Just tracked one down
I used strace as you suggested and here's what I got:
read(6, &&
[email protected]&..., 218) = 218
lseek(6, 15611, SEEK_SET) = 15611
read(6, &&
[email protected]&10&..., 159) = 159
lseek(6, 62997, SEEK_SET) = 62997
read(6, &&
[email protected]&..., 272) = 272
lseek(6, 100599, SEEK_SET) = 100599
read(6, &&
[email protected]&..., 165) = 165
lseek(6, 169114, SEEK_SET) = 169114
read(6, &&NEBBJGHIIMIMMPNCMGKNEENOCDAA.ew&..., 252) = 252
lseek(6, 104796, SEEK_SET) = 104796
read(6, &&E16oeRa-00 81630
But that wasn't it - that went on forever. Before the process started the server load was at about .6, after 35 seconds, the server load was at 5.0, after a minute the server load was at 9 and rising.
So, my question: how do we turn this thing off?