changing /usr/ disk quota

[Tino-Designs]

Hi all,

I am totally new here and I have a few, may be dumb questions. However I'd appreciate any help since a client of mine has problems with his server.

The dedicated server runs with whm and cpanel and I have root acccess. The problem of the server is a constatn overload. The usr/ partition seems to be way to small (at usage of 86%) and cpu load is at around 11.

What can I do to improve this? I figured changing the usr/ partition and making it bigger might help.

Is there a way to do this in WHM? I looked through the support/help and googled for hours now but can't find any solution.

I hope you guys can help or guide me into a direction at least.


Thanks a lot,
Tino

[logicsupport]

/usr partition consists of the apache and cpanel logs. You can set the log rotation through WHM

1.) For Apache Logs:
WHM: Apache Configuration >> Log Rotation

2.) For cPanel Logs:
WHM: cPanel Log Rotation Configuration

After enabling the options, if you optionally need to immediately trigger log rotation, versus a nominal wait time for automatic detection of log sizes, you will want to restart cPanel using the following command via root SSH access:
/usr/local/cpanel/startup

An alternative to restarting cPanel and still have an immediate effect, is to only restart the "cpanellogd" service, using two commands:

Step 1.) Stop cpanellogd:
/usr/local/cpanel/etc/init/safekill cpanellogd

Step 2.) Start cpanellogd:
/usr/local/cpanel/cpanellogd

[logicsupport]

Load issue : you need to check the process which are running on the server through WHM >> Show Current Running Processes or try from back end.

[Tino-Designs]

thanks a lot - does it help you if I posted the current running processes?

I'm honestly not sure of what to do with those. I'd appreciate it if you could take a look an tell me what I'd have to change to get ahold of the load issue.

Tino

[Tino-Designs]

here's what my current running processes says:

Pid      Name      File      Current Directory      Command Line
1    (init)    /sbin/init    /    init [3]
2    (migration/0)        /    
3    (ksoftirqd/0)        /    
4    (watchdog/0)        /    
5    (migration/1)        /    
6    (ksoftirqd/1)        /    
7    (watchdog/1)        /    
8    (events/0)        /    
9    (events/1)        /    
10    (khelper)        /    
11    (kthread)        /    
15    (kblockd/0)        /    
16    (kblockd/1)        /    
17    (kacpid)        /    
90    (cqueue/0)        /    
91    (cqueue/1)        /    
94    (khubd)        /    
96    (kseriod)        /    
167    (kswapd0)        /    
168    (aio/0)        /    
169    (aio/1)        /    
331    (kpsmoused)        /    
361    (ata/0)        /    
362    (ata/1)        /    
363    (ata_aux)        /    
367    (scsi_eh_0)        /    
368    (scsi_eh_1)        /    
369    (kjournald)        /    
396    (kauditd)        /    
430    (udevd)    /sbin/udevd�������� (deleted)    /    /sbin/udevd -d
887    (kedac)        /    
1332    (kmpathd/0)        /    
1333    (kmpathd/1)        /    
1367    (kjournald)        /    
1369    (kjournald)        /    
1371    (kjournald)        /    
1373    (kjournald)        /    
1375    (kjournald)        /    
1538    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
1569    (php)    /usr/bin/php    /home/buxsense/public_html    /usr/bin/php /home/buxsense/public_html/surf.php
1576    (php)    /usr/bin/php    /home/buxsense/public_html    /usr/bin/php /home/buxsense/public_html/surf.php
1586    (php)    /usr/bin/php    /home/buxsense/public_html    /usr/bin/php /home/buxsense/public_html/surf.php
1592    (cpsrvd-ssl)    /usr/local/cpanel/cpsrvd-ssl    /usr/local/cpanel/whostmgr/docroot    whostmgrd - serving 87.79.55.151
1593    (whostmgr)    /usr/local/cpanel/whostmgr/bin/whostmgr    /usr/local/cpanel/whostmgr/docroot    /usr/local/cpanel/whostmgr/bin/whostmgr ./simpleps
1594    (php)    /usr/bin/php    /home/buxsense/public_html    /usr/bin/php /home/buxsense/public_html/surf.php
1596    (suphp)    /opt/suphp/sbin/suphp    /home/buxsense/public_html    /opt/suphp/sbin/suphp
1597    (simpleps)    /usr/bin/perl    /usr/local/cpanel/whostmgr/docroot    /usr/bin/perl /scripts/simpleps --html
1598    (php)    /usr/bin/php    /home/buxsense/public_html    /usr/bin/php /home/buxsense/public_html/index.php
1989    (auditd)    /sbin/auditd�es_pid� (deleted)    /    auditd
1991    (audispd)    /sbin/audispd�ow_scal (deleted)    /    /sbin/audispd
2065    (syslogd)    /sbin/syslogd    /    syslogd -m 0
2068    (klogd)    /sbin/klogd    /    klogd -x
2140    (courierlogger)    /usr/sbin/courierlogger����������������� (deleted)    /    /usr/sbin/courierlogger -pid=/var/spool/authdaemon/pid -facility=mail -start /usr/libexec/courier-authlib/authdaemond
2141    (authdaemond)    /usr/libexec/courier-authlib/authdaemond�����¬³¯÷¬³¯÷�hÀ (deleted)    /    /usr/libexec/courier-authlib/authdaemond
2174    (authdaemond)    /usr/libexec/courier-authlib/authdaemond�����¬³¯÷¬³¯÷�hÀ (deleted)    /    /usr/libexec/courier-authlib/authdaemond
2175    (authdaemond)    /usr/libexec/courier-authlib/authdaemond�����¬³¯÷¬³¯÷�hÀ (deleted)    /    /usr/libexec/courier-authlib/authdaemond
2176    (authdaemond)    /usr/libexec/courier-authlib/authdaemond�����¬³¯÷¬³¯÷�hÀ (deleted)    /    /usr/libexec/courier-authlib/authdaemond
2177    (authdaemond)    /usr/libexec/courier-authlib/authdaemond�����¬³¯÷¬³¯÷�hÀ (deleted)    /    /usr/libexec/courier-authlib/authdaemond
2178    (authdaemond)    /usr/libexec/courier-authlib/authdaemond�����¬³¯÷¬³¯÷�hÀ (deleted)    /    /usr/libexec/courier-authlib/authdaemond
2190    (rpc.idmapd)    /usr/sbin/rpc.idmapd�������� (deleted)    /    rpc.idmapd
2217    (dbus-daemon)    /bin/dbus-daemon����������������� (deleted)    /    dbus-daemon --system
2232    (hcid)    /usr/sbin/hcid    /    /usr/sbin/hcid
2261    (krfcommd)        /    
2310    (pcscd)    /usr/sbin/pcscd�_redirects������ (deleted)    /    pcscd
2331    (hidd)    /usr/bin/hidd    /    /usr/bin/hidd --server
2352    (kipmi0)        /    
2405    (automount)    /usr/sbin/automount�������� (deleted)    /    automount
2428    (acpid)    /usr/sbin/acpid�������� (deleted)    /    /usr/sbin/acpid
2461    (cupsd)    /usr/sbin/cupsd�������� (deleted)    /    cupsd
2527    (courierlogger)    /usr/sbin/courierlogger����������������� (deleted)    /    /usr/sbin/courierlogger -pid=/var/run/imapd.pid -start -name=imapd /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=50 -maxperip=30 -nodnslookup -noidentlookup 143 /usr/lib/courier-imap/sbin/imaplogin /usr/lib/courier-imap/bin/imapd Maildir
2528    (couriertcpd)    /usr/lib/courier-imap/libexec/couriertcpd����������������� (deleted)    /    /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=50 -maxperip=30 -nodnslookup -noidentlookup 143 /usr/lib/courier-imap/sbin/imaplogin /usr/lib/courier-imap/bin/imapd Maildir
2534    (courierlogger)    /usr/sbin/courierlogger����������������� (deleted)    /    /usr/sbin/courierlogger -pid=/var/run/imapd-ssl.pid -start -name=imapd-ssl /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=50 -maxperip=30 -nodnslookup -noidentlookup 993 /usr/lib/courier-imap/bin/couriertls -server -tcpd /usr/lib/courier-imap/sbin/imaplogin /usr/lib/courier-imap/bin/imapd Maildir
2535    (couriertcpd)    /usr/lib/courier-imap/libexec/couriertcpd����������������� (deleted)    /    /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=50 -maxperip=30 -nodnslookup -noidentlookup 993 /usr/lib/courier-imap/bin/couriertls -server -tcpd /usr/lib/courier-imap/sbin/imaplogin /usr/lib/courier-imap/bin/imapd Maildir
2540    (courierlogger)    /usr/sbin/courierlogger����������������� (deleted)    /    /usr/sbin/courierlogger -pid=/var/run/pop3d.pid -start -name=pop3d /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=50 -maxperip=30 -nodnslookup -noidentlookup 110 /usr/lib/courier-imap/sbin/pop3login /usr/lib/courier-imap/bin/pop3d Maildir
2541    (couriertcpd)    /usr/lib/courier-imap/libexec/couriertcpd����������������� (deleted)    /    /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=50 -maxperip=30 -nodnslookup -noidentlookup 110 /usr/lib/courier-imap/sbin/pop3login /usr/lib/courier-imap/bin/pop3d Maildir
2546    (courierlogger)    /usr/sbin/courierlogger����������������� (deleted)    /    /usr/sbin/courierlogger -pid=/var/run/pop3d-ssl.pid -start -name=pop3d-ssl /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=50 -maxperip=30 -nodnslookup -noidentlookup 995 /usr/lib/courier-imap/bin/couriertls -server -tcpd /usr/lib/courier-imap/sbin/pop3login /usr/lib/courier-imap/bin/pop3d Maildir
2547    (couriertcpd)    /usr/lib/courier-imap/libexec/couriertcpd����������������� (deleted)    /    /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=50 -maxperip=30 -nodnslookup -noidentlookup 995 /usr/lib/courier-imap/bin/couriertls -server -tcpd /usr/lib/courier-imap/sbin/pop3login /usr/lib/courier-imap/bin/pop3d Maildir
2644    (pure-ftpd)    /usr/sbin/pure-ftpd� entspricht nich (deleted)    /    pure-ftpd (SERVER)
2646    (pure-authd)    /usr/sbin/pure-authd��X*Ÿ ��D�Y�� V (deleted)    /    /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/sbin/pureauth
2892    (avahi-daemon)    /usr/sbin/avahi-daemon����������������� (deleted)    /etc/avahi    avahi-daemon: running [17-basic.local]
2893    (avahi-daemon)    /usr/sbin/avahi-daemon����������������� (deleted)    /    avahi-daemon: chroot helper
3054    (hald)    /usr/sbin/hald����������������� (deleted)    /    hald
3055    (hald-runner)    /usr/libexec/hald-runner����������������� (deleted)    /    hald-runner
3062    (hald-addon-acpi)    /usr/libexec/hald-addon-acpi����������������� (deleted)    /usr/libexec    hald-addon-acpi: listening on acpid socket /var/run/acpid.socket
3070    (hald-addon-stor)    /usr/libexec/hald-addon-storage����������������� (deleted)    /usr/libexec    hald-addon-storage: polling /dev/hda
3079    (yum-updatesd)    /usr/bin/python����������������� (deleted)    /    /usr/bin/python -tt /usr/sbin/yum-updatesd 

there's mor in it - the second post needs to be approved by a mod first

[Tino-Designs]

the rest of it

3090    (gam_server)    /usr/libexec/gam_server����������������� (deleted)    /    /usr/libexec/gam_server
3093    (ipalert_statd)    /usr/bin/perl.#prelink# (deleted)    /    /usr/bin/perl /usr/local/bin/ipalert_statd
3117    (portsentry)    /usr/sbin/portsentry    /    /usr/sbin/portsentry -tcp
3158    (smartd)    /usr/sbin/smartd�s # # I (deleted)    /    /usr/sbin/smartd -q never
3161    (mingetty)    /sbin/mingetty����������������� (deleted)    /    /sbin/mingetty tty1
3162    (mingetty)    /sbin/mingetty����������������� (deleted)    /    /sbin/mingetty tty2
3163    (mingetty)    /sbin/mingetty����������������� (deleted)    /    /sbin/mingetty tty3
3164    (mingetty)    /sbin/mingetty����������������� (deleted)    /    /sbin/mingetty tty4
3165    (mingetty)    /sbin/mingetty����������������� (deleted)    /    /sbin/mingetty tty5
3181    (mingetty)    /sbin/mingetty����������������� (deleted)    /    /sbin/mingetty tty6
3185    (agetty)    /sbin/agetty����������������� (deleted)    /dev    /sbin/agetty -L 9600 ttyS0 vt100
3219    (authProg)    /usr/local/cpanel/bin/courier-auth (deleted)    /    /etc/authlib/authProg
3449    (authProg)    /usr/local/cpanel/bin/courier-auth (deleted)    /    /etc/authlib/authProg
3627    (authProg)    /usr/local/cpanel/bin/courier-auth (deleted)    /    /etc/authlib/authProg
3802    (authProg)    /usr/local/cpanel/bin/courier-auth (deleted)    /    /etc/authlib/authProg
4345    (authProg)    /usr/local/cpanel/bin/courier-auth (deleted)    /    /etc/authlib/authProg
4401    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
7699    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
8242    (cpanellogd)    /usr/bin/perl    /    cpanellogd - http logs for picveco
8243    (logrunner)    /usr/local/cpanel/bin/cpuwatch    /    /usr/local/cpanel/bin/logrunner 2.0 /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8244    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8791    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8792    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8793    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8794    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8795    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8796    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8797    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8798    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8799    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8800    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
9833    (spamd)    /usr/bin/perl    /    spamd child
12894    (sshd)    /usr/sbin/sshd    /    /usr/sbin/sshd
12981    (crond)    /usr/sbin/crond    /var/spool    crond
15199    (exim)    /usr/sbin/exim    /var/spool/exim    /usr/sbin/exim -bd -oX 26
15204    (exim)    /usr/sbin/exim    /var/spool/exim    /usr/sbin/exim -bd -q1h
15209    (exim)    /usr/sbin/exim    /var/spool/exim    /usr/sbin/exim -tls-on-connect -bd -oX 465
17735    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
18658    (named)    /usr/sbin/named    /var/named    /usr/sbin/named -u named
19176    (atd)    /usr/sbin/atd    /var/spool/at    /usr/sbin/atd
21594    (pdflush)        /    
22650    (pdflush)        /    
25226    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
26531    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
27161    (spamd)    /usr/bin/perl    /    /usr/bin/spamd -d --allowed-ips=127.0.0.1 --pidfile=/var/run/spamd.pid --max-children=5
27172    (spamd)    /usr/bin/perl    /    spamd child
27869    (cpdavd)    /usr/bin/perl    /    cpdavd - accepting connections on 2077 and 2078
27985    (cpsrvd-ssl)    /usr/local/cpanel/cpsrvd-ssl    /usr/local/cpanel/base    cpsrvd - waiting for connections
29736    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
29742    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
30632    (mysqld_safe)    /bin/bash�s�9]�p.gz�.WTDLe (deleted)    /    /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/buxsense.buxsense.com.pid
30702    (mysqld)    /usr/sbin/mysqld�3]�name.MYD�prel (deleted)    /var/lib/mysql    /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --log-error=/var/lib/mysql/buxsense.buxsense.com.err --pid-file=/var/lib/mysql/buxsense.buxsense.com.pid
31146    (cpanellogd)    /usr/bin/perl    /usr/local/cpanel/install    cpanellogd - waiting for child to process logs
31170    (tailwatchd)    /usr/bin/perl    /usr/local/cpanel/install    tailwatchd
31182    (cphulkd.pl)    /usr/bin/perl    /usr/local/cpanel/install    cPhulkd - processor
32569    (cpanellogd)    /usr/bin/perl    /usr/local/cpanel/install    cpanellogd - loading config for picveco 

[Tino-Designs]

Here is the rest of it.
any help is highly appreciated

3090    (gam_server)    /usr/libexec/gam_server����������������� (deleted)    /    /usr/libexec/gam_server
3093    (ipalert_statd)    /usr/bin/perl.#prelink# (deleted)    /    /usr/bin/perl /usr/local/bin/ipalert_statd
3117    (portsentry)    /usr/sbin/portsentry    /    /usr/sbin/portsentry -tcp
3158    (smartd)    /usr/sbin/smartd�s # # I (deleted)    /    /usr/sbin/smartd -q never
3161    (mingetty)    /sbin/mingetty����������������� (deleted)    /    /sbin/mingetty tty1
3162    (mingetty)    /sbin/mingetty����������������� (deleted)    /    /sbin/mingetty tty2
3163    (mingetty)    /sbin/mingetty����������������� (deleted)    /    /sbin/mingetty tty3
3164    (mingetty)    /sbin/mingetty����������������� (deleted)    /    /sbin/mingetty tty4
3165    (mingetty)    /sbin/mingetty����������������� (deleted)    /    /sbin/mingetty tty5
3181    (mingetty)    /sbin/mingetty����������������� (deleted)    /    /sbin/mingetty tty6
3185    (agetty)    /sbin/agetty����������������� (deleted)    /dev    /sbin/agetty -L 9600 ttyS0 vt100
3219    (authProg)    /usr/local/cpanel/bin/courier-auth (deleted)    /    /etc/authlib/authProg
3449    (authProg)    /usr/local/cpanel/bin/courier-auth (deleted)    /    /etc/authlib/authProg
3627    (authProg)    /usr/local/cpanel/bin/courier-auth (deleted)    /    /etc/authlib/authProg
3802    (authProg)    /usr/local/cpanel/bin/courier-auth (deleted)    /    /etc/authlib/authProg
4345    (authProg)    /usr/local/cpanel/bin/courier-auth (deleted)    /    /etc/authlib/authProg
4401    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
7699    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
8242    (cpanellogd)    /usr/bin/perl    /    cpanellogd - http logs for picveco
8243    (logrunner)    /usr/local/cpanel/bin/cpuwatch    /    /usr/local/cpanel/bin/logrunner 2.0 /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8244    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8791    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8792    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8793    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8794    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8795    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8796    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8797    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8798    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8799    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
8800    (webalizer)    /usr/local/cpanel/3rdparty/bin/english/webalizer    /home/picveco/tmp/webalizer    /usr/local/cpanel/3rdparty/bin/english/webalizer -N 10 -D /home/picveco/tmp/webalizer/dns_cache.db -R 250 -p -n picve.com -o /home/picveco/tmp/webalizer /usr/local/apache/domlogs/picve.com
9833    (spamd)    /usr/bin/perl    /    spamd child
12894    (sshd)    /usr/sbin/sshd    /    /usr/sbin/sshd
12981    (crond)    /usr/sbin/crond    /var/spool    crond
15199    (exim)    /usr/sbin/exim    /var/spool/exim    /usr/sbin/exim -bd -oX 26
15204    (exim)    /usr/sbin/exim    /var/spool/exim    /usr/sbin/exim -bd -q1h
15209    (exim)    /usr/sbin/exim    /var/spool/exim    /usr/sbin/exim -tls-on-connect -bd -oX 465
17735    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
18658    (named)    /usr/sbin/named    /var/named    /usr/sbin/named -u named
19176    (atd)    /usr/sbin/atd    /var/spool/at    /usr/sbin/atd
21594    (pdflush)        /    
22650    (pdflush)        /    
25226    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
26531    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
27161    (spamd)    /usr/bin/perl    /    /usr/bin/spamd -d --allowed-ips=127.0.0.1 --pidfile=/var/run/spamd.pid --max-children=5
27172    (spamd)    /usr/bin/perl    /    spamd child
27869    (cpdavd)    /usr/bin/perl    /    cpdavd - accepting connections on 2077 and 2078
27985    (cpsrvd-ssl)    /usr/local/cpanel/cpsrvd-ssl    /usr/local/cpanel/base    cpsrvd - waiting for connections
29736    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
29742    (httpd)    /usr/local/apache/bin/httpd    /    /usr/local/apache/bin/httpd -k start -DSSL
30632    (mysqld_safe)    /bin/bash�s�9]�p.gz�.WTDLe (deleted)    /    /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/buxsense.buxsense.com.pid
30702    (mysqld)    /usr/sbin/mysqld�3]�name.MYD�prel (deleted)    /var/lib/mysql    /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --log-error=/var/lib/mysql/buxsense.buxsense.com.err --pid-file=/var/lib/mysql/buxsense.buxsense.com.pid
31146    (cpanellogd)    /usr/bin/perl    /usr/local/cpanel/install    cpanellogd - waiting for child to process logs
31170    (tailwatchd)    /usr/bin/perl    /usr/local/cpanel/install    tailwatchd
31182    (cphulkd.pl)    /usr/bin/perl    /usr/local/cpanel/install    cPhulkd - processor
32569    (cpanellogd)    /usr/bin/perl    /usr/local/cpanel/install    cpanellogd - loading config for picveco 

[Infopro]

thanks a lot - does it help you if I posted the current running processes?

I'm honestly not sure of what to do with those. I'd appreciate it if you could take a look an tell me what I'd have to change to get ahold of the load issue.

Tino

You might check the accounts on that server a little closer. I just checked one listed in your post (make money surfing ads forum) and it's got more spam posted in the last 20 hours than I think I've ever seen before on one forum, posted in a day.

If you've got no security and are not actively protecting the sites on the server, you're sure to have some load issues.