httpd processes and user nobody - who is using it?

[pingo]

3-4 httpd processes - user nobody - are constantly running on the server constantly consuming about 40% of the CPUs resources. I looked in WHM and traced the processes but it is confusing me that some place in a trace there is a path to one users cgi script in the start of the page while further down the bottom there is a path to another users account. - How do I know which account is abusing the resources with user nobody. Hope someone more experienced can enlighten me and provide me with some tips.

Thanks
John

[xsenses]

Have you enabled "SuExec"?

[pingo]

Yes, suexec is enabled.

John

[pingo]

I wonder if httpd can be a little screwed up some times? I restarted apache and it looks like this restored some order. CPU usage has been low since then.

John