cphulk still running even if I disabled it

[Kent Brockman]

It's a silly behaviour. I'm using the lfd b rute force protection from CSF, thus I disabled cpHulk to improve resource usage and avoid to be double alerted.
Something may be incorrectly set when you disable cpHulk cause after I upgrade cPanel, I can see the cphulkd process running in the "Show Current CPU Usage" pane, but this function appear as disabled in the Security Center, so I must manually Enable and then Disable it to fully turn off the process.
Why is this happening? may be due to any bug?
Regards

[cpanelkenneth]

It's a silly behaviour. I'm using the lfd b rute force protection from CSF, thus I disabled cpHulk to improve resource usage and avoid to be double alerted.
Something may be incorrectly set when you disable cpHulk cause after I upgrade cPanel, I can see the cphulkd process running in the "Show Current CPU Usage" pane, but this function appear as disabled in the Security Center, so I must manually Enable and then Disable it to fully turn off the process.
Why is this happening? may be due to any bug?
Regards

Are your cPanel updates running automatically or manually? If manually, are your --force'ing them? Which branch (e.g. STABLE) of cPanel are you using?

Testing on 11.23.4-CURRENT_26138:

1. Disabled cPHulkd in Security Center
2. Verified cPHulkd process was no longer running
3. Executed /scripts/upcp
4. Upon upcp completion checked for cPHulkd process:

root@mundane [~]# ps ax | grep -i hulk
  375 pts/0    S+     0:00 grep -i hulk

Re-running the test with a forced update and will provide the results upon completion.


UPDATE:

/scripts/upcp --force does indeed cause the cPHulkd process to start though disabled in Security Center.

[Kent Brockman]

Nope, I never "force" the upcp. Should I do it?
I use manual updates since I like to read the changelog before start downloading.
At the moment of this post I have recently updated from WHM 11.23.2 cPanel 11.23.3-S25971 to WHM 11.23.2 cPanel 11.23.4-S26138.

[cpanelkenneth]

Nope, I never "force" the upcp. Should I do it?
I use manual updates since I like to read the changelog before start downloading.
At the moment of this post I have recently updated from WHM 11.23.2 cPanel 11.23.3-S25971 to WHM 11.23.2 cPanel 11.23.4-S26138.

A forced update essentially re-installs cPanel (it doesn't remove any of your configuration settings). It's not normally needed.

[Kent Brockman]

A forced update essentially re-installs cPanel (it doesn't remove any of your configuration settings). It's not normally needed.

ok, then I will watch it next time cPanel must be upgraded.

[anup123]

No --force used ever. upcp is manual only.
WHM 11.23.2 cPanel 11.23.4-R26138.
cpHulkd is disabled in whm (never remember enabling it as using csf+lfd)
Still it shows up in pstree

enabled and then disabled again.
Doesn't showup in pstree.

Regards
Anup

[Kent Brockman]

No --force used ever. upcp is manual only.
WHM 11.23.2 cPanel 11.23.4-R26138.
cpHulkd is disabled in whm (never remember enabling it as using csf+lfd)
Still it shows up in pstree

enabled and then disabled again.
Doesn't showup in pstree.

Regards
Anup

May be a bug inside upcp?
cpHulkd shouldn't start if the admin have disabled it. upcp should check that.

[anup123]

no cphulkd in pstree after above.

ran upcp
no cpHulkd in pstree so all fine.

then did a /etc/rc.d/init.d/cpanel restart:

Stopping cPanel brute force detector services: [ OK ]
Starting cPanel brute force detector services: [ OK ]

So a minor quirk as no cpHulkd in pstree even after. But upcp didn't get it back. So looks ok so far.