2544,00:00:12/122-07:09:50,1218) /usr/sbin/cron -f
(root,304368,31996,04:29:13/122-07:09:50,1224) pve-firewall
(root,303056,39288,10:47:40/122-07:09:50,1226) pvestatd
(root,353788,3428,00:01:24/122-07:09:49,1249) pvedaemon
(root,336348,10232,00:10:04/122-07:09:49,1258) pve-ha-crm
(www-data,355272,144708,00:03:07/122-07:09:49,1259) pveproxy
(www-data,68832,57832,00:01:59/122-07:09:48,1265) spiceproxy
(root,335964,33216,00:16:34/122-07:09:48,1267) pve-ha-lrm
(root,5449912,2675860,5-15:49:29/122-07:09:47,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:08/122-07:09:47,1285) [kvm-nx-lpage-re]
(root,0,0,09:43:47/122-07:09:47,1305) [vhost-1281]
(root,0,0,08:31:13/122-07:09:47,1324) [vhost-1281]
(root,0,0,00:51:28/122-07:09:47,1329) [kvm-pit/1281]
(root,13999112,8468056,30-00:19:55/122-07:09:44,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:04:12/122-07:09:44,1348) [kvm-nx-lpage-re]
(root,0,0,00:43:36/122-07:09:43,1367) [vhost-1344]
(root,0,0,01:00:31/122-07:09:43,1372) [kvm-pit/1344]
(root,0,0,00:00:00/122-07:09:40,1374) [dio/md2]
(root,3258760,2097944,27-00:53:30/122-07:09:40,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:13/122-07:09:40,1415) [kvm-nx-lpage-re]
(root,0,0,04:54:17/122-07:09:39,1434) [vhost-1411]
(root,0,0,00:00:00/122-07:09:39,1437) [kvm-pit/1411]
(root,0,0,00:00:00/122-07:09:38,1455) [ib-comp-wq]
(root,0,0,00:00:00/122-07:09:38,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/122-07:09:38,1457) [ib_mcast]
(root,0,0,00:00:00/122-07:09:38,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/122-07:09:38,1459) [rdma_cm]
(root,0,0,00:00:00/122-07:09:38,1460) [cifsiod]
(root,0,0,00:00:00/122-07:09:38,1461) [smb3decryptd]
(root,0,0,00:00:00/122-07:09:38,1462) [cifsfileinfoput]
(root,0,0,00:00:00/122-07:09:38,1463) [cifsoplockd]
(root,0,0,00:06:25/122-07:09:38,1465) [cifsd]
(root,0,0,00:08:55/122-07:09:38,1498) [cifsd]
(root,6760248,3968608,7-22:04:28/122-07:09:35,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:47/122-07:09:35,1519) [kvm-nx-lpage-re]
(root,0,0,01:32:00/122-07:09:35,1538) [vhost-1515]
(root,0,0,00:00:00/122-07:09:35,1543) [kvm-pit/1515]
(root,20384060,16461000,9-12:09:32/122-07:09:31,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:04/122-07:09:31,1561) [kvm-nx-lpage-re]
(root,0,0,00:40:53/122-07:09:31,1580) [vhost-1557]
(root,0,0,00:00:00/122-07:09:31,1585) [kvm-pit/1557]
(root,18991632,5172108,6-18:08:37/122-07:09:27,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:25/122-07:09:27,1628) [kvm-nx-lpage-re]
(root,0,0,00:01:52/122-07:09:27,1647) [vhost-1624]
(root,0,0,00:00:00/122-07:09:27,1652) [kvm-pit/1624]
(root,5555784,4206716,15-11:51:19/122-07:09:23,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:26/122-07:09:23,1669) [kvm-nx-lpage-re]
(root,0,0,00:47:26/122-07:09:23,1690) [vhost-1665]
(root,0,0,00:00:00/122-07:09:23,1693) [kvm-pit/1665]
(root,10079696,6646004,3-13:02:28/122-07:09:19,1733) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:22/122-07:09:19,1737) [kvm-nx-lpage-re]
(root,0,0,00:03:16/122-07:09:19,1756) [vhost-1733]
(root,0,0,00:58:55/122-07:09:19,1761) [kvm-pit/1733]
(root,0,0,00:00:00/52:04,1818) [kworker/0:1-events]
(root,0,0,00:00:00/49:04,2627) [kworker/7:0-events]
(root,0,0,00:00:00/48:05,2892) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:00/29:19,7956) [kworker/u16:1-events_unbound]
(root,0,0,00:00:00/22:04,9890) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/20:04,10415) [kworker/7:1-events]
(root,0,0,00:00:00/19:04,10677) [kworker/5:2-events]
(root,0,0,00:00:00/19:04,10678) [kworker/5:3-cgroup_destroy]
(root,0,0,00:00:00/18:53,10708) [kworker/1:0-events]
(root,363192,23684,00:00:50/49-10:26:26,10840) pvedaemon worker
(root,0,0,00:00:00/18:14,10909) [kworker/6:1-dio/md2]
(root,0,0,00:00:00/16:04,11462) [kworker/1:1-events]
(root,0,0,00:00:00/14:04,11992) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/14:04,11993) [kworker/4:3-events]
(root,0,0,00:00:00/12:04,12510) [kworker/3:0-events]
(root,0,0,00:00:00/11:04,12770) [kworker/6:2-dio/md2]
(root,0,0,00:00:00/11:04,12771) [kworker/6:3-dio/md2]
(root,0,0,00:00:00/09:59,13033) [kworker/1:2-rcu_gp]
(root,0,0,00:00:00/09:26,13212) [kworker/u16:2-events_power_efficient]
(root,0,0,00:00:00/09:04,13292) [kworker/0:3-cgroup_destroy]
(root,0,0,00:00:00/08:04,13550) [kworker/2:1-rcu_gp]
(root,0,0,00:00:00/05:43,14138) [kworker/6:0-dio/md2]
(root,0,0,00:00:00/05:43,14139) [kworker/6:4-dio/md2]
(root,0,0,00:00:00/05:29,14252) [kworker/6:5-dio/md2]
(root,0,0,00:00:00/05:29,14253) [kworker/6:6-dio/md2]
(root,0,0,00:00:00/05:29,14254) [kworker/6:7-dio/md2]
(root,0,0,00:00:00/05:29,14255) [kworker/6:8-dio/md2]
(root,0,0,00:00:00/05:04,14355) [kworker/1:3]
(root,0,0,00:00:00/04:57,14405) [kworker/6:9-dio/md2]
(root,0,0,00:00:00/04:52,14423) [kworker/6:10-dio/md2]
(root,0,0,00:00:00/04:52,14424) [kworker/6:11-dio/md2]
(root,0,0,00:00:00/04:52,14425) [kworker/6:12-dio/md2]
(root,0,0,00:00:00/04:52,14426) [kworker/6:13-dio/md2]
(root,0,0,00:00:00/04:52,14427) [kworker/6:14-cgroup_destroy]
(root,0,0,00:00:00/04:52,14428) [kworker/6:15-dio/md2]
(root,0,0,00:00:00/04:52,14429) [kworker/6:16-cgroup_destroy]
(root,0,0,00:00:00/04:52,14430) [kworker/6:17-events]
(root,0,0,00:00:00/04:52,14431) [kworker/6:18-dio/md2]
(root,0,0,00:00:00/04:52,14432) [kworker/6:19]
(root,0,0,00:00:00/03:04,14936) [kworker/0:0-events]
(root,0,0,00:00:00/02:04,15193) [kworker/5:0-events]
(root,0,0,00:00:00/02:04,15194) [kworker/5:1]
(root,0,0,00:00:00/01:04,15461) [kworker/4:1]
(root,7188,3236,00:00:00/00:00,15882) /bin/bash /usr/bin/check_mk_agent
(root,7632,2624,00:00:00/00:00,15908) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,996,00:00:00/00:00,15909) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362400,29652,00:00:25/24-05:37:49,16649) pvedaemon worker
(postfix,43844,7808,00:00:00/01:39:00,21757) pickup -l -t unix -u -c
(root,86168,1992,00:00:04/23:19:03,28680) /usr/sbin/pvefw-logger
(www-data,77008,55004,00:00:01/23:19:03,28683) spiceproxy worker
(www-data,367824,137404,00:00:01/23:19:03,28685) pveproxy worker
(www-data,355976,131272,00:00:00/23:19:03,28686) pveproxy worker
(www-data,367868,137704,00:00:00/23:19:03,28687) pveproxy worker

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:cd:91:13:59:dc brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-11-04 22:19

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c4274368cf9

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,8308,00:09:50/102-17:25:46,1) /sbin/init
(root,0,0,00:00:05/102-17:25:46,2) [kthreadd]
(root,0,0,00:00:00/102-17:25:46,3) [rcu_gp]
(root,0,0,00:00:00/102-17:25:46,4) [rcu_par_gp]
(root,0,0,00:00:00/102-17:25:46,6) [kworker/0:0H]
(root,0,0,00:00:00/102-17:25:46,9) [mm_percpu_wq]
(root,0,0,00:02:06/102-17:25:46,10) [ksoftirqd/0]
(root,0,0,00:21:00/102-17:25:46,11) [rcu_sched]
(root,0,0,00:00:23/102-17:25:46,12) [migration/0]
(root,0,0,00:00:00/102-17:25:46,13) [idle_inject/0]
(root,0,0,00:00:00/102-17:25:46,14) [cpuhp/0]
(root,0,0,00:00:00/102-17:25:46,15) [cpuhp/1]
(root,0,0,00:00:00/102-17:25:46,16) [idle_inject/1]
(root,0,0,00:00:23/102-17:25:46,17) [migration/1]
(root,0,0,00:01:36/102-17:25:46,18) [ksoftirqd/1]
(root,0,0,00:00:00/102-17:25:46,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/102-17:25:46,21) [cpuhp/2]
(root,0,0,00:00:00/102-17:25:46,22) [idle_inject/2]
(root,0,0,00:00:23/102-17:25:46,23) [migration/2]
(root,0,0,00:01:14/102-17:25:46,24) [ksoftirqd/2]
(root,0,0,00:00:00/102-17:25:46,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/102-17:25:46,27) [cpuhp/3]
(root,0,0,00:00:00/102-17:25:46,28) [idle_inject/3]
(root,0,0,00:00:32/102-17:25:46,29) [migration/3]
(root,0,0,00:00:58/102-17:25:46,30) [ksoftirqd/3]
(root,0,0,00:00:00/102-17:25:46,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/102-17:25:46,33) [cpuhp/4]
(root,0,0,00:00:00/102-17:25:46,34) [idle_inject/4]
(root,0,0,00:00:21/102-17:25:46,35) [migration/4]
(root,0,0,00:00:52/102-17:25:46,36) [ksoftirqd/4]
(root,0,0,00:00:00/102-17:25:46,38) [kworker/4:0H]
(root,0,0,00:00:00/102-17:25:46,39) [cpuhp/5]
(root,0,0,00:00:00/102-17:25:46,40) [idle_inject/5]
(root,0,0,00:00:23/102-17:25:46,41) [migration/5]
(root,0,0,00:13:44/102-17:25:46,42) [ksoftirqd/5]
(root,0,0,00:00:00/102-17:25:46,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/102-17:25:46,45) [cpuhp/6]
(root,0,0,00:00:00/102-17:25:46,46) [idle_inject/6]
(root,0,0,00:00:21/102-17:25:46,47) [migration/6]
(root,0,0,00:04:05/102-17:25:46,48) [ksoftirqd/6]
(root,0,0,00:00:00/102-17:25:46,50) [kworker/6:0H]
(root,0,0,00:00:00/102-17:25:46,51) [cpuhp/7]
(root,0,0,00:00:00/102-17:25:46,52) [idle_inject/7]
(root,0,0,00:00:23/102-17:25:46,53) [migration/7]
(root,0,0,00:00:30/102-17:25:46,54) [ksoftirqd/7]
(root,0,0,00:00:00/102-17:25:46,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/102-17:25:46,57) [kdevtmpfs]
(root,0,0,00:00:00/102-17:25:46,58) [netns]
(root,0,0,00:00:00/102-17:25:46,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/102-17:25:46,60) [kauditd]
(root,0,0,00:00:03/102-17:25:46,62) [khungtaskd]
(root,0,0,00:00:00/102-17:25:46,63) [oom_reaper]
(root,0,0,00:00:00/102-17:25:46,64) [writeback]
(root,0,0,00:00:00/102-17:25:46,65) [kcompactd0]
(root,0,0,00:00:00/102-17:25:46,66) [ksmd]
(root,0,0,00:00:21/102-17:25:46,67) [khugepaged]
(root,0,0,00:00:00/102-17:25:46,113) [kintegrityd]
(root,0,0,00:00:00/102-17:25:46,114) [kblockd]
(root,0,0,00:00:00/102-17:25:46,115) [blkcg_punt_bio]
(root,0,0,00:00:00/102-17:25:46,116) [tpm_dev_wq]
(root,0,0,00:00:00/102-17:25:46,117) [ata_sff]
(root,0,0,00:00:00/102-17:25:46,118) [md]
(root,0,0,00:00:00/102-17:25:46,119) [edac-poller]
(root,0,0,00:00:00/102-17:25:46,120) [devfreq_wq]
(root,0,0,00:00:00/102-17:25:46,121) [watchdogd]
(root,0,0,00:04:58/102-17:25:46,126) [kswapd0]
(root,0,0,00:00:00/102-17:25:46,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/102-17:25:46,129) [kthrotld]
(root,0,0,00:00:00/102-17:25:46,130) [acpi_thermal_pm]
(root,0,0,00:00:00/102-17:25:46,131) [nvme-wq]
(root,0,0,00:00:00/102-17:25:46,132) [nvme-reset-wq]
(root,0,0,00:00:00/102-17:25:46,133) [nvme-delete-wq]
(root,0,0,00:00:00/102-17:25:46,136) [ipv6_addrconf]
(root,0,0,00:00:00/102-17:25:46,145) [kstrp]
(root,0,0,00:00:00/102-17:25:46,146) [kworker/u17:0]
(root,0,0,00:00:00/102-17:25:46,161) [charger_manager]
(root,0,0,00:00:00/102-17:25:45,207) [scsi_eh_0]
(root,0,0,00:00:00/102-17:25:45,208) [scsi_tmf_0]
(root,0,0,00:00:00/102-17:25:45,209) [scsi_eh_1]
(root,0,0,00:00:00/102-17:25:45,210) [scsi_tmf_1]
(root,0,0,00:00:00/102-17:25:45,211) [scsi_eh_2]
(root,0,0,00:00:00/102-17:25:45,212) [scsi_tmf_2]
(root,0,0,00:00:00/102-17:25:45,213) [scsi_eh_3]
(root,0,0,00:00:00/102-17:25:45,214) [scsi_tmf_3]
(root,0,0,00:00:00/102-17:25:45,215) [scsi_eh_4]
(root,0,0,00:00:00/102-17:25:45,216) [scsi_tmf_4]
(root,0,0,00:00:00/102-17:25:45,217) [scsi_eh_5]
(root,0,0,00:00:00/102-17:25:45,218) [scsi_tmf_5]
(root,0,0,00:02:29/102-17:25:45,224) [kworker/1:1H-kblockd]
(root,0,0,00:01:50/102-17:25:45,225) [kworker/5:1H-kblockd]
(root,0,0,00:02:41/102-17:25:45,236) [kworker/0:1H-kblockd]
(root,0,0,00:01:54/102-17:25:45,237) [kworker/4:1H-kblockd]
(root,0,0,00:25:05/102-17:25:45,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/102-17:25:44,250) [raid5wq]
(root,0,0,00:02:46/102-17:25:39,309) [kworker/7:1H-kblockd]
(root,0,0,00:00:00/24:35,311) [kworker/7:1-events]
(root,0,0,00:00:00/24:35,312) [kworker/7:3-cgroup_destroy]
(root,0,0,00:01:54/102-17:25:24,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:19/102-17:25:24,452) [md0_raid1]
(root,0,0,00:00:01/102-17:25:24,456) [md1_raid1]
(root,0,0,00:45:13/102-17:25:24,460) [md2_raid1]
(root,0,0,00:04:29/102-17:25:24,476) [jbd2/md2-8]
(root,0,0,00:00:00/102-17:25:24,477) [ext4-rsv-conver]
(root,0,0,00:02:00/102-17:25:24,490) [kworker/3:1H-kblockd]
(root,362408,29952,00:00:33/29-21:20:01,513) pvedaemon worker
(root,218388,126416,00:29:01/102-17:25:24,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/102-17:25:23,543) [rpciod]
(root,0,0,00:00:00/102-17:25:23,544) [xprtiod]
(root,0,0,00:00:00/102-17:25:23,547) [spl_system_task]
(root,0,0,00:00:00/102-17:25:23,548) [spl_delay_taskq]
(root,0,0,00:00:00/102-17:25:23,549) [spl_dynamic_tas]
(root,0,0,00:00:00/102-17:25:23,550) [spl_kmem_cache]
(root,22980,4936,00:11:02/102-17:25:23,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/102-17:25:23,560) [zvol]
(root,0,0,00:00:00/102-17:25:23,563) [arc_prune]
(root,0,0,00:02:40/102-17:25:23,564) [arc_evict]
(root,0,0,00:02:29/102-17:25:23,565) [arc_reap]
(root,0,0,00:00:00/102-17:25:23,567) [dbu_evict]
(root,0,0,00:02:24/102-17:25:23,568) [dbuf_evict]
(root,0,0,00:00:00/23:35,590) [kworker/5:2-events]
(root,0,0,00:00:00/102-17:25:23,640) [z_vdev_file]
(root,0,0,00:01:13/102-17:25:23,642) [l2arc_feed]
(root,0,0,00:00:00/102-17:25:23,679) [cryptd]
(root,4816,2672,00:00:03/102-17:25:23,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/102-17:25:23,719) [jbd2/md1-8]
(root,0,0,00:00:00/102-17:25:23,720) [ext4-rsv-conver]
(_rpc,7012,3720,00:00:14/102-17:25:23,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,5584,00:00:08/102-17:25:23,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:15:24/102-17:25:23,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:03:39/102-17:25:23,787) /usr/sbin/watchdog-mux
(messagebus,9328,4160,00:07:39/102-17:25:23,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,3924,00:10:36/102-17:25:23,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,6392,00:00:56/102-17:25:23,792) /lib/systemd/systemd-logind
(root,12244,5216,00:00:02/102-17:25:23,795) /usr/sbin/smartd -n
(root,164148,3800,00:00:00/102-17:25:23,798) /usr/sbin/zed -F
(root,224732,1980,00:00:10/102-17:25:23,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1036,00:00:00/102-17:25:23,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1348,00:00:02/102-17:25:23,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2112,00:00:00/102-17:25:22,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:03:30/102-17:25:22,969) bpfilter_umh
(root,13808,6144,00:05:56/102-17:25:22,983) /usr/sbin/sshd -D
(root,5940,1500,00:00:00/102-17:25:22,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,804576,3932,00:29:04/102-17:25:22,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,655712,52800,01:55:30/102-17:25:22,1104) /usr/bin/pmxcfs
(root,9600,2112,00:00:27/102-17:25:22,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4524,00:00:20/102-17:25:22,1203) /usr/lib/postfix/sbin/master -w
(postfix,43956,7768,00:00:04/102-17:25:22,1205) qmgr -l -t unix -u
(root,8832,2564,00:00:10/102-17:25:21,1218) /usr/sbin/cron -f
(root,304368,31996,03:43:43/102-17:25:21,1224) pve-firewall
(root,303056,39280,09:03:01/102-17:25:21,1226) pvestatd
(root,353788,3868,00:01:10/102-17:25:20,1249) pvedaemon
(root,336348,10364,00:08:27/102-17:25:20,1258) pve-ha-crm
(www-data,355272,144884,00:02:37/102-17:25:20,1259) pveproxy
(www-data,68844,57180,00:01:40/102-17:25:19,1265) spiceproxy
(root,335964,33288,00:13:55/102-17:25:19,1267) pve-ha-lrm
(root,5449912,2940624,4-18:22:21/102-17:25:18,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:07/102-17:25:18,1285) [kvm-nx-lpage-re]
(root,0,0,08:11:55/102-17:25:18,1305) [vhost-1281]
(root,0,0,07:11:09/102-17:25:18,1324) [vhost-1281]
(root,0,0,00:43:37/102-17:25:18,1329) [kvm-pit/1281]
(root,13745124,8450284,22-04:42:01/102-17:25:15,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:03:29/102-17:25:15,1348) [kvm-nx-lpage-re]
(root,0,0,00:35:18/102-17:25:14,1367) [vhost-1344]
(root,0,0,00:51:07/102-17:25:14,1372) [kvm-pit/1344]
(root,0,0,00:00:00/102-17:25:11,1374) [dio/md2]
(root,3258760,2086588,22-15:35:15/102-17:25:11,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:11/102-17:25:11,1415) [kvm-nx-lpage-re]
(root,0,0,04:09:56/102-17:25:10,1434) [vhost-1411]
(root,0,0,00:00:00/102-17:25:10,1437) [kvm-pit/1411]
(root,0,0,00:00:00/102-17:25:09,1455) [ib-comp-wq]
(root,0,0,00:00:00/102-17:25:09,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/102-17:25:09,1457) [ib_mcast]
(root,0,0,00:00:00/102-17:25:09,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/102-17:25:09,1459) [rdma_cm]
(root,0,0,00:00:00/102-17:25:09,1460) [cifsiod]
(root,0,0,00:00:00/102-17:25:09,1461) [smb3decryptd]
(root,0,0,00:00:00/102-17:25:09,1462) [cifsfileinfoput]
(root,0,0,00:00:00/102-17:25:09,1463) [cifsoplockd]
(root,0,0,00:04:57/102-17:25:09,1465) [cifsd]
(root,0,0,00:07:26/102-17:25:09,1498) [cifsd]
(root,6576852,3646300,6-15:43:29/102-17:25:06,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:37/102-17:25:06,1519) [kvm-nx-lpage-re]
(root,0,0,01:17:00/102-17:25:06,1538) [vhost-1515]
(root,0,0,00:00:00/102-17:25:06,1543) [kvm-pit/1515]
(root,0,0,00:00:00/20:35,1545) [kworker/6:0-dio/md2]
(root,20236964,16117680,7-23:05:04/102-17:25:02,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:52/102-17:25:02,1561) [kvm-nx-lpage-re]
(root,0,0,00:34:31/102-17:25:02,1580) [vhost-1557]
(root,0,0,00:00:00/102-17:25:02,1585) [kvm-pit/1557]
(root,18982380,4840656,5-16:20:54/102-17:24:58,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:21/102-17:24:58,1628) [kvm-nx-lpage-re]
(root,0,0,00:01:33/102-17:24:58,1647) [vhost-1624]
(root,0,0,00:00:00/102-17:24:58,1652) [kvm-pit/1624]
(root,5474224,4155048,12-23:52:15/102-17:24:54,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:01:12/102-17:24:54,1669) [kvm-nx-lpage-re]
(root,0,0,00:40:10/102-17:24:54,1690) [vhost-1665]
(root,0,0,00:00:00/102-17:24:54,1693) [kvm-pit/1665]
(root,10021264,7996300,3-01:33:54/102-17:24:50,1733) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:18/102-17:24:50,1737) [kvm-nx-lpage-re]
(root,0,0,00:02:51/102-17:24:50,1756) [vhost-1733]
(root,0,0,00:49:56/102-17:24:50,1761) [kvm-pit/1733]
(root,0,0,00:00:00/18:50,2047) [kworker/u16:2-events_unbound]
(root,0,0,00:00:00/15:35,2883) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:00/13:35,3401) [kworker/1:3-cifsiod]
(root,0,0,00:00:00/13:22,3572) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/11:35,3971) [kworker/2:1-events]
(root,0,0,00:00:00/09:35,4485) [kworker/4:3-events]
(root,0,0,00:00:00/09:11,4628) [kworker/u16:1-events_power_efficient]
(root,0,0,00:00:00/08:35,4745) [kworker/5:0]
(root,0,0,00:00:00/08:35,4746) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/07:35,5003) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/07:07,5173) [kworker/1:0-events]
(root,0,0,00:00:00/04:35,5778) [kworker/2:2-events]
(root,0,0,00:00:00/03:43,6005) [kworker/u16:0]
(root,0,0,00:00:00/03:35,6038) [kworker/2:3]
(root,0,0,00:00:00/02:35,6298) [kworker/6:2-dio/md2]
(root,0,0,00:00:00/02:00,6473) [kworker/6:3]
(root,0,0,00:00:00/01:35,6564) [kworker/4:1-cgroup_destroy]
(root,0,0,00:00:00/01:35,6565) [kworker/4:2-events]
(postfix,43844,7756,00:00:00/01:30,6569) pickup -l -t unix -u -c
(root,0,0,00:00:00/01:27,6682) [kworker/1:1-mm_percpu_wq]
(root,0,0,00:00:00/00:35,6829) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/00:35,6830) [kworker/0:2-events]
(root,7188,3292,00:00:00/00:00,7111) /bin/bash /usr/bin/check_mk_agent
(root,7632,2716,00:00:00/00:00,7137) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,996,00:00:00/00:00,7138) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,363192,42084,00:00:30/29-20:41:57,10840) pvedaemon worker
(root,362400,40860,00:00:06/4-15:53:20,16649) pvedaemon worker
(root,0,0,00:00:00/58:35,23821) [kworker/0:3-events]
(root,0,0,00:00:00/48:35,26435) [kworker/3:3-events]
(root,86168,2076,00:00:02/10:34:34,27854) /usr/sbin/pvefw-logger
(www-data,69544,53492,00:00:00/10:34:34,27857) spiceproxy worker
(www-data,355568,130820,00:00:00/10:34:34,27866) pveproxy worker
(www-data,367824,137908,00:00:00/10:34:34,27867) pveproxy worker
(www-data,355568,130248,00:00:00/10:34:34,27868) pveproxy worker
(root,0,0,00:00:00/30:35,31224) [kworker/6:1-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:cd:91:13:59:dc brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-10-16 08:34

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c4299a9cb89

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,8316,00:07:46/80-06:31:10,1) /sbin/init
(root,0,0,00:00:04/80-06:31:10,2) [kthreadd]
(root,0,0,00:00:00/80-06:31:10,3) [rcu_gp]
(root,0,0,00:00:00/80-06:31:10,4) [rcu_par_gp]
(root,0,0,00:00:00/80-06:31:10,6) [kworker/0:0H]
(root,0,0,00:00:00/80-06:31:10,9) [mm_percpu_wq]
(root,0,0,00:01:43/80-06:31:10,10) [ksoftirqd/0]
(root,0,0,00:16:18/80-06:31:10,11) [rcu_sched]
(root,0,0,00:00:17/80-06:31:10,12) [migration/0]
(root,0,0,00:00:00/80-06:31:10,13) [idle_inject/0]
(root,0,0,00:00:00/80-06:31:10,14) [cpuhp/0]
(root,0,0,00:00:00/80-06:31:10,15) [cpuhp/1]
(root,0,0,00:00:00/80-06:31:10,16) [idle_inject/1]
(root,0,0,00:00:17/80-06:31:10,17) [migration/1]
(root,0,0,00:01:17/80-06:31:10,18) [ksoftirqd/1]
(root,0,0,00:00:00/80-06:31:10,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/80-06:31:10,21) [cpuhp/2]
(root,0,0,00:00:00/80-06:31:10,22) [idle_inject/2]
(root,0,0,00:00:17/80-06:31:10,23) [migration/2]
(root,0,0,00:00:59/80-06:31:10,24) [ksoftirqd/2]
(root,0,0,00:00:00/80-06:31:10,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/80-06:31:10,27) [cpuhp/3]
(root,0,0,00:00:00/80-06:31:10,28) [idle_inject/3]
(root,0,0,00:00:24/80-06:31:10,29) [migration/3]
(root,0,0,00:00:46/80-06:31:10,30) [ksoftirqd/3]
(root,0,0,00:00:00/80-06:31:10,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/80-06:31:10,33) [cpuhp/4]
(root,0,0,00:00:00/80-06:31:10,34) [idle_inject/4]
(root,0,0,00:00:16/80-06:31:10,35) [migration/4]
(root,0,0,00:00:41/80-06:31:10,36) [ksoftirqd/4]
(root,0,0,00:00:00/80-06:31:10,38) [kworker/4:0H]
(root,0,0,00:00:00/80-06:31:10,39) [cpuhp/5]
(root,0,0,00:00:00/80-06:31:10,40) [idle_inject/5]
(root,0,0,00:00:17/80-06:31:10,41) [migration/5]
(root,0,0,00:10:42/80-06:31:10,42) [ksoftirqd/5]
(root,0,0,00:00:00/80-06:31:10,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/80-06:31:10,45) [cpuhp/6]
(root,0,0,00:00:00/80-06:31:10,46) [idle_inject/6]
(root,0,0,00:00:16/80-06:31:10,47) [migration/6]
(root,0,0,00:03:07/80-06:31:10,48) [ksoftirqd/6]
(root,0,0,00:00:00/80-06:31:10,50) [kworker/6:0H]
(root,0,0,00:00:00/80-06:31:10,51) [cpuhp/7]
(root,0,0,00:00:00/80-06:31:10,52) [idle_inject/7]
(root,0,0,00:00:17/80-06:31:10,53) [migration/7]
(root,0,0,00:00:23/80-06:31:10,54) [ksoftirqd/7]
(root,0,0,00:00:00/80-06:31:10,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/80-06:31:10,57) [kdevtmpfs]
(root,0,0,00:00:00/80-06:31:10,58) [netns]
(root,0,0,00:00:00/80-06:31:10,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/80-06:31:10,60) [kauditd]
(root,0,0,00:00:02/80-06:31:10,62) [khungtaskd]
(root,0,0,00:00:00/80-06:31:10,63) [oom_reaper]
(root,0,0,00:00:00/80-06:31:10,64) [writeback]
(root,0,0,00:00:00/80-06:31:10,65) [kcompactd0]
(root,0,0,00:00:00/80-06:31:10,66) [ksmd]
(root,0,0,00:00:14/80-06:31:10,67) [khugepaged]
(root,0,0,00:00:00/80-06:31:10,113) [kintegrityd]
(root,0,0,00:00:00/80-06:31:10,114) [kblockd]
(root,0,0,00:00:00/80-06:31:10,115) [blkcg_punt_bio]
(root,0,0,00:00:00/80-06:31:10,116) [tpm_dev_wq]
(root,0,0,00:00:00/80-06:31:10,117) [ata_sff]
(root,0,0,00:00:00/80-06:31:10,118) [md]
(root,0,0,00:00:00/80-06:31:10,119) [edac-poller]
(root,0,0,00:00:00/80-06:31:10,120) [devfreq_wq]
(root,0,0,00:00:00/80-06:31:10,121) [watchdogd]
(root,0,0,00:03:39/80-06:31:10,126) [kswapd0]
(root,0,0,00:00:00/80-06:31:10,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/80-06:31:10,129) [kthrotld]
(root,0,0,00:00:00/80-06:31:10,130) [acpi_thermal_pm]
(root,0,0,00:00:00/80-06:31:10,131) [nvme-wq]
(root,0,0,00:00:00/80-06:31:10,132) [nvme-reset-wq]
(root,0,0,00:00:00/80-06:31:10,133) [nvme-delete-wq]
(root,0,0,00:00:00/80-06:31:10,136) [ipv6_addrconf]
(root,0,0,00:00:00/80-06:31:10,145) [kstrp]
(root,0,0,00:00:00/80-06:31:10,146) [kworker/u17:0]
(root,0,0,00:00:00/80-06:31:10,161) [charger_manager]
(root,0,0,00:00:00/80-06:31:09,207) [scsi_eh_0]
(root,0,0,00:00:00/80-06:31:09,208) [scsi_tmf_0]
(root,0,0,00:00:00/80-06:31:09,209) [scsi_eh_1]
(root,0,0,00:00:00/80-06:31:09,210) [scsi_tmf_1]
(root,0,0,00:00:00/80-06:31:09,211) [scsi_eh_2]
(root,0,0,00:00:00/80-06:31:09,212) [scsi_tmf_2]
(root,0,0,00:00:00/80-06:31:09,213) [scsi_eh_3]
(root,0,0,00:00:00/80-06:31:09,214) [scsi_tmf_3]
(root,0,0,00:00:00/80-06:31:09,215) [scsi_eh_4]
(root,0,0,00:00:00/80-06:31:09,216) [scsi_tmf_4]
(root,0,0,00:00:00/80-06:31:09,217) [scsi_eh_5]
(root,0,0,00:00:00/80-06:31:09,218) [scsi_tmf_5]
(root,0,0,00:01:58/80-06:31:09,224) [kworker/1:1H-kblockd]
(root,0,0,00:01:29/80-06:31:09,225) [kworker/5:1H-kblockd]
(root,0,0,00:02:08/80-06:31:09,236) [kworker/0:1H-kblockd]
(root,0,0,00:01:31/80-06:31:09,237) [kworker/4:1H-kblockd]
(root,0,0,00:19:26/80-06:31:09,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/80-06:31:08,250) [raid5wq]
(root,0,0,00:02:12/80-06:31:03,309) [kworker/7:1H-kblockd]
(root,0,0,00:01:31/80-06:30:48,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:18/80-06:30:48,452) [md0_raid1]
(root,0,0,00:00:01/80-06:30:48,456) [md1_raid1]
(root,0,0,00:39:17/80-06:30:48,460) [md2_raid1]
(root,0,0,00:03:28/80-06:30:48,476) [jbd2/md2-8]
(root,0,0,00:00:00/80-06:30:48,477) [ext4-rsv-conver]
(root,0,0,00:01:36/80-06:30:48,490) [kworker/3:1H-kblockd]
(root,362408,22324,00:00:10/7-10:25:25,513) pvedaemon worker
(root,173488,91812,00:20:00/80-06:30:48,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/80-06:30:47,543) [rpciod]
(root,0,0,00:00:00/80-06:30:47,544) [xprtiod]
(root,0,0,00:00:00/80-06:30:47,547) [spl_system_task]
(root,0,0,00:00:00/80-06:30:47,548) [spl_delay_taskq]
(root,0,0,00:00:00/80-06:30:47,549) [spl_dynamic_tas]
(root,0,0,00:00:00/80-06:30:47,550) [spl_kmem_cache]
(root,22980,4936,00:08:36/80-06:30:47,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/80-06:30:47,560) [zvol]
(root,0,0,00:00:00/80-06:30:47,563) [arc_prune]
(root,0,0,00:02:04/80-06:30:47,564) [arc_evict]
(root,0,0,00:01:55/80-06:30:47,565) [arc_reap]
(root,0,0,00:00:00/80-06:30:47,567) [dbu_evict]
(root,0,0,00:01:52/80-06:30:47,568) [dbuf_evict]
(root,0,0,00:00:00/80-06:30:47,640) [z_vdev_file]
(root,0,0,00:00:57/80-06:30:47,642) [l2arc_feed]
(root,0,0,00:00:00/80-06:30:47,679) [cryptd]
(root,4816,2672,00:00:02/80-06:30:47,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/80-06:30:47,719) [jbd2/md1-8]
(root,0,0,00:00:00/80-06:30:47,720) [ext4-rsv-conver]
(_rpc,6932,3608,00:00:10/80-06:30:47,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,5592,00:00:06/80-06:30:47,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:12:10/80-06:30:47,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:02:50/80-06:30:47,787) /usr/sbin/watchdog-mux
(messagebus,9328,4160,00:06:04/80-06:30:47,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,4000,00:06:56/80-06:30:47,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,6400,00:00:43/80-06:30:47,792) /lib/systemd/systemd-logind
(root,12244,5216,00:00:01/80-06:30:47,795) /usr/sbin/smartd -n
(root,164148,3816,00:00:00/80-06:30:47,798) /usr/sbin/zed -F
(root,224732,1980,00:00:08/80-06:30:47,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1036,00:00:00/80-06:30:47,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1368,00:00:01/80-06:30:47,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2112,00:00:00/80-06:30:46,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:02:46/80-06:30:46,969) bpfilter_umh
(root,13808,6144,00:04:53/80-06:30:46,983) /usr/sbin/sshd -D
(root,5940,1500,00:00:00/80-06:30:46,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,804576,4216,00:23:18/80-06:30:46,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,649508,48604,01:32:16/80-06:30:46,1104) /usr/bin/pmxcfs
(root,9600,2112,00:00:21/80-06:30:46,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4528,00:00:15/80-06:30:46,1203) /usr/lib/postfix/sbin/master -w
(postfix,43956,7772,00:00:03/80-06:30:46,1205) qmgr -l -t unix -u
(root,8832,2660,00:00:08/80-06:30:45,1218) /usr/sbin/cron -f
(root,304368,32120,02:52:13/80-06:30:45,1224) pve-firewall
(root,303056,39452,07:04:44/80-06:30:45,1226) pvestatd
(root,353788,3392,00:00:55/80-06:30:44,1249) pvedaemon
(root,336348,11292,00:06:37/80-06:30:44,1258) pve-ha-crm
(www-data,355280,146008,00:02:02/80-06:30:44,1259) pveproxy
(www-data,68908,53600,00:01:17/80-06:30:43,1265) spiceproxy
(root,335964,34012,00:10:54/80-06:30:43,1267) pve-ha-lrm
(root,5449912,3662232,3-18:21:58/80-06:30:42,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:05/80-06:30:42,1285) [kvm-nx-lpage-re]
(root,0,0,06:32:11/80-06:30:42,1305) [vhost-1281]
(root,0,0,05:46:02/80-06:30:42,1324) [vhost-1281]
(root,0,0,00:34:35/80-06:30:42,1329) [kvm-pit/1281]
(root,13703004,8425340,14-17:33:02/80-06:30:39,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:02:40/80-06:30:39,1348) [kvm-nx-lpage-re]
(root,0,0,00:29:47/80-06:30:38,1367) [vhost-1344]
(root,0,0,00:40:13/80-06:30:38,1372) [kvm-pit/1344]
(root,0,0,00:00:00/80-06:30:35,1374) [dio/md2]
(root,3258760,2059932,17-15:34:05/80-06:30:35,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:08/80-06:30:35,1415) [kvm-nx-lpage-re]
(root,0,0,03:21:18/80-06:30:34,1434) [vhost-1411]
(root,0,0,00:00:00/80-06:30:34,1437) [kvm-pit/1411]
(root,0,0,00:00:00/80-06:30:33,1455) [ib-comp-wq]
(root,0,0,00:00:00/80-06:30:33,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/80-06:30:33,1457) [ib_mcast]
(root,0,0,00:00:00/80-06:30:33,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/80-06:30:33,1459) [rdma_cm]
(root,0,0,00:00:00/80-06:30:33,1460) [cifsiod]
(root,0,0,00:00:00/80-06:30:33,1461) [smb3decryptd]
(root,0,0,00:00:00/80-06:30:33,1462) [cifsfileinfoput]
(root,0,0,00:00:00/80-06:30:33,1463) [cifsoplockd]
(root,0,0,00:03:17/80-06:30:33,1465) [cifsd]
(root,0,0,00:05:44/80-06:30:33,1498) [cifsd]
(root,6150364,3059896,5-05:18:34/80-06:30:30,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:26/80-06:30:30,1519) [kvm-nx-lpage-re]
(root,0,0,01:00:46/80-06:30:30,1538) [vhost-1515]
(root,0,0,00:00:00/80-06:30:30,1543) [kvm-pit/1515]
(root,20135152,16437300,6-05:22:28/80-06:30:26,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:38/80-06:30:26,1561) [kvm-nx-lpage-re]
(root,0,0,00:27:18/80-06:30:26,1580) [vhost-1557]
(root,0,0,00:00:00/80-06:30:26,1585) [kvm-pit/1557]
(root,18982380,4228588,4-11:03:31/80-06:30:22,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:16/80-06:30:22,1628) [kvm-nx-lpage-re]
(root,0,0,00:01:12/80-06:30:22,1647) [vhost-1624]
(root,0,0,00:00:00/80-06:30:22,1652) [kvm-pit/1624]
(root,5375496,4138904,10-03:26:30/80-06:30:18,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:55/80-06:30:18,1669) [kvm-nx-lpage-re]
(root,0,0,00:31:44/80-06:30:18,1690) [vhost-1665]
(root,0,0,00:00:00/80-06:30:18,1693) [kvm-pit/1665]
(root,9932380,7316608,1-23:34:59/80-06:30:14,1733) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:13/80-06:30:14,1737) [kvm-nx-lpage-re]
(root,0,0,00:02:08/80-06:30:14,1756) [vhost-1733]
(root,0,0,00:39:27/80-06:30:14,1761) [kvm-pit/1733]
(root,0,0,00:00:00/57:59,5317) [kworker/7:1-cgroup_destroy]
(postfix,43844,7748,00:00:00/49:38,7441) pickup -l -t unix -u -c
(root,0,0,00:00:00/43:59,8949) [kworker/5:3-events]
(root,354244,9628,00:00:07/7-09:47:21,10840) pvedaemon worker
(root,0,0,00:00:00/29:59,12577) [kworker/7:0-events]
(root,0,0,00:00:00/29:52,12579) [kworker/u16:1-events_unbound]
(root,0,0,00:00:00/28:59,12837) [kworker/0:1-events]
(root,0,0,00:00:00/26:59,13353) [kworker/4:1-events]
(www-data,367832,137632,00:00:00/18:29:22,14289) pveproxy worker
(www-data,355844,131244,00:00:00/18:29:22,14290) pveproxy worker
(www-data,355988,131224,00:00:00/18:29:22,14291) pveproxy worker
(root,0,0,00:00:00/22:59,14382) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/19:59,15155) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/19:59,15156) [kworker/3:3-events]
(root,362480,14968,00:00:12/7-11:30:35,15838) pvedaemon worker
(root,0,0,00:00:00/16:59,15941) [kworker/5:2-cgroup_destroy]
(root,0,0,00:00:00/14:59,16453) [kworker/6:1-dio/md2]
(root,0,0,00:00:00/11:06,17469) [kworker/1:0-events]
(root,0,0,00:00:00/10:59,17503) [kworker/4:0-cgroup_destroy]
(root,0,0,00:00:00/09:48,17792) [kworker/u16:2-flush-9:2]
(root,0,0,00:00:00/08:59,18022) [kworker/1:3-events]
(root,0,0,00:00:00/07:59,18288) [kworker/2:0-events]
(root,0,0,00:00:00/07:59,18289) [kworker/2:3-cgroup_destroy]
(root,0,0,00:00:00/06:59,18552) [kworker/6:0-dio/md2]
(root,0,0,00:00:00/05:59,18820) [kworker/7:2-cgroup_destroy]
(root,0,0,00:00:00/04:59,19081) [kworker/7:3-events]
(root,0,0,00:00:00/03:59,19354) [kworker/5:0-cgroup_destroy]
(root,0,0,00:00:00/03:59,19355) [kworker/5:1-events]
(root,0,0,00:00:00/03:53,19359) [kworker/1:1-events]
(root,0,0,00:00:00/00:59,20154) [kworker/6:2-dio/md2]
(root,13808,6724,00:00:00/00:17,20272) sshd: [accepted]
(root,7188,3428,00:00:00/00:00,20522) /bin/bash /usr/bin/check_mk_agent
(root,7632,2688,00:00:00/00:00,20560) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,988,00:00:00/00:00,20561) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,86168,2016,00:00:04/23:39:59,26120) /usr/sbin/pvefw-logger
(www-data,69704,50528,00:00:01/23:39:58,26123) spiceproxy worker

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:cd:91:13:59:dc brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-09-23 21:39

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42935dab8d

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170044,8344,00:06:23/66-10:49:54,1) /sbin/init
(root,0,0,00:00:03/66-10:49:54,2) [kthreadd]
(root,0,0,00:00:00/66-10:49:54,3) [rcu_gp]
(root,0,0,00:00:00/66-10:49:54,4) [rcu_par_gp]
(root,0,0,00:00:00/66-10:49:54,6) [kworker/0:0H]
(root,0,0,00:00:00/66-10:49:54,9) [mm_percpu_wq]
(root,0,0,00:01:27/66-10:49:54,10) [ksoftirqd/0]
(root,0,0,00:13:13/66-10:49:54,11) [rcu_sched]
(root,0,0,00:00:14/66-10:49:54,12) [migration/0]
(root,0,0,00:00:00/66-10:49:54,13) [idle_inject/0]
(root,0,0,00:00:00/66-10:49:54,14) [cpuhp/0]
(root,0,0,00:00:00/66-10:49:54,15) [cpuhp/1]
(root,0,0,00:00:00/66-10:49:54,16) [idle_inject/1]
(root,0,0,00:00:14/66-10:49:54,17) [migration/1]
(root,0,0,00:01:05/66-10:49:54,18) [ksoftirqd/1]
(root,0,0,00:00:00/66-10:49:54,20) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/66-10:49:54,21) [cpuhp/2]
(root,0,0,00:00:00/66-10:49:54,22) [idle_inject/2]
(root,0,0,00:00:14/66-10:49:54,23) [migration/2]
(root,0,0,00:00:50/66-10:49:54,24) [ksoftirqd/2]
(root,0,0,00:00:00/66-10:49:54,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/66-10:49:54,27) [cpuhp/3]
(root,0,0,00:00:00/66-10:49:54,28) [idle_inject/3]
(root,0,0,00:00:20/66-10:49:54,29) [migration/3]
(root,0,0,00:00:38/66-10:49:54,30) [ksoftirqd/3]
(root,0,0,00:00:00/66-10:49:54,32) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/66-10:49:54,33) [cpuhp/4]
(root,0,0,00:00:00/66-10:49:54,34) [idle_inject/4]
(root,0,0,00:00:13/66-10:49:54,35) [migration/4]
(root,0,0,00:00:34/66-10:49:54,36) [ksoftirqd/4]
(root,0,0,00:00:00/66-10:49:54,38) [kworker/4:0H]
(root,0,0,00:00:00/66-10:49:54,39) [cpuhp/5]
(root,0,0,00:00:00/66-10:49:54,40) [idle_inject/5]
(root,0,0,00:00:14/66-10:49:54,41) [migration/5]
(root,0,0,00:08:54/66-10:49:54,42) [ksoftirqd/5]
(root,0,0,00:00:00/66-10:49:54,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/66-10:49:54,45) [cpuhp/6]
(root,0,0,00:00:00/66-10:49:54,46) [idle_inject/6]
(root,0,0,00:00:13/66-10:49:54,47) [migration/6]
(root,0,0,00:02:33/66-10:49:54,48) [ksoftirqd/6]
(root,0,0,00:00:00/66-10:49:54,50) [kworker/6:0H]
(root,0,0,00:00:00/66-10:49:54,51) [cpuhp/7]
(root,0,0,00:00:00/66-10:49:54,52) [idle_inject/7]
(root,0,0,00:00:14/66-10:49:54,53) [migration/7]
(root,0,0,00:00:18/66-10:49:54,54) [ksoftirqd/7]
(root,0,0,00:00:00/66-10:49:54,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/66-10:49:54,57) [kdevtmpfs]
(root,0,0,00:00:00/66-10:49:54,58) [netns]
(root,0,0,00:00:00/66-10:49:54,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/66-10:49:54,60) [kauditd]
(root,0,0,00:00:02/66-10:49:54,62) [khungtaskd]
(root,0,0,00:00:00/66-10:49:54,63) [oom_reaper]
(root,0,0,00:00:00/66-10:49:54,64) [writeback]
(root,0,0,00:00:00/66-10:49:54,65) [kcompactd0]
(root,0,0,00:00:00/66-10:49:54,66) [ksmd]
(root,0,0,00:00:11/66-10:49:54,67) [khugepaged]
(root,0,0,00:00:00/66-10:49:54,113) [kintegrityd]
(root,0,0,00:00:00/66-10:49:54,114) [kblockd]
(root,0,0,00:00:00/66-10:49:54,115) [blkcg_punt_bio]
(root,0,0,00:00:00/66-10:49:54,116) [tpm_dev_wq]
(root,0,0,00:00:00/66-10:49:54,117) [ata_sff]
(root,0,0,00:00:00/66-10:49:54,118) [md]
(root,0,0,00:00:00/66-10:49:54,119) [edac-poller]
(root,0,0,00:00:00/66-10:49:54,120) [devfreq_wq]
(root,0,0,00:00:00/66-10:49:54,121) [watchdogd]
(root,0,0,00:02:55/66-10:49:54,126) [kswapd0]
(root,0,0,00:00:00/66-10:49:54,127) [ecryptfs-kthrea]
(root,0,0,00:00:00/66-10:49:54,129) [kthrotld]
(root,0,0,00:00:00/66-10:49:54,130) [acpi_thermal_pm]
(root,0,0,00:00:00/66-10:49:54,131) [nvme-wq]
(root,0,0,00:00:00/66-10:49:54,132) [nvme-reset-wq]
(root,0,0,00:00:00/66-10:49:54,133) [nvme-delete-wq]
(root,0,0,00:00:00/66-10:49:54,136) [ipv6_addrconf]
(root,0,0,00:00:00/66-10:49:54,145) [kstrp]
(root,0,0,00:00:00/66-10:49:54,146) [kworker/u17:0]
(root,0,0,00:00:00/66-10:49:54,161) [charger_manager]
(root,0,0,00:00:00/66-10:49:53,207) [scsi_eh_0]
(root,0,0,00:00:00/66-10:49:53,208) [scsi_tmf_0]
(root,0,0,00:00:00/66-10:49:53,209) [scsi_eh_1]
(root,0,0,00:00:00/66-10:49:53,210) [scsi_tmf_1]
(root,0,0,00:00:00/66-10:49:53,211) [scsi_eh_2]
(root,0,0,00:00:00/66-10:49:53,212) [scsi_tmf_2]
(root,0,0,00:00:00/66-10:49:53,213) [scsi_eh_3]
(root,0,0,00:00:00/66-10:49:53,214) [scsi_tmf_3]
(root,0,0,00:00:00/66-10:49:53,215) [scsi_eh_4]
(root,0,0,00:00:00/66-10:49:53,216) [scsi_tmf_4]
(root,0,0,00:00:00/66-10:49:53,217) [scsi_eh_5]
(root,0,0,00:00:00/66-10:49:53,218) [scsi_tmf_5]
(root,0,0,00:01:35/66-10:49:53,224) [kworker/1:1H-kblockd]
(root,0,0,00:01:11/66-10:49:53,225) [kworker/5:1H-kblockd]
(root,0,0,00:01:43/66-10:49:53,236) [kworker/0:1H-kblockd]
(root,0,0,00:01:13/66-10:49:53,237) [kworker/4:1H-kblockd]
(root,0,0,00:15:53/66-10:49:53,238) [kworker/6:1H-kblockd]
(root,0,0,00:00:00/66-10:49:52,250) [raid5wq]
(root,0,0,00:01:46/66-10:49:47,309) [kworker/7:1H-kblockd]
(root,0,0,00:01:13/66-10:49:32,449) [kworker/2:1H-kblockd]
(root,0,0,00:00:12/66-10:49:32,452) [md0_raid1]
(root,0,0,00:00:00/66-10:49:32,456) [md1_raid1]
(root,0,0,00:29:51/66-10:49:32,460) [md2_raid1]
(root,0,0,00:02:49/66-10:49:32,476) [jbd2/md2-8]
(root,0,0,00:00:00/66-10:49:32,477) [ext4-rsv-conver]
(root,0,0,00:01:17/66-10:49:32,490) [kworker/3:1H-kblockd]
(root,105204,40020,00:14:04/66-10:49:32,517) /lib/systemd/systemd-journald
(root,0,0,00:00:00/66-10:49:31,543) [rpciod]
(root,0,0,00:00:00/66-10:49:31,544) [xprtiod]
(root,0,0,00:00:00/66-10:49:31,547) [spl_system_task]
(root,0,0,00:00:00/66-10:49:31,548) [spl_delay_taskq]
(root,0,0,00:00:00/66-10:49:31,549) [spl_dynamic_tas]
(root,0,0,00:00:00/66-10:49:31,550) [spl_kmem_cache]
(root,22980,4936,00:07:07/66-10:49:31,551) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/66-10:49:31,560) [zvol]
(root,0,0,00:00:00/66-10:49:31,563) [arc_prune]
(root,0,0,00:01:42/66-10:49:31,564) [arc_evict]
(root,0,0,00:01:35/66-10:49:31,565) [arc_reap]
(root,0,0,00:00:00/66-10:49:31,567) [dbu_evict]
(root,0,0,00:01:32/66-10:49:31,568) [dbuf_evict]
(root,0,0,00:00:00/66-10:49:31,640) [z_vdev_file]
(root,0,0,00:00:46/66-10:49:31,642) [l2arc_feed]
(root,0,0,00:00:00/66-10:49:31,679) [cryptd]
(root,4816,2672,00:00:02/66-10:49:31,718) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/66-10:49:31,719) [jbd2/md1-8]
(root,0,0,00:00:00/66-10:49:31,720) [ext4-rsv-conver]
(_rpc,6932,3608,00:00:08/66-10:49:31,759) /sbin/rpcbind -f -w
(systemd-timesync,93092,5596,00:00:05/66-10:49:31,765) /lib/systemd/systemd-timesyncd
(root,8076,4680,00:10:08/66-10:49:31,767) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,2136,736,00:02:20/66-10:49:31,787) /usr/sbin/watchdog-mux
(messagebus,9328,4176,00:04:55/66-10:49:31,789) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,223768,4012,00:04:36/66-10:49:31,790) /usr/sbin/rsyslogd -n -iNONE
(root,19528,6404,00:00:36/66-10:49:31,792) /lib/systemd/systemd-logind
(root,12244,5328,00:00:01/66-10:49:31,795) /usr/sbin/smartd -n
(root,164148,3816,00:00:00/66-10:49:31,798) /usr/sbin/zed -F
(root,150864,1980,00:00:06/66-10:49:31,800) /usr/bin/lxcfs /var/lib/lxcfs
(root,275828,1036,00:00:00/66-10:49:31,802) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4084,1368,00:00:01/66-10:49:31,803) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,7304,2112,00:00:00/66-10:49:30,955) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2268,672,00:02:17/66-10:49:30,969) bpfilter_umh
(root,13808,6144,00:03:57/66-10:49:30,983) /usr/sbin/sshd -D
(root,5940,1500,00:00:00/66-10:49:30,986) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,730844,4108,00:19:36/66-10:49:30,1090) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,655712,51760,01:17:52/66-10:49:30,1104) /usr/bin/pmxcfs
(root,9600,2112,00:00:17/66-10:49:30,1146) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43484,4532,00:00:13/66-10:49:30,1203) /usr/lib/postfix/sbin/master -w
(postfix,43956,7796,00:00:02/66-10:49:30,1205) qmgr -l -t unix -u
(root,8832,2672,00:00:07/66-10:49:29,1218) /usr/sbin/cron -f
(root,304368,32136,02:21:22/66-10:49:29,1224) pve-firewall
(root,303056,39376,05:52:49/66-10:49:29,1226) pvestatd
(root,353788,3140,00:00:45/66-10:49:28,1249) pvedaemon
(root,336348,11296,00:05:29/66-10:49:28,1258) pve-ha-crm
(www-data,355176,143524,00:01:41/66-10:49:28,1259) pveproxy
(www-data,68836,55104,00:01:04/66-10:49:27,1265) spiceproxy
(root,335964,34016,00:09:02/66-10:49:27,1267) pve-ha-lrm
(root,5445616,3559388,3-03:05:44/66-10:49:26,1281) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:04/66-10:49:26,1285) [kvm-nx-lpage-re]
(root,0,0,05:25:40/66-10:49:26,1305) [vhost-1281]
(root,0,0,04:48:30/66-10:49:26,1324) [vhost-1281]
(root,0,0,00:28:50/66-10:49:26,1329) [kvm-pit/1281]
(root,13723488,8426952,10-23:49:41/66-10:49:23,1344) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:02:11/66-10:49:23,1348) [kvm-nx-lpage-re]
(root,0,0,00:24:58/66-10:49:22,1367) [vhost-1344]
(root,0,0,00:33:24/66-10:49:22,1372) [kvm-pit/1344]
(root,0,0,00:00:00/66-10:49:19,1374) [dio/md2]
(root,3254472,2059316,14-13:59:26/66-10:49:19,1411) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:06/66-10:49:19,1415) [kvm-nx-lpage-re]
(root,0,0,02:48:13/66-10:49:18,1434) [vhost-1411]
(root,0,0,00:00:00/66-10:49:18,1437) [kvm-pit/1411]
(root,0,0,00:00:00/66-10:49:17,1455) [ib-comp-wq]
(root,0,0,00:00:00/66-10:49:17,1456) [ib-comp-unb-wq]
(root,0,0,00:00:00/66-10:49:17,1457) [ib_mcast]
(root,0,0,00:00:00/66-10:49:17,1458) [ib_nl_sa_wq]
(root,0,0,00:00:00/66-10:49:17,1459) [rdma_cm]
(root,0,0,00:00:00/66-10:49:17,1460) [cifsiod]
(root,0,0,00:00:00/66-10:49:17,1461) [smb3decryptd]
(root,0,0,00:00:00/66-10:49:17,1462) [cifsfileinfoput]
(root,0,0,00:00:00/66-10:49:17,1463) [cifsoplockd]
(root,0,0,00:02:18/66-10:49:17,1465) [cifsd]
(root,0,0,00:04:51/66-10:49:17,1498) [cifsd]
(root,6098812,2922672,4-07:51:22/66-10:49:14,1515) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:21/66-10:49:14,1519) [kvm-nx-lpage-re]
(root,0,0,00:50:28/66-10:49:14,1538) [vhost-1515]
(root,0,0,00:00:00/66-10:49:14,1543) [kvm-pit/1515]
(root,19821500,14973552,5-03:56:18/66-10:49:10,1557) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:31/66-10:49:10,1561) [kvm-nx-lpage-re]
(root,0,0,00:22:45/66-10:49:10,1580) [vhost-1557]
(root,0,0,00:00:00/66-10:49:10,1585) [kvm-pit/1557]
(root,18978084,4112408,3-16:59:21/66-10:49:06,1624) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:13/66-10:49:06,1628) [kvm-nx-lpage-re]
(root,0,0,00:00:59/66-10:49:06,1647) [vhost-1624]
(root,0,0,00:00:00/66-10:49:06,1652) [kvm-pit/1624]
(root,5323988,4225724,8-09:27:43/66-10:49:02,1665) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:45/66-10:49:02,1669) [kvm-nx-lpage-re]
(root,0,0,00:26:26/66-10:49:02,1690) [vhost-1665]
(root,0,0,00:00:00/66-10:49:02,1693) [kvm-pit/1665]
(root,9884940,6978472,1-15:53:28/66-10:48:58,1733) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:11/66-10:48:58,1737) [kvm-nx-lpage-re]
(root,0,0,00:01:34/66-10:48:58,1756) [vhost-1733]
(root,0,0,00:32:49/66-10:48:58,1761) [kvm-pit/1733]
(root,0,0,00:00:00/43:43,3817) [kworker/1:2-cgroup_destroy]
(postfix,43844,7724,00:00:00/40:06,4829) pickup -l -t unix -u -c
(root,0,0,00:00:00/39:43,4896) [kworker/5:1-events]
(root,362532,11748,00:00:44/41-20:07:30,5956) pvedaemon worker
(root,0,0,00:00:00/28:43,7928) [kworker/u16:0-events_unbound]
(root,0,0,00:00:00/27:43,8194) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/27:43,8195) [kworker/0:3-events]
(root,0,0,00:00:00/24:27,9070) [kworker/6:0-cgroup_destroy]
(root,0,0,00:00:00/22:44,9565) [kworker/4:2-cgroup_destroy]
(root,0,0,00:00:00/17:43,10957) [kworker/2:0-events]
(root,0,0,00:00:00/16:43,11244) [kworker/5:2-events]
(root,0,0,00:00:00/14:43,11792) [kworker/7:0-events]
(root,0,0,00:00:00/14:43,11793) [kworker/7:2-events]
(root,0,0,00:00:00/13:43,12067) [kworker/1:1-events]
(root,0,0,00:00:00/12:43,12356) [kworker/2:3-cgroup_destroy]
(root,0,0,00:00:00/09:59,13131) [kworker/u16:1-events_unbound]
(root,0,0,00:00:00/08:43,13440) [kworker/4:0-mm_percpu_wq]
(root,0,0,00:00:00/07:43,13716) [kworker/3:1-events]
(root,0,0,00:00:00/07:43,13717) [kworker/3:2-events]
(root,0,0,00:00:00/05:43,14264) [kworker/6:2-mm_percpu_wq]
(root,0,0,00:00:00/04:44,14525) [kworker/u16:2-events_unbound]
(root,0,0,00:00:00/04:43,14534) [kworker/7:1-cgroup_destroy]
(root,0,0,00:00:00/02:43,15058) [kworker/0:0-events]
(root,86168,2032,00:00:00/03:58:42,15117) /usr/sbin/pvefw-logger
(www-data,76744,52364,00:00:00/03:58:42,15128) spiceproxy worker
(www-data,355472,128436,00:00:00/03:58:42,15129) pveproxy worker
(www-data,355472,128488,00:00:00/03:58:42,15130) pveproxy worker
(www-data,355472,128488,00:00:00/03:58:42,15131) pveproxy worker
(root,13808,6748,00:00:00/01:53,15306) sshd: [accepted]
(root,0,0,00:00:00/01:43,15333) [kworker/1:0-events]
(root,0,0,00:00:00/01:43,15334) [kworker/1:3]
(root,0,0,00:00:00/00:43,15611) [kworker/5:0-events]
(root,14736,7684,00:00:00/00:25,15662) sshd: root [priv]
(sshd,13808,5000,00:00:00/00:25,15663) sshd: root [net]
(root,14736,7668,00:00:00/00:10,15804) sshd: root [priv]
(sshd,13808,4992,00:00:00/00:08,15805) sshd: root [net]
(root,7188,3244,00:00:00/00:00,16002) /bin/bash /usr/bin/check_mk_agent
(root,7632,2744,00:00:00/00:00,16028) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,928,00:00:00/00:00,16029) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,362532,11656,00:00:43/41-23:07:49,21802) pvedaemon worker
(root,362600,11644,00:00:41/41-21:01:14,23701) pvedaemon worker

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether e6:23:06:9f:73:93 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b6:dc:bc:29:7e:c6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether c6:2d:37:24:70:de brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fa:b0:21:81:63:a5 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether b2:82:d3:c9:a6:bb brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 06:b7:20:0a:41:a0 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether a2:e1:9a:f1:72:94 brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 56:69:a5:e3:43:6b brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:cd:91:13:59:dc brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-09-10 01:58

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb4b4d50b4afb72cefc4c5c50fc14f1c42facbfbc3

Found public CheckMk agent:
Version: 1.4.0p31
AgentOS: linux
Hostname: node01
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,171160,7592,00:08:40/74-01:08:12,1) /sbin/init
(root,0,0,00:00:04/74-01:08:12,2) [kthreadd]
(root,0,0,00:00:00/74-01:08:12,3) [rcu_gp]
(root,0,0,00:00:00/74-01:08:12,4) [rcu_par_gp]
(root,0,0,00:00:00/74-01:08:12,6) [kworker/0:0H]
(root,0,0,00:00:00/74-01:08:12,9) [mm_percpu_wq]
(root,0,0,00:01:42/74-01:08:12,10) [ksoftirqd/0]
(root,0,0,00:15:49/74-01:08:12,11) [rcu_sched]
(root,0,0,00:00:15/74-01:08:12,12) [migration/0]
(root,0,0,00:00:00/74-01:08:12,13) [idle_inject/0]
(root,0,0,00:00:00/74-01:08:12,14) [cpuhp/0]
(root,0,0,00:00:00/74-01:08:12,15) [cpuhp/1]
(root,0,0,00:00:00/74-01:08:12,16) [idle_inject/1]
(root,0,0,00:00:15/74-01:08:12,17) [migration/1]
(root,0,0,00:01:17/74-01:08:12,18) [ksoftirqd/1]
(root,0,0,00:00:00/74-01:08:12,20) [kworker/1:0H]
(root,0,0,00:00:00/74-01:08:12,21) [cpuhp/2]
(root,0,0,00:00:00/74-01:08:12,22) [idle_inject/2]
(root,0,0,00:00:16/74-01:08:12,23) [migration/2]
(root,0,0,00:00:56/74-01:08:12,24) [ksoftirqd/2]
(root,0,0,00:00:00/74-01:08:12,26) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/74-01:08:12,27) [cpuhp/3]
(root,0,0,00:00:00/74-01:08:12,28) [idle_inject/3]
(root,0,0,00:00:24/74-01:08:12,29) [migration/3]
(root,0,0,00:00:45/74-01:08:12,30) [ksoftirqd/3]
(root,0,0,00:00:00/74-01:08:12,32) [kworker/3:0H]
(root,0,0,00:00:00/74-01:08:12,33) [cpuhp/4]
(root,0,0,00:00:00/74-01:08:12,34) [idle_inject/4]
(root,0,0,00:00:15/74-01:08:12,35) [migration/4]
(root,0,0,00:00:38/74-01:08:12,36) [ksoftirqd/4]
(root,0,0,00:00:00/74-01:08:12,38) [kworker/4:0H-kblockd]
(root,0,0,00:00:00/74-01:08:12,39) [cpuhp/5]
(root,0,0,00:00:00/74-01:08:12,40) [idle_inject/5]
(root,0,0,00:00:15/74-01:08:12,41) [migration/5]
(root,0,0,00:00:30/74-01:08:12,42) [ksoftirqd/5]
(root,0,0,00:00:00/74-01:08:12,44) [kworker/5:0H-kblockd]
(root,0,0,00:00:00/74-01:08:12,45) [cpuhp/6]
(root,0,0,00:00:00/74-01:08:12,46) [idle_inject/6]
(root,0,0,00:00:15/74-01:08:12,47) [migration/6]
(root,0,0,00:03:01/74-01:08:12,48) [ksoftirqd/6]
(root,0,0,00:00:00/74-01:08:12,50) [kworker/6:0H-kblockd]
(root,0,0,00:00:00/74-01:08:12,51) [cpuhp/7]
(root,0,0,00:00:00/74-01:08:12,52) [idle_inject/7]
(root,0,0,00:00:16/74-01:08:12,53) [migration/7]
(root,0,0,00:13:45/74-01:08:12,54) [ksoftirqd/7]
(root,0,0,00:00:00/74-01:08:12,56) [kworker/7:0H-kblockd]
(root,0,0,00:00:00/74-01:08:12,57) [kdevtmpfs]
(root,0,0,00:00:00/74-01:08:12,58) [netns]
(root,0,0,00:00:00/74-01:08:12,59) [rcu_tasks_kthre]
(root,0,0,00:00:00/74-01:08:12,60) [kauditd]
(root,0,0,00:00:02/74-01:08:12,61) [khungtaskd]
(root,0,0,00:00:00/74-01:08:12,62) [oom_reaper]
(root,0,0,00:00:00/74-01:08:12,63) [writeback]
(root,0,0,00:00:00/74-01:08:12,64) [kcompactd0]
(root,0,0,00:00:00/74-01:08:12,65) [ksmd]
(root,0,0,00:00:14/74-01:08:12,66) [khugepaged]
(root,0,0,00:00:00/74-01:08:12,114) [kintegrityd]
(root,0,0,00:00:00/74-01:08:12,115) [kblockd]
(root,0,0,00:00:00/74-01:08:12,116) [blkcg_punt_bio]
(root,0,0,00:00:00/74-01:08:12,118) [tpm_dev_wq]
(root,0,0,00:00:00/74-01:08:12,119) [ata_sff]
(root,0,0,00:00:00/74-01:08:12,120) [md]
(root,0,0,00:00:00/74-01:08:12,121) [edac-poller]
(root,0,0,00:00:00/74-01:08:12,122) [devfreq_wq]
(root,0,0,00:00:00/74-01:08:12,123) [watchdogd]
(root,0,0,00:02:24/74-01:08:12,129) [kswapd0]
(root,0,0,00:00:00/74-01:08:12,130) [ecryptfs-kthrea]
(root,0,0,00:00:00/74-01:08:12,132) [kthrotld]
(root,0,0,00:00:00/74-01:08:12,133) [acpi_thermal_pm]
(root,0,0,00:00:00/74-01:08:12,134) [nvme-wq]
(root,0,0,00:00:00/74-01:08:12,135) [nvme-reset-wq]
(root,0,0,00:00:00/74-01:08:12,136) [nvme-delete-wq]
(root,0,0,00:00:00/74-01:08:12,140) [ipv6_addrconf]
(root,0,0,00:00:00/74-01:08:12,149) [kstrp]
(root,0,0,00:00:00/74-01:08:12,150) [kworker/u17:0]
(root,0,0,00:00:00/74-01:08:12,163) [charger_manager]
(root,0,0,00:00:00/74-01:08:11,213) [scsi_eh_0]
(root,0,0,00:00:00/74-01:08:11,214) [scsi_tmf_0]
(root,0,0,00:00:00/74-01:08:11,215) [scsi_eh_1]
(root,0,0,00:00:00/74-01:08:11,216) [scsi_tmf_1]
(root,0,0,00:00:00/74-01:08:11,217) [scsi_eh_2]
(root,0,0,00:00:00/74-01:08:11,218) [scsi_tmf_2]
(root,0,0,00:00:00/74-01:08:11,219) [scsi_eh_3]
(root,0,0,00:00:00/74-01:08:11,220) [scsi_tmf_3]
(root,0,0,00:00:00/74-01:08:11,221) [scsi_eh_4]
(root,0,0,00:00:00/74-01:08:11,222) [scsi_tmf_4]
(root,0,0,00:00:00/74-01:08:11,223) [scsi_eh_5]
(root,0,0,00:00:00/74-01:08:11,224) [scsi_tmf_5]
(root,0,0,00:01:56/74-01:08:11,231) [kworker/7:1H-kblockd]
(root,0,0,00:18:49/74-01:08:11,232) [kworker/6:1H-kblockd]
(root,0,0,00:01:45/74-01:08:11,238) [kworker/1:1H-kblockd]
(root,0,0,00:01:21/74-01:08:11,239) [kworker/4:1H-kblockd]
(root,0,0,00:01:52/74-01:08:11,240) [kworker/0:1H-kblockd]
(root,0,0,00:01:25/74-01:08:11,241) [kworker/3:1H-kblockd]
(root,0,0,00:01:20/74-01:08:11,242) [kworker/5:1H-kblockd]
(root,0,0,00:01:22/74-01:08:11,246) [kworker/2:1H-kblockd]
(root,0,0,00:00:11/74-01:08:11,250) [md0_raid1]
(root,0,0,00:00:00/74-01:08:11,253) [md1_raid1]
(root,0,0,00:30:17/74-01:08:11,255) [md2_raid1]
(root,0,0,00:00:00/74-01:08:10,267) [raid5wq]
(root,0,0,00:03:11/74-01:08:10,290) [jbd2/md2-8]
(root,0,0,00:00:00/74-01:08:10,291) [ext4-rsv-conver]
(root,106468,39900,00:21:12/74-01:08:10,333) /lib/systemd/systemd-journald
(root,0,0,00:00:00/74-01:08:10,345) [rpciod]
(root,0,0,00:00:00/74-01:08:10,347) [xprtiod]
(root,0,0,00:00:00/74-01:08:10,355) [spl_system_task]
(root,0,0,00:00:00/74-01:08:10,357) [spl_delay_taskq]
(root,0,0,00:00:00/74-01:08:10,358) [spl_dynamic_tas]
(root,0,0,00:00:00/74-01:08:10,361) [spl_kmem_cache]
(root,22836,3784,00:07:56/74-01:08:10,364) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/74-01:08:10,377) [zvol]
(root,0,0,00:00:00/74-01:08:10,379) [arc_prune]
(root,0,0,00:01:54/74-01:08:10,380) [arc_evict]
(root,0,0,00:01:45/74-01:08:10,381) [arc_reap]
(root,0,0,00:00:00/74-01:08:10,382) [dbu_evict]
(root,0,0,00:01:41/74-01:08:10,383) [dbuf_evict]
(root,0,0,00:00:00/74-01:08:10,445) [z_vdev_file]
(root,0,0,00:00:51/74-01:08:10,446) [l2arc_feed]
(root,0,0,00:00:00/74-01:08:10,471) [cryptd]
(root,3864,2404,00:00:02/74-01:08:10,512) /sbin/mdadm --monitor --scan
(root,0,0,00:00:00/74-01:08:10,517) [jbd2/md1-8]
(root,0,0,00:00:00/74-01:08:10,518) [ext4-rsv-conver]
(_rpc,7016,3560,00:00:08/74-01:08:09,547) /sbin/rpcbind -f -w
(systemd-timesync,93080,4280,00:00:06/74-01:08:09,553) /lib/systemd/systemd-timesyncd
(root,8080,4632,00:14:10/74-01:08:09,554) /usr/sbin/haveged --Foreground --verbose=1 -w 1024
(root,19516,5208,00:00:40/74-01:08:09,572) /lib/systemd/systemd-logind
(root,100652,2508,00:00:00/74-01:08:09,573) /usr/sbin/zed -F
(root,150868,2004,00:00:07/74-01:08:09,575) /usr/bin/lxcfs /var/lib/lxcfs
(root,12252,4752,00:00:02/74-01:08:09,577) /usr/sbin/smartd -n
(messagebus,9056,3916,00:08:48/74-01:08:09,579) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,275832,904,00:00:00/74-01:08:09,585) /usr/lib/x86_64-linux-gnu/pve-lxc-syscalld/pve-lxc-syscalld --system /run/pve/lxc-syscalld.sock
(root,4088,1232,00:00:01/74-01:08:09,587) /usr/sbin/qmeventd /var/run/qmeventd.sock
(root,2140,704,00:02:34/74-01:08:09,588) /usr/sbin/watchdog-mux
(root,7292,1128,00:00:00/74-01:08:09,763) /usr/lib/x86_64-linux-gnu/lxc/lxc-monitord --daemon
(root,2272,676,00:02:33/74-01:08:09,775) bpfilter_umh
(root,15848,4612,00:06:08/74-01:08:09,789) /usr/sbin/sshd -D
(root,5944,1448,00:00:00/74-01:08:09,790) /sbin/agetty -o -p -- \u --noclear tty1 linux
(postfix,43844,7956,00:00:00/01:14:06,868) pickup -l -t unix -u -c
(root,732764,3516,00:21:55/74-01:08:09,898) /usr/bin/rrdcached -B -b /var/lib/rrdcached/db/ -j /var/lib/rrdcached/journal/ -p /var/run/rrdcached.pid -l unix:/var/run/rrdcached.sock
(root,717924,44480,01:30:22/74-01:08:09,917) /usr/bin/pmxcfs
(root,9604,2044,00:00:20/74-01:08:08,954) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,43472,3196,00:00:14/74-01:08:08,1011) /usr/lib/postfix/sbin/master -w
(postfix,43936,4404,00:00:03/74-01:08:08,1013) qmgr -l -t unix -u
(root,8836,2304,00:00:07/74-01:08:08,1023) /usr/sbin/cron -f
(root,306400,41948,02:39:50/74-01:08:07,1030) pve-firewall
(root,295800,46108,06:39:19/74-01:08:07,1031) pvestatd
(root,353692,14036,00:00:52/74-01:08:07,1055) pvedaemon
(root,338400,13064,00:06:12/74-01:08:06,1063) pve-ha-crm
(www-data,355112,145484,00:01:54/74-01:08:06,1064) pveproxy
(www-data,68856,57952,00:01:12/74-01:08:06,1070) spiceproxy
(root,338008,35940,00:10:04/74-01:08:06,1072) pve-ha-lrm
(root,5527252,3172476,4-19:04:21/74-01:08:05,1086) /usr/bin/kvm -id 100 -name pfsense01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/100.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/100.pid -daemonize -smbios type=1,uuid=435e7bfb-4cc3-4334-8ab8-afe455b6ef95 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/100.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -k de -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/pfSense-CE-2.4.3-RELEASE-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/100/vm-100-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap100i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=00:50:56:00:34:96,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -netdev type=tap,id=net1,ifname=tap100i1,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=3A:67:0E:23:9B:8A,netdev=net1,bus=pci.0,addr=0x13,id=net1,bootindex=301 -machine type=pc+pve0
(root,0,0,00:00:05/74-01:08:05,1090) [kvm-nx-lpage-re]
(root,0,0,09:30:38/74-01:08:04,1110) [vhost-1086]
(root,0,0,05:17:12/74-01:08:04,1129) [vhost-1086]
(root,0,0,00:31:42/74-01:08:04,1134) [kvm-pit/1086]
(root,13771056,8471104,14-05:35:55/74-01:08:01,1147) /usr/bin/kvm -id 101 -name SteuerPC10 -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/101.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/101.pid -daemonize -smbios type=1,uuid=88a97f46-649c-4043-b4d8-3d3bd5e2b959 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/101.vnc,password -no-hpet -cpu host,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -chardev socket,path=/var/run/qemu-server/101.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/SW_DVD9_Win_Pro_10_1709.1_64BIT_German_Pro_Ent_EDU_N_MLF_X21-67524.ISO,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide3,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=1,drive=drive-ide3,id=ide3,bootindex=201 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/101/vm-101-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap101i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=9E:22:0F:16:87:0E,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:02:27/74-01:08:01,1151) [kvm-nx-lpage-re]
(root,0,0,00:25:46/74-01:08:01,1171) [vhost-1147]
(root,0,0,00:36:27/74-01:08:00,1176) [kvm-pit/1147]
(root,0,0,00:00:00/74-01:07:57,1198) [dio/md2]
(root,3292044,2195376,16-09:48:17/74-01:07:57,1227) /usr/bin/kvm -id 102 -name monitor01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/102.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/102.pid -daemonize -smbios type=1,uuid=3bb505f6-ff6f-45f0-89ca-64488a5cfcb6 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/102.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 2048 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/102.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/102/vm-102-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap102i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=8E:98:56:13:CD:07,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:08/74-01:07:57,1231) [kvm-nx-lpage-re]
(root,0,0,03:08:33/74-01:07:56,1250) [vhost-1227]
(root,0,0,00:00:00/74-01:07:56,1253) [kvm-pit/1227]
(root,0,0,00:00:00/74-01:07:56,1264) [ib-comp-wq]
(root,0,0,00:00:00/74-01:07:56,1265) [ib-comp-unb-wq]
(root,0,0,00:00:00/74-01:07:56,1266) [ib_mcast]
(root,0,0,00:00:00/74-01:07:56,1267) [ib_nl_sa_wq]
(root,0,0,00:00:00/74-01:07:56,1268) [rdma_cm]
(root,0,0,00:00:00/74-01:07:56,1269) [cifsiod]
(root,0,0,00:00:00/74-01:07:56,1270) [smb3decryptd]
(root,0,0,00:00:00/74-01:07:56,1271) [cifsfileinfoput]
(root,0,0,00:00:00/74-01:07:56,1272) [cifsoplockd]
(root,0,0,00:03:31/74-01:07:56,1274) [cifsd]
(root,0,0,00:04:04/74-01:07:55,1307) [cifsd]
(root,6144032,3539600,4-21:41:34/74-01:07:53,1322) /usr/bin/kvm -id 103 -name unifi01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/103.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/103.pid -daemonize -smbios type=1,uuid=cc44c792-80da-4338-80b7-a649cc57646e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/103.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/103.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/debian-9.5.0-amd64-netinst.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/103/vm-103-disk-1.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap103i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=2E:62:E3:EF:77:FA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:22/74-01:07:53,1326) [kvm-nx-lpage-re]
(root,0,0,00:56:31/74-01:07:52,1345) [vhost-1322]
(root,0,0,00:00:00/74-01:07:52,1350) [kvm-pit/1322]
(root,20119204,16598820,5-20:34:36/74-01:07:49,1371) /usr/bin/kvm -id 104 -name virt04.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/104.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/104.pid -daemonize -smbios type=1,uuid=fedcc639-7440-4716-91f2-6b94372443d2 -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/104.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=c7c8e282-20f7-4f25-b5b0-15e05e41035f -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/104.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/104/vm-104-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap104i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=6E:59:07:B0:17:B9,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:36/74-01:07:49,1375) [kvm-nx-lpage-re]
(root,0,0,00:21:16/74-01:07:48,1395) [vhost-1371]
(root,0,0,00:00:00/74-01:07:48,1400) [kvm-pit/1371]
(root,19112668,4116252,4-03:40:17/74-01:07:45,1446) /usr/bin/kvm -id 105 -name virt05.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/105.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/105.pid -daemonize -smbios type=1,uuid=8189c150-1145-4409-993c-b8b159d4a03e -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/105.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 16384 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=dc239ec8-62d5-4ecc-b441-0ceb4726a806 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/105.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/template/iso/ubuntu-18.04.2-server-amd64.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/105/vm-105-disk-0.qcow2,if=none,id=drive-scsi0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap105i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=1A:06:41:AD:4B:C1,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:15/74-01:07:45,1450) [kvm-nx-lpage-re]
(root,0,0,00:01:07/74-01:07:44,1469) [vhost-1446]
(root,0,0,00:00:00/74-01:07:44,1474) [kvm-pit/1446]
(root,5644040,4161500,9-13:42:56/74-01:07:41,1499) /usr/bin/kvm -id 106 -name unms01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/106.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/106.pid -daemonize -smbios type=1,uuid=624885fe-24a1-4e7c-82e2-27e29ce51292 -smp 2,sockets=1,cores=2,maxcpus=2 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/106.vnc,password -cpu host,+kvm_pv_eoi,+kvm_pv_unhalt -m 4096 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=24fd4bb8-385e-42b9-87fa-c727b808dde6 -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2 -chardev socket,path=/var/run/qemu-server/106.qga,server,nowait,id=qga0 -device virtio-serial,id=qga0,bus=pci.0,addr=0x8 -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200 -device virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5 -drive file=/var/lib/vz/images/106/vm-106-disk-0.qcow2,if=none,id=drive-scsi0,format=qcow2,cache=none,aio=native,detect-zeroes=on -device scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100 -netdev type=tap,id=net0,ifname=tap106i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=EA:94:C3:42:66:30,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300 -machine type=pc+pve0
(root,0,0,00:00:52/74-01:07:41,1503) [kvm-nx-lpage-re]
(root,0,0,00:32:50/74-01:07:40,1522) [vhost-1499]
(root,0,0,00:00:00/74-01:07:40,1525) [kvm-pit/1499]
(root,9504668,6024964,1-13:41:44/74-01:07:37,1563) /usr/bin/kvm -id 110 -name srv01.ago-it.de -no-shutdown -chardev socket,id=qmp,path=/var/run/qemu-server/110.qmp,server,nowait -mon chardev=qmp,mode=control -chardev socket,id=qmp-event,path=/var/run/qmeventd.sock,reconnect=5 -mon chardev=qmp-event,mode=control -pidfile /var/run/qemu-server/110.pid -daemonize -smbios type=1,uuid=9472bc47-279b-4998-a97e-07369993140b -smp 4,sockets=1,cores=4,maxcpus=4 -nodefaults -boot menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg -vnc unix:/var/run/qemu-server/110.vnc,password -no-hpet -cpu kvm64,enforce,hv_ipi,hv_relaxed,hv_reset,hv_runtime,hv_spinlocks=0x1fff,hv_stimer,hv_synic,hv_time,hv_vapic,hv_vpindex,+kvm_pv_eoi,+kvm_pv_unhalt,+lahf_lm,+sep -m 8192 -device pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e -device pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f -device vmgenid,guid=e63c9c3c-8943-4c31-b609-0a237d100e1c -device piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2 -device usb-tablet,id=tablet,bus=uhci.0,port=1 -device VGA,id=vga,bus=pci.0,addr=0x2,edid=off -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 -drive file=/var/lib/vz/images/110/vm-110-disk-0.qcow2,if=none,id=drive-ide0,discard=on,format=qcow2,cache=none,aio=native,detect-zeroes=unmap -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0,id=ide0,bootindex=100 -drive file=/var/lib/vz/template/iso/virtio-win-0.1.185.iso,if=none,id=drive-ide2,media=cdrom,aio=threads -device ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=101 -netdev type=tap,id=net0,ifname=tap110i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on -device virtio-net-pci,mac=A6:7D:41:1D:CE:AD,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=102 -rtc driftfix=slew,base=localtime -machine type=pc-i440fx-5.1+pve0 -global kvm-pit.lost_tick_policy=discard
(root,0,0,00:00:11/74-01:07:37,1567) [kvm-nx-lpage-re]
(root,0,0,00:00:39/74-01:07:36,1589) [vhost-1563]
(root,0,0,00:36:18/74-01:07:36,1594) [kvm-pit/1563]
(root,223768,1816,00:07:09/74-01:03:31,4783) /usr/sbin/rsyslogd -n -iNONE
(root,362380,22648,00:01:03/74-01:03:28,4870) pvedaemon worker
(root,362388,22760,00:00:51/74-01:03:28,4871) pvedaemon worker
(root,362384,22084,00:00:56/74-01:03:28,4872) pvedaemon worker
(root,0,0,00:00:00/32:01,12628) [kworker/6:2-cgroup_destroy]
(root,0,0,00:00:00/30:01,13209) [kworker/5:0-events]
(root,0,0,00:00:00/26:01,14312) [kworker/2:2-events]
(root,0,0,00:00:00/22:17,15285) [kworker/u16:1-events_unbound]
(root,0,0,00:00:00/20:01,15967) [kworker/1:0-events]
(root,0,0,00:00:00/19:01,16244) [kworker/4:2-events]
(root,0,0,00:00:00/15:01,17325) [kworker/7:2-cgroup_destroy]
(root,0,0,00:00:00/15:01,17326) [kworker/7:3-events]
(root,0,0,00:00:00/13:01,17930) [kworker/0:1-events]
(root,0,0,00:00:00/13:01,17931) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/12:01,18201) [kworker/1:2-events]
(root,0,0,00:00:00/11:01,18478) [kworker/5:2-cgroup_destroy]
(root,0,0,00:00:00/09:01,19033) [kworker/6:1-events]
(root,0,0,00:00:00/08:01,19312) [kworker/4:0-mm_percpu_wq]
(root,0,0,00:00:00/07:01,19591) [kworker/3:2-events]
(root,0,0,00:00:00/07:01,19592) [kworker/3:3-events]
(root,0,0,00:00:00/06:29,19688) [kworker/u16:0-events_power_efficient]
(root,0,0,00:00:00/04:01,20408) [kworker/5:1-md]
(root,0,0,00:00:00/03:01,20682) [kworker/0:0-events]
(root,0,0,00:00:00/02:01,20947) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:00/02:01,20948) [kworker/2:3-events]
(root,13808,6716,00:00:00/00:18,21353) sshd: [accepted]
(root,22836,2416,00:00:00/00:02,21485) /lib/systemd/systemd-udevd
(root,22836,2236,00:00:00/00:02,21486) /lib/systemd/systemd-udevd
(root,22836,2236,00:00:00/00:02,21487) /lib/systemd/systemd-udevd
(root,22836,2236,00:00:00/00:02,21488) /lib/systemd/systemd-udevd
(root,22836,2236,00:00:00/00:02,21489) /lib/systemd/systemd-udevd
(root,22836,2236,00:00:00/00:02,21490) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/00:01,21491) [kworker/3:0-events]
(root,0,0,00:00:00/00:01,21492) [kworker/3:1]
(root,70708,17188,00:00:00/00:00,21612) /usr/bin/smbclient //u237179.your-storagebox.de/backup -d 0 -m smb3 -U u237179 -A /etc/pve/priv/storage/Backup03.pw -c echo 1 0
(root,7188,3184,00:00:00/00:00,21617) /bin/bash /usr/bin/check_mk_agent
(root,7632,2656,00:00:00/00:00,21643) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5288,992,00:00:00/00:00,21644) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(www-data,69392,52888,00:00:00/01:43:00,25327) spiceproxy worker
(root,86168,2120,00:00:00/01:43:00,25329) /usr/sbin/pvefw-logger
(www-data,355560,129972,00:00:00/01:43:00,25338) pveproxy worker
(www-data,355560,129972,00:00:00/01:43:00,25339) pveproxy worker
(www-data,355560,129972,00:00:00/01:43:00,25340) pveproxy worker
(root,0,0,00:00:00/01:33:01,28014) [kworker/2:1-cgroup_destroy]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 90:1b:0e:fc:ee:02 brd ff:ff:ff:ff:ff:ff
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 32:1b:ab:61:f2:40 brd ff:ff:ff:ff:ff:ff
4: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 26:31:12:82:e9:d6 brd ff:ff:ff:ff:ff:ff
5: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 32:1b:ab:61:f2:40 brd ff:ff:ff:ff:ff:ff
6: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 26:31:12:82:e9:d6 brd ff:ff:ff:ff:ff:ff
7: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 9e:c2:05:f5:54:4c brd ff:ff:ff:ff:ff:ff
8: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 86:1f:ed:aa:ba:79 brd ff:ff:ff:ff:ff:ff
9: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:39:98:6b:48:c9 brd ff:ff:ff:ff:ff:ff
10: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 5a:b6:93:e2:46:c3 brd ff:ff:ff:ff:ff:ff
11: tap105i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether de:fc:fb:e3:15:2d brd ff:ff:ff:ff:ff:ff
12: tap106i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether ba:3e:95:75:79:e6 brd ff:ff:ff:ff:ff:ff
13: tap110i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether 8a:4c:7a:9c:67:ef brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-06-17 23:43

Create report

Domain summary

No record