LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 08-25-2008, 04:03 AM   #1
Torquemalex
LQ Newbie
 
Registered: Aug 2008
Posts: 6

Rep: Reputation: 0
Server almost locked!


Hi!

Yesterday I was working on one of my servers (in a webfarm so, just ssh access). After a while it 's gome crazy: it become extremely slow: it took a couple of hours and dozen of tries to get an ssh access and reboot the server. After that it worked fine but I'm trying to understand why this happened:
just before the reboot I've done a "ps aux" and this is the result:

Quote:
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1149 0.0 0.0 12976 152 ? S<s Jul09 0:03 /sbin/udevd --daemon
root 1996 0.0 0.0 0 0 ? S< Jul09 0:00 [kauditd]
100 2153 0.0 0.0 14748 632 ? Ss Jul09 0:10 /bin/dbus-daemon --system
root 2166 0.0 0.0 14228 184 ? Ss Jul09 0:00 /sbin/resmgrd
root 2176 0.0 0.0 3736 176 ? Ss Jul09 0:00 /sbin/acpid
101 2211 0.0 0.0 33036 1008 ? Ss Jul09 2:06 /usr/sbin/hald --daemon=yes
root 2218 0.0 0.0 28112 772 ? Ssl Jul09 0:03 /usr/sbin/console-kit-daemon
root 2285 0.0 0.0 17588 192 ? S Jul09 0:00 hald-runner
root 2419 0.0 0.0 28076 188 ? S Jul09 0:00 hald-addon-input: Listening on /dev/input/event1
101 2578 0.0 0.0 24888 224 ? S Jul09 0:00 hald-addon-acpi: listening on acpid socket /var/run/acpid.socket
root 2651 0.0 0.0 28076 348 ? S Jul09 1:23 hald-addon-storage: polling /dev/sr0 (every 16 sec)
root 2929 0.0 0.0 19552 1008 ? Ss Jul09 3:40 /sbin/syslog-ng
root 2932 0.0 0.0 4000 544 ? Ss Jul09 2:01 /sbin/klogd -c 1 -x -x
bin 2942 0.0 0.0 5816 160 ? Ss Jul09 0:00 /sbin/portmap
root 3009 0.0 0.0 14164 184 ? S<sl Jul09 0:09 /sbin/auditd -s disable
root 3011 0.0 0.0 12984 208 ? S<s Jul09 0:00 /sbin/audispd
avahi 3032 0.0 0.0 27500 572 ? Ss Jul09 0:02 avahi-daemon: running [.local]
root 3038 0.0 0.0 7940 200 ? Ss Jul09 0:00 /usr/sbin/rpc.statd --no-notify
root 3040 0.0 0.0 0 0 ? S Jul09 0:00 [lockd]
...
root 3066 0.0 0.0 10056 156 ? Ss Jul09 0:00 /usr/sbin/avahi-dnsconfd -D
root 3139 0.0 0.0 8692 328 ? Ss Jul09 1:26 /usr/sbin/irqbalance
ntp 3161 0.0 0.0 31508 504 ? Ss Jul09 0:45 /usr/sbin/ntpd -p /var/run/ntp/ntpd.pid -u ntp
root 3194 0.0 0.0 53060 220 ? Ss Jul09 0:00 /usr/sbin/cupsd
root 3199 0.0 0.0 29500 524 ? S Jul09 0:01 /usr/sbin/powersaved -d -f /var/run/acpid.socket -v 3
root 3229 0.0 0.0 61812 252 ? Ss Jul09 0:21 /usr/sbin/sshd -o PidFile=/var/run/sshd.init.pid
root 3430 0.0 0.0 49728 584 ? Ss Jul09 0:35 sendmail: rejecting connections on daemon Daemon0: load average: 102
mail 3442 0.0 0.0 34324 156 ? Ss Jul09 0:00 sendmail: Queue control
mail 3443 0.0 0.0 58976 128 ? S Jul09 1:49 sendmail: running queue: /var/spool/clientmqueue
root 3491 0.0 0.0 12316 276 ? Ss Jul09 0:25 /usr/sbin/cron
root 3498 0.0 0.0 11624 152 ? S Jul09 0:04 /usr/sbin/smartd
root 3658 0.0 0.0 4220 224 tty1 Ss+ Jul09 0:01 /sbin/mingetty --noclear tty1
root 3659 0.0 0.0 4224 224 tty2 Ss+ Jul09 0:01 /sbin/mingetty tty2
root 3662 0.0 0.0 4220 224 tty3 Ss+ Jul09 0:00 /sbin/mingetty tty3
root 3664 0.0 0.0 4224 224 tty4 Ss+ Jul09 0:00 /sbin/mingetty tty4
root 3666 0.0 0.0 4220 224 tty5 Ss+ Jul09 0:00 /sbin/mingetty tty5
root 3667 0.0 0.0 4224 224 tty6 Ss+ Jul09 0:00 /sbin/mingetty tty6
root 3775 0.7 0.0 211196 472 ? Ss 16:51 1:05 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
root 4143 0.0 0.0 60664 480 ? S 17:02 0:01 /usr/libexec/webmin/file/search.cgi
root 4144 0.0 0.0 13352 228 ? S 17:02 0:00 sh -c find \/ -name \* 2>/dev/null
root 4145 0.0 0.0 3796 208 ? S 17:02 0:00 find / -name *
root 4727 0.0 0.0 43700 200 ? S 17:27 0:00 /usr/sbin/cron
root 4728 1.9 0.0 24484 2304 ? Ds 17:27 2:12 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4738 0.0 0.0 43700 200 ? S 17:29 0:00 /usr/sbin/cron
root 4740 1.8 0.0 22584 2688 ? Ds 17:29 2:08 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4742 0.0 0.0 43700 200 ? S 17:30 0:00 /usr/sbin/cron
root 4743 1.9 0.0 22276 2636 ? Ds 17:30 2:10 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4784 0.0 0.0 43700 200 ? S 17:33 0:00 /usr/sbin/cron
root 4785 1.9 0.0 21216 2996 ? Ds 17:33 2:07 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4788 0.4 0.0 43700 200 ? S 17:34 0:26 /usr/sbin/cron
root 4798 0.5 0.0 43700 200 ? S 17:35 0:32 /usr/sbin/cron
root 4806 0.6 0.0 43700 200 ? S 17:36 0:45 /usr/sbin/cron
root 4825 0.3 0.0 43700 200 ? S 17:38 0:19 /usr/sbin/cron
root 4834 0.6 0.0 43700 200 ? S 17:39 0:39 /usr/sbin/cron
root 4847 0.2 0.0 43700 200 ? S 17:40 0:17 /usr/sbin/cron
root 4854 0.4 0.0 43700 200 ? S 17:41 0:25 /usr/sbin/cron
root 4860 0.2 0.0 43700 200 ? S 17:42 0:13 /usr/sbin/cron
root 4864 0.2 0.0 43700 200 ? S 17:43 0:12 /usr/sbin/cron
root 4873 0.1 0.0 43700 200 ? S 17:44 0:06 /usr/sbin/cron
root 4879 0.3 0.0 43700 200 ? S 17:45 0:18 /usr/sbin/cron
root 4900 0.4 0.0 43700 196 ? S 17:46 0:23 /usr/sbin/cron
root 4901 0.9 0.0 22008 2212 ? Ds 17:46 0:54 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4903 0.8 0.0 24220 2504 ? Ds 17:46 0:49 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4907 0.2 0.0 43700 200 ? S 17:47 0:16 /usr/sbin/cron
root 4915 0.2 0.0 43700 200 ? S 17:48 0:16 /usr/sbin/cron
root 4923 0.7 0.0 22012 2216 ? Ds 17:48 0:41 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4924 0.8 0.0 22008 2240 ? Ds 17:48 0:47 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4926 0.8 0.0 21616 2740 ? Ds 17:48 0:45 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4927 0.2 0.0 43700 200 ? S 17:49 0:13 /usr/sbin/cron
root 4932 0.8 0.0 21220 2916 ? Ds 17:49 0:47 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4937 0.1 0.0 43700 200 ? S 17:50 0:10 /usr/sbin/cron
root 4943 0.1 0.0 43700 200 ? S 17:51 0:07 /usr/sbin/cron
root 4949 0.1 0.0 43700 200 ? S 17:52 0:07 /usr/sbin/cron
root 4953 0.7 0.0 22008 2440 ? Ds 17:52 0:40 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4956 0.1 0.0 43700 200 ? S 17:53 0:07 /usr/sbin/cron
root 4965 0.1 0.0 43700 200 ? S 17:54 0:05 /usr/sbin/cron
root 4969 0.0 0.0 43700 200 ? S 17:55 0:04 /usr/sbin/cron
root 4978 0.0 0.0 43700 200 ? S 17:56 0:01 /usr/sbin/cron
root 4979 0.9 0.0 22276 3100 ? Ds 17:56 0:47 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4985 0.0 0.0 43700 200 ? S 17:57 0:00 /usr/sbin/cron
root 4986 0.9 0.0 22008 2360 ? Ds 17:57 0:47 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4987 0.8 0.0 22272 2360 ? Ds 17:57 0:43 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4988 0.9 0.0 21748 2648 ? Ds 17:57 0:49 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4989 0.8 0.0 22276 2472 ? Ds 17:57 0:44 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4990 0.8 0.0 21220 3508 ? Ds 17:57 0:44 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4991 0.8 0.0 21744 3184 ? Ds 17:57 0:46 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4992 0.8 0.0 21088 3276 ? Ds 17:57 0:45 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4993 0.8 0.0 22276 2364 ? Ds 17:57 0:44 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4995 0.7 0.0 21744 3112 ? Ds 17:57 0:40 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 4999 0.7 0.0 22276 2476 ? Ds 17:57 0:40 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5000 0.9 0.0 22272 2580 ? Ds 17:57 0:46 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5001 1.0 0.0 21612 2844 ? Ds 17:57 0:51 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5004 0.8 0.0 21744 3116 ? Ds 17:58 0:45 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5029 0.1 0.0 43700 200 ? S 18:00 0:09 /usr/sbin/cron
root 5030 0.9 0.0 22008 2688 ? Ds 18:00 0:47 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5037 0.1 0.0 43700 200 ? S 18:01 0:07 /usr/sbin/cron
root 5047 0.2 0.0 43700 200 ? S 18:02 0:13 /usr/sbin/cron
root 5048 0.9 0.0 22012 2324 ? Ds 18:02 0:47 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5053 0.1 0.0 43700 200 ? S 18:03 0:08 /usr/sbin/cron
root 5057 0.2 0.0 43700 200 ? S 18:04 0:10 /usr/sbin/cron
root 5072 0.0 0.0 43700 200 ? S 18:06 0:04 /usr/sbin/cron
root 5090 0.0 0.0 43700 200 ? S 18:08 0:00 /usr/sbin/cron
root 5098 1.0 0.0 31456 2972 ? Ds 18:08 0:46 /usr/bin/perl /usr/libexec/webmin/bandwidth/rotate.pl
root 5103 1.0 0.0 22276 2344 ? Ds 18:08 0:48 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5104 0.9 0.0 22012 2388 ? Ds 18:08 0:42 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5106 0.9 0.0 22272 2728 ? Ds 18:08 0:43 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5107 1.1 0.0 22276 2384 ? Ds 18:08 0:52 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5110 1.0 0.0 22008 2488 ? Ds 18:08 0:46 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5115 0.9 0.0 22008 2060 ? Ds 18:08 0:44 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5121 0.0 0.0 43700 200 ? S 18:09 0:00 /usr/sbin/cron
root 5130 1.1 0.0 22008 2104 ? Ds 18:09 0:49 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5262 1.0 0.2 57608 8308 ? S 18:15 0:41 /usr/libexec/webmin/mscstyle3/index.cgi
root 5298 0.0 0.0 43700 200 ? S 18:17 0:00 /usr/sbin/cron
root 5302 1.0 0.0 23824 2616 ? Ds 18:17 0:42 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5309 0.0 0.0 43700 200 ? S 18:18 0:00 /usr/sbin/cron
root 5320 1.1 0.1 21220 4708 ? Ds 18:18 0:45 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5338 0.0 0.0 43700 200 ? S 18:19 0:00 /usr/sbin/cron
root 5346 1.1 0.0 22276 2532 ? Ds 18:19 0:43 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5350 0.0 0.0 43700 200 ? S 18:20 0:00 /usr/sbin/cron
root 5363 0.6 0.0 22276 2756 ? Ds 18:21 0:25 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5364 0.4 0.0 43700 200 ? S 18:22 0:18 /usr/sbin/cron
root 5378 0.4 0.0 43700 200 ? S 18:23 0:16 /usr/sbin/cron
root 5392 0.4 0.0 43700 200 ? S 18:24 0:15 /usr/sbin/cron
root 5402 0.4 0.0 43700 200 ? S 18:25 0:14 /usr/sbin/cron
root 5415 0.3 0.0 43700 200 ? S 18:26 0:12 /usr/sbin/cron
root 5431 0.4 0.0 43700 200 ? S 18:27 0:15 /usr/sbin/cron
root 5443 0.5 0.0 43700 200 ? S 18:28 0:18 /usr/sbin/cron
root 5454 0.4 0.0 43700 200 ? S 18:29 0:13 /usr/sbin/cron
root 5464 0.3 0.0 43700 200 ? S 18:30 0:10 /usr/sbin/cron
root 5471 0.4 0.0 43700 200 ? S 18:31 0:13 /usr/sbin/cron
root 5480 0.3 0.0 43700 368 ? S 18:32 0:09 /usr/sbin/cron
root 5488 0.2 0.0 43700 200 ? S 18:33 0:07 /usr/sbin/cron
root 5498 0.2 0.0 43700 200 ? S 18:34 0:06 /usr/sbin/cron
root 5505 0.1 0.0 43700 200 ? S 18:35 0:04 /usr/sbin/cron
root 5518 0.0 0.0 43700 200 ? S 18:36 0:02 /usr/sbin/cron
root 5528 0.0 0.0 43700 368 ? S 18:37 0:02 /usr/sbin/cron
root 5532 0.0 0.0 43700 200 ? S 18:38 0:00 /usr/sbin/cron
root 5533 0.8 0.0 20424 3360 ? Ds 18:38 0:22 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5534 0.7 0.0 20688 3728 ? Ds 18:38 0:21 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5535 0.7 0.0 20824 4040 ? Ds 18:38 0:21 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5536 0.7 0.0 0 0 ? Zs 18:38 0:19 [monitor.pl] <defunct>
root 5537 0.6 0.0 21748 2968 ? Ds 18:38 0:17 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5538 0.5 0.2 24488 8992 ? Ss 18:38 0:15 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5539 0.6 0.2 24488 9312 ? Ss 18:38 0:17 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5540 0.7 0.1 21216 4256 ? Ds 18:38 0:19 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5541 0.8 0.1 21744 5392 ? Ds 18:38 0:22 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5542 0.6 0.0 20692 3752 ? Ds 18:38 0:18 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5543 0.6 0.0 21216 4052 ? Ds 18:38 0:18 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5545 0.7 0.1 21216 4512 ? Ds 18:38 0:19 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5546 0.7 0.1 21216 4488 ? Ds 18:38 0:19 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5548 0.6 0.1 21220 4408 ? Ds 18:38 0:17 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5549 0.9 0.2 24488 9492 ? Ss 18:38 0:25 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5550 0.6 0.0 24224 2780 ? Ss 18:38 0:17 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5569 0.0 0.0 43700 200 ? S 18:39 0:00 /usr/sbin/cron
root 5574 0.4 0.0 0 0 ? Zs 18:39 0:11 [monitor.pl] <defunct>
root 5575 0.3 0.0 22768 2092 ? Ds 18:39 0:10 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5588 0.0 0.0 43700 200 ? S 18:40 0:00 /usr/sbin/cron
root 5589 0.4 0.0 23828 3424 ? Ds 18:40 0:12 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5596 0.0 0.0 43700 200 ? S 18:41 0:00 /usr/sbin/cron
root 5610 0.0 0.0 43700 368 ? S 18:42 0:00 /usr/sbin/cron
root 5623 0.0 0.0 43700 200 ? S 18:43 0:00 /usr/sbin/cron
root 5624 0.5 0.0 23828 2632 ? Ds 18:43 0:13 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5626 0.5 0.0 23828 3364 ? Ds 18:43 0:13 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5627 0.4 0.0 0 0 ? Zs 18:43 0:09 [monitor.pl] <defunct>
root 5629 0.0 0.0 43700 200 ? S 18:44 0:00 /usr/sbin/cron
root 5631 0.5 0.0 22276 3252 ? Ds 18:44 0:13 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5636 0.0 0.0 43700 368 ? S 18:45 0:00 /usr/sbin/cron
root 5647 0.5 0.0 0 0 ? Zs 18:45 0:11 [monitor.pl] <defunct>
root 5648 0.0 0.0 43700 200 ? S 18:46 0:00 /usr/sbin/cron
root 5651 0.5 0.0 22276 2736 ? Ds 18:46 0:13 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5658 0.0 0.0 43700 364 ? S 18:47 0:02 /usr/sbin/cron
root 5686 0.1 0.0 43700 368 ? S 18:49 0:03 /usr/sbin/cron
root 5694 0.6 0.0 0 0 ? Zs 18:50 0:12 [monitor.pl] <defunct>
root 5696 0.2 0.0 43700 200 ? S 18:50 0:04 /usr/sbin/cron
root 5709 0.1 0.0 43700 200 ? S 18:51 0:02 /usr/sbin/cron
root 5727 0.0 0.0 43700 200 ? S 18:52 0:01 /usr/sbin/cron
root 5737 0.0 0.0 43700 200 ? S 18:53 0:01 /usr/sbin/cron
root 5748 0.0 0.0 43700 200 ? S 18:54 0:00 /usr/sbin/cron
root 5759 0.5 0.0 0 0 ? Zs 18:55 0:09 [monitor.pl] <defunct>
root 5760 0.0 0.0 43700 200 ? S 18:55 0:00 /usr/sbin/cron
root 5763 0.8 0.0 22012 2796 ? Ds 18:55 0:14 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5765 0.7 0.0 21876 3492 ? Ds 18:55 0:12 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5766 0.6 0.0 22008 3176 ? Ds 18:55 0:10 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5767 0.7 0.0 21748 3340 ? Ds 18:55 0:12 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5768 0.5 0.0 21880 2596 ? Ds 18:55 0:09 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5769 0.6 0.0 22008 3096 ? Ds 18:55 0:11 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5786 0.0 0.0 43700 200 ? S 18:56 0:00 /usr/sbin/cron
root 5792 0.7 0.0 21880 3460 ? Ds 18:56 0:11 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 5797 0.0 0.0 43700 368 ? S 18:57 0:00 /usr/sbin/cron
root 5809 0.8 0.0 0 0 ? Zs 18:57 0:12 [monitor.pl] <defunct>
root 5827 0.0 0.0 43700 368 ? S 18:58 0:00 /usr/sbin/cron
root 5832 0.7 0.0 0 0 ? Zs 18:58 0:10 [monitor.pl] <defunct>
root 5840 0.0 0.0 43700 368 ? S 18:59 0:00 /usr/sbin/cron
root 5844 0.8 0.0 0 0 ? Zs 18:59 0:11 [monitor.pl] <defunct>
wwwrun 5849 0.8 0.0 211332 1396 ? S 18:59 0:12 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
root 5859 0.0 0.0 43700 200 ? S 19:00 0:00 /usr/sbin/cron
root 5862 1.0 0.0 30668 3036 ? Ds 19:00 0:14 /usr/bin/perl /usr/libexec/webmin/bandwidth/rotate.pl
root 5873 0.0 0.0 43700 200 ? S 19:01 0:00 /usr/sbin/cron
root 5881 0.6 0.0 24224 728 ? Ss 19:01 0:09 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
mail 5882 0.0 0.0 40540 1340 ? D 19:01 0:00 /usr/sbin/sendmail -FCronDaemon -odi -oem -oi -t
root 5909 0.0 0.0 43700 200 ? S 19:02 0:00 /usr/sbin/cron
mail 5910 0.0 0.0 40540 1336 ? D 19:02 0:00 /usr/sbin/sendmail -FCronDaemon -odi -oem -oi -t
mail 5914 0.0 0.0 44720 1132 ? D 19:02 0:00 /usr/sbin/sendmail -FCronDaemon -odi -oem -oi -t
mail 5916 0.0 0.0 44712 1340 ? D 19:02 0:00 /usr/sbin/sendmail -FCronDaemon -odi -oem -oi -t
root 5929 0.9 0.2 24224 9664 ? Ss 19:02 0:12 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
mail 5933 0.0 0.0 34320 1328 ? D 19:02 0:00 /usr/sbin/sendmail -FCronDaemon -odi -oem -oi -t
mail 5934 0.0 0.0 40552 1352 ? D 19:02 0:00 /usr/sbin/sendmail -FCronDaemon -odi -oem -oi -t
root 5945 0.0 0.0 43700 200 ? S 19:03 0:00 /usr/sbin/cron
wwwrun 5947 0.7 0.0 211332 1468 ? S 19:03 0:09 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
root 5948 0.9 0.2 24220 9972 ? Ss 19:03 0:11 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
mail 5952 0.9 0.0 44720 2032 ? D 19:03 0:11 /usr/sbin/sendmail -FCronDaemon -odi -oem -oi -t
wwwrun 5956 0.7 0.0 211196 1144 ? S 19:03 0:08 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
wwwrun 5965 0.9 0.0 211196 1428 ? S 19:04 0:10 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
root 5968 0.0 0.0 43700 200 ? S 19:04 0:00 /usr/sbin/cron
mail 5969 1.0 0.0 44720 2240 ? D 19:04 0:11 /usr/sbin/sendmail -FCronDaemon -odi -oem -oi -t
root 5978 0.0 0.0 43700 200 ? S 19:05 0:00 /usr/sbin/cron
root 5980 0.0 0.2 24224 9972 ? Ss 19:05 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
mail 5986 1.0 0.0 44504 2484 ? D 19:05 0:10 /usr/sbin/sendmail -FCronDaemon -odi -oem -oi -t
root 5992 0.0 0.0 43700 200 ? S 19:06 0:00 /usr/sbin/cron
root 6000 0.0 0.2 24224 9976 ? Ds 19:06 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6004 0.0 0.0 43700 200 ? S 19:07 0:00 /usr/sbin/cron
wwwrun 6005 1.0 0.0 211196 1544 ? S 19:07 0:09 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
wwwrun 6009 1.0 0.0 211328 3504 ? S 19:07 0:09 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
wwwrun 6013 0.9 0.0 211196 1368 ? S 19:07 0:08 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
root 6018 1.3 0.0 43700 924 ? S 19:08 0:12 /usr/sbin/cron
root 6020 0.0 0.2 24224 9976 ? Ss 19:08 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6021 0.0 0.2 24224 9976 ? Ss 19:08 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6029 0.9 0.0 43700 924 ? S 19:09 0:07 /usr/sbin/cron
root 6034 0.9 0.0 43700 816 ? S 19:10 0:07 /usr/sbin/cron
wwwrun 6054 1.0 0.0 211196 1440 ? S 19:11 0:07 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
wwwrun 6055 1.1 0.0 211196 1400 ? S 19:11 0:08 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
root 6059 1.4 0.0 43700 988 ? S 19:11 0:10 /usr/sbin/cron
root 6068 1.0 0.0 43700 996 ? S 19:12 0:06 /usr/sbin/cron
root 6097 1.4 0.0 43700 996 ? S 19:13 0:08 /usr/sbin/cron
root 6112 1.5 0.0 43700 1044 ? S 19:14 0:08 /usr/sbin/cron
root 6120 1.3 0.0 43700 1044 ? S 19:15 0:06 /usr/sbin/cron
root 6131 0.9 0.0 43700 1036 ? S 19:16 0:04 /usr/sbin/cron
root 6136 0.7 0.0 92112 3384 ? Ss 19:17 0:02 sshd: root@pts/0
root 6137 1.1 0.0 43700 1048 ? S 19:17 0:04 /usr/sbin/cron
wwwrun 6142 1.3 0.0 211196 636 ? S 19:17 0:04 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
root 6147 0.1 0.0 0 0 ? D 19:18 0:00 [pdflush]
root 6150 0.7 0.0 43700 1048 ? S 19:18 0:02 /usr/sbin/cron
root 6155 0.7 0.0 43700 1048 ? S 19:19 0:01 /usr/sbin/cron
root 6159 0.0 0.0 0 0 ? S 19:20 0:00 [pdflush]
root 6161 0.0 0.0 43700 1060 ? S 19:20 0:00 /usr/sbin/cron
root 6165 0.0 0.2 24224 9976 ? Ss 19:21 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6166 0.0 0.2 24220 9972 ? Ss 19:21 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6167 0.0 0.2 24224 9972 ? Ss 19:21 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6168 0.0 0.2 24224 9976 ? Ss 19:21 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6169 0.0 0.2 24224 9976 ? Ss 19:21 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6170 0.0 0.2 24224 9976 ? Ss 19:21 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6171 0.0 0.2 24224 9976 ? Ss 19:21 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6172 0.0 0.2 24220 9972 ? Ds 19:21 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6173 0.0 0.2 24224 9976 ? Ss 19:21 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6174 0.0 0.2 24220 9972 ? Ss 19:21 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6175 0.0 0.2 24220 9972 ? Ss 19:21 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6176 0.0 0.2 24220 9972 ? Ss 19:21 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6178 0.0 0.0 43700 1060 ? S 19:21 0:00 /usr/sbin/cron
root 6183 0.0 0.2 24224 9972 ? Ss 19:21 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6189 0.0 0.2 24220 9972 ? Ss 19:21 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6213 0.0 0.0 43700 1060 ? S 19:22 0:00 /usr/sbin/cron
root 6214 0.1 0.2 24220 9972 ? Ss 19:22 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6215 0.0 0.0 15500 2800 pts/0 Ss 19:22 0:00 -bash
root 6262 0.0 0.1 52724 4148 ? S 19:22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
root 6263 0.0 0.1 52724 4176 ? S 19:22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
root 6264 0.0 0.1 52724 4204 ? S 19:22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
root 6265 0.0 0.1 52724 4208 ? S 19:22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
root 6272 0.0 0.1 52724 4216 ? S 19:22 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
root 6274 0.1 0.0 4660 908 pts/0 R+ 19:22 0:00 ps aux
root 6275 0.0 0.0 43700 1060 ? S 19:23 0:00 /usr/sbin/cron
root 6276 0.0 0.2 24484 10188 ? Ss 19:23 0:00 /usr/bin/perl /usr/libexec/webmin/status/monitor.pl
root 6283 0.0 0.1 52724 4212 ? S 19:23 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
root 6284 0.0 0.1 52724 4212 ? S 19:23 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
root 7613 0.0 0.0 14520 64 ? Ss Jul10 0:00 /usr/sbin/rpc.mountd --no-nfs-version 4
...
root 12138 0.0 0.0 301276 816 ? Ssl Jul23 2:59 /usr/sbin/nscd
root 22458 0.0 0.0 52724 2144 ? Ss Jul21 2:09 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
root 25028 0.0 0.0 15492 200 ? Ss Jul21 0:00 /usr/sbin/xinetd
root 27965 0.0 0.0 13140 228 ? S Aug13 0:00 /bin/sh /usr/bin/mysqld_safe --mysqld=mysqld --user=mysql --pid-file=/var/l
mysql 28012 0.0 0.0 207656 2168 ? Sl Aug13 4:11 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --use
I cut some entries because the post was too big.
Can anybody tell me why some processes has so much multiplied?
I was'nt doing stranged things, except this command:
find / -type f -print0 | xargs -0 grep "obscureCreditCard"

Help please!

Alex
 
Old 08-25-2008, 08:41 AM   #2
chort
Senior Member
 
Registered: Jul 2003
Location: Silicon Valley, USA
Distribution: OpenBSD 4.6, OS X 10.6.2, CentOS 4 & 5
Posts: 3,660

Rep: Reputation: 75
Also
Code:
root 4144 0.0 0.0 13352 228 ? S 17:02 0:00 sh -c find \/ -name \* 2>/dev/null
root 4145 0.0 0.0 3796 208 ? S 17:02 0:00 find / -name *
The find operations would put a pretty big I/O burden on the machine, and if there are frequent cron jobs running that cause a lot of disk access too, it's likely they would start piling up, i.e. the next cron job would start before the previous one was finished, thus making all processes slower, then causing those jobs to not finish before the next one starts, etc...

It's difficult to say what's going on, especially since you left out some of the potentially important processes. The find that you listed looks very much like someone has broken into your machine and is looking for credit card data to steal.
 
Old 08-25-2008, 09:11 AM   #3
Torquemalex
LQ Newbie
 
Registered: Aug 2008
Posts: 6

Original Poster
Rep: Reputation: 0
The find has been fired by me, as I was looking for a function inside a php library. I didn't guessed that it could lock the server in that way! While some process about webmin scripts could have been been opened by my desperate requests to get in and reboot the so many "cron" have really no explanation.
Maybe the "find", from the root path and launched as root has touched something, who knows, in /dev or /procs?
 
Old 08-25-2008, 09:42 AM   #4
chort
Senior Member
 
Registered: Jul 2003
Location: Silicon Valley, USA
Distribution: OpenBSD 4.6, OS X 10.6.2, CentOS 4 & 5
Posts: 3,660

Rep: Reputation: 75
The cron jobs most likely rotate logs, or try to restart dead services, or any other number of typical system clean-up tasks. You can see what they do with crontab -l as the appropriate user. If they're being run as root, you would have to do sudo crontab -l.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Time Server and UTC-locked application nx5000 Linux - General 2 01-22-2008 02:57 PM
Server 's screen locked up when startx executed tttx Linux - Software 3 06-06-2005 06:02 PM
Locked out of my server sfcgunner Linux - Networking 17 08-01-2004 06:44 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 11:54 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration