一、 查看3天前的指定进程
youchar@shell-server ~ $ ps -ef|grep sshd:|grep `date +"\%b\%d" --date '3 days ago'`
root 18556 915 0 Nov06 ? 00:00:00 sshd: yfsun [priv]
yfsun 18560 18556 0 Nov06 ? 00:07:46 sshd: yfsun@pts/238
root 116653 915 0 Nov06 ? 00:00:00 sshd: lfgong [priv]
lfgong 116655 116653 0 Nov06 ? 00:19:57 sshd: lfgong@pts/186
二、批量删除3天前的进程
ps -ef|grep sshd:|grep `date +"\%b\%d" --date '3 days ago'`|awk '{print "kill "$2}'|sudo bash
or
ps -ef|grep sshd:|grep `date +"\%b\%d" --date '3 days ago'`|awk '{print $2}'|xargs kill -9