Getting alot of 'nobody' procceses!

[chris8lunch]

I'm getting alot of 'nobody' procceses with HIGH CPU load.. What do I do?? How do I stop this? Whose causing it??

Pid Owner Priority Cpu % Mem % Command
27908 nobody 0 58 0.4 /usr/local/apache/bin/httpd -DSSL

Also, alot from this,

3 root 49 42 0.0 [ksoftirqd/0]

[ksoftirqd/0] [ksoftirqd/0] [ksoftirqd/0] [ksoftirqd/0] IT KEEPS POPPING UP WITH HIGH CPU LOADS!

 

[chris74108]

http://forums.cpanel.net/showthread.php?t=58051

Try that post. I think it will lead you in the correct direction.

 

[chris8lunch]

Also after rereading your post

27908 nobody 0 58 0.4 /usr/local/apache/bin/httpd -DSSL

That is apache
You will see one for each instance of apache
If you have a lot of people using your webserver you will see a lot of them.

But it wasn't until today it started using ALOT of CPU!

 

[chris8lunch]

http://www.opensourcemanuals.org/manual/ksoftirqd/manual_index

For the other one you posted

Maybe I don't see it, but theres nothing there to help me at all.

 

[chris8lunch]

try the command top
and watch it a few

Ok, no offence but I think your trying to get me mad, what do you think I've been doing? Watching it isn't helping me at all.

Thanks for your help if it wasn't sarcasim.

 

[chris74108]

Also after rereading your post

27908 nobody 0 58 0.4 /usr/local/apache/bin/httpd -DSSL

That is apache
You will see one for each instance of apache
If you have a lot of people using your webserver you will see a lot of them.

 

[chris74108]

http://www.opensourcemanuals.org/manual/ksoftirqd/manual_index

For the other one you posted

 

[chris74108]

But it wasn't until today it started using ALOT of CPU!

try the command top
and watch it a few

 

[chris8lunch]

Softirqd is a kernel thread that runs when its under heavy load. The softirq is generated faster than it can be serviced which obviously happens under load. You can adjust your log parsing times to better suite your needs.

Would you mind explaining this more? What is "log parsing"? And another note its NEVER done this before until now.

 

[jayh38]

27900's are probably your domlogs parsing for the stats.

lsof -p 27908

Softirqd is a kernel thread that runs when its under heavy load. The softirq is generated faster than it can be serviced which obviously happens under load. You can adjust your log parsing times to better suite your needs.

Every user runs as "nobody" if you have phpsuexec disabled and obviously you do. Unless they run a specific service that they log into such as FTP, they will show up with their account name.

You can turn on phpsuexec by recompiling apache for better security but you also risk breaking scripts as most php scripts and mailers are setup to run as nobody. Also php accelerators need to run as nobody so you will lose the ability to run a cache accelerator with phpsuexec.

 

[chris8lunch]

Softirqd is a kernel thread that runs when its under heavy load. The softirq is generated faster than it can be serviced which obviously happens under load. You can adjust your log parsing times to better suite your needs.

Would you mind explaining this more? What is "log parsing"? And another note its NEVER done this before until now.

 

[chris8lunch]

Collecting your domain stats, bandwidth, quotas, etc.. just account statistics.
You probably never noticed it run before but I am sure it has run, otherwise
you would not have any information for account usage such as a users
bandwidth or any data in your webalizer or awstats.

I only keep awstats enabled for my clients. No one seems to care for the
other stats programs so it may save you some cpu time by disabling
the stats application you may not need.

As your traffic increases and use base increases, obviously your log files
will increase and require more processing time.

How do I adjust this?

 

[jayh38]

Would you mind explaining this more? What is "log parsing"? And another note its NEVER done this before until now.

Collecting your domain stats, bandwidth, quotas, etc.. just account statistics.
You probably never noticed it run before but I am sure it has run, otherwise
you would not have any information for account usage such as a users
bandwidth or any data in your webalizer or awstats.

I only keep awstats enabled for my clients. No one seems to care for the
other stats programs so it may save you some cpu time by disabling
the stats application you may not need.

As your traffic increases and use base increases, obviously your log files
will increase and require more processing time.

 

[chris8lunch]

Collecting your domain stats, bandwidth, quotas, etc.. just account statistics.
You probably never noticed it run before but I am sure it has run, otherwise
you would not have any information for account usage such as a users
bandwidth or any data in your webalizer or awstats.

I only keep awstats enabled for my clients. No one seems to care for the
other stats programs so it may save you some cpu time by disabling
the stats application you may not need.

As your traffic increases and use base increases, obviously your log files
will increase and require more processing time.

How do I adjust this?/

 

[chris8lunch]

You can adjust the scheduling in whm at the top:
Statistics Software Configuration

You can turn off the stats software you do not need in
tweak settings > stats programs

I honestly think you might have this confsued with something else because my server load wouldn't just jump from average of 0.03 to 10+ with CPU usage new average of 90%+!!

I can't even get in my server right now!!

 

[jayh38]

You can adjust the scheduling in whm at the top:
Statistics Software Configuration

You can turn off the stats software you do not need in
tweak settings > stats programs

 

[chris8lunch]

With the information you provided, that process was in the range of processing
logs. A big load spike is very common. I would not pay much attention to averages
but more so to actual cpu%. The average may be a bit unrealistic as like it says
an average and not real time. So it will take a while to decay back down to a low
idle level when your server is idle.

WHM and cpanel is a bit heavy, especially when stats are processing, it would be
normal to see big spikes and delays of responsiveness. I use whm as little as
possible. Don't let whm and cpanel get in the way of your shell.

Its been doing this for 6+ hours. The server is 50% down and the other half when its up, its slow as crap.

the proc ID for ksoftirqd/0 is 3 but it wont let me kill it!

 

[chris8lunch]

With the information you provided, that process was in the range of processing
logs. A big load spike is very common. I would not pay much attention to averages
but more so to actual cpu%. The average may be a bit unrealistic as like it says
an average and not real time. So it will take a while to decay back down to a low
idle level when your server is idle.

WHM and cpanel is a bit heavy, especially when stats are processing, it would be
normal to see big spikes and delays of responsiveness. I use whm as little as
possible. Don't let whm and cpanel get in the way of your shell.

Its been doing this for 6+ hours. The server is 50% down and the other half when its up, its slow as crap.

the proc ID for ksoftirqd/0 is 3 but it wont let me kill it!

I just disabled
webalizer
awstats
analog

and it still the igh load with 'ksoftirqd/0'

 

[jayh38]

With the information you provided, that process was in the range of processing
logs. A big load spike is very common. I would not pay much attention to averages
but more so to actual cpu%. The average may be a bit unrealistic as like it says
an average and not real time. So it will take a while to decay back down to a low
idle level when your server is idle.

WHM and cpanel is a bit heavy, especially when stats are processing, it would be
normal to see big spikes and delays of responsiveness. I use whm as little as
possible. Don't let whm and cpanel get in the way of your shell.

 

[chris8lunch]

Its been doing this for 6+ hours. The server is 50% down and the other half when its up, its slow as crap.

the proc ID for ksoftirqd/0 is 3 but it wont let me kill it!

I just disabled
webalizer
awstats
analog

and it still the igh load with 'ksoftirqd/0'