Getting alot of 'nobody' procceses!

chris8lunch

Well-Known Member
May 27, 2006
160
0
166
I have now disabled almost everything I can such as HTTPD, but STILL that stupid thing is coming up and making the server go SLOW!
 

jayh38

Well-Known Member
Mar 3, 2006
1,213
0
166
post the output of

ps aux

and

netstat -plan|grep :80| grep -v TIME_WAIT | wc -l
 

chris8lunch

Well-Known Member
May 27, 2006
160
0
166
jayh38 said:
post the output of

ps aux

and

netstat -plan|grep :80| grep -v TIME_WAIT | wc -l

ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 2732 552 ? S 20:56 0:00 init [3]
root 2 0.0 0.0 0 0 ? S 20:56 0:00 [migration/0]
root 3 19.7 0.0 0 0 ? RN 20:56 2:11 [ksoftirqd/0]
root 4 0.0 0.0 0 0 ? S 20:56 0:00 [migration/1]
root 5 0.0 0.0 0 0 ? SN 20:56 0:00 [ksoftirqd/1]
root 6 0.9 0.0 0 0 ? S< 20:56 0:06 [events/0]
root 7 0.0 0.0 0 0 ? S< 20:56 0:00 [events/1]
root 8 0.0 0.0 0 0 ? S< 20:56 0:00 [khelper]
root 9 0.0 0.0 0 0 ? S< 20:56 0:00 [kacpid]
root 28 0.1 0.0 0 0 ? S< 20:56 0:00 [kblockd/0]
root 29 0.0 0.0 0 0 ? S< 20:56 0:00 [kblockd/1]
root 47 0.0 0.0 0 0 ? S 20:56 0:00 [pdflush]
root 48 0.0 0.0 0 0 ? S 20:56 0:00 [pdflush]
root 50 0.0 0.0 0 0 ? S< 20:56 0:00 [aio/0]
root 51 0.0 0.0 0 0 ? S< 20:56 0:00 [aio/1]
root 30 0.0 0.0 0 0 ? S 20:56 0:00 [khubd]
root 49 0.0 0.0 0 0 ? S 20:56 0:00 [kswapd0]
root 195 0.0 0.0 0 0 ? S 20:56 0:00 [kseriod]
root 322 0.0 0.0 0 0 ? S 20:56 0:00 [kjournald]
root 1377 0.0 0.0 1992 456 ? S<s 20:56 0:00 udevd
root 1416 0.0 0.0 0 0 ? S 20:56 0:00 [shpchpd_event]
root 1641 0.0 0.0 0 0 ? S< 20:56 0:00 [kauditd]
root 1705 0.0 0.0 0 0 ? S< 20:56 0:00 [kmirrord]
root 1755 0.0 0.0 0 0 ? S 20:56 0:00 [kjournald]
root 1756 0.0 0.0 0 0 ? S 20:56 0:00 [kjournald]
root 1757 0.0 0.0 0 0 ? S 20:56 0:00 [kjournald]
root 1758 0.0 0.0 0 0 ? S 20:56 0:00 [kjournald]
root 1759 0.4 0.0 0 0 ? S 20:56 0:03 [kjournald]
root 1760 0.1 0.0 0 0 ? S 20:56 0:00 [kjournald]
root 2687 0.4 0.0 2336 552 ? Ss 20:57 0:02 syslogd -m 0
root 2692 1.1 0.0 2488 380 ? Ss 20:57 0:07 klogd -x
root 2702 0.0 0.0 2652 300 ? Ss 20:57 0:00 irqbalance
named 2714 4.4 0.3 49576 3740 ? Ssl 20:57 0:28 /usr/sbin/named -
root 2763 0.0 0.0 3428 292 ? S 20:57 0:00 /usr/sbin/courier
root 2764 0.0 0.0 2224 608 ? S 20:57 0:00 /usr/libexec/cour
root 2766 0.0 0.0 2224 360 ? S 20:57 0:00 /usr/libexec/cour
root 2767 0.0 0.0 2224 168 ? S 20:57 0:00 /usr/libexec/cour
root 2768 0.0 0.0 2224 168 ? S 20:57 0:00 /usr/libexec/cour
root 2769 0.0 0.0 2224 168 ? S 20:57 0:00 /usr/libexec/cour
root 2770 0.0 0.0 2224 360 ? S 20:57 0:00 /usr/libexec/cour
root 2796 0.0 0.0 5488 344 ? Ss 20:57 0:00 rpc.idmapd
root 2869 0.0 0.0 2388 472 ? S 20:57 0:00 /usr/sbin/smartd
root 2878 0.0 0.0 2764 440 ? Ss 20:57 0:00 /usr/sbin/acpid
root 2887 0.0 0.1 5388 1144 ? Ss 20:57 0:00 /usr/sbin/sshd
root 2900 0.0 0.0 2820 756 ? Ss 20:57 0:00 xinetd -stayalive
postgres 2943 0.0 0.2 19828 2076 ? S 20:57 0:00 /usr/bin/postmast
postgres 2945 0.0 0.0 10628 480 ? S 20:57 0:00 postgres: stats b
postgres 2946 0.0 0.0 9636 576 ? S 20:57 0:00 postgres: stats c
root 2958 0.0 0.1 3928 1112 ? S 20:57 0:00 antirelayd
root 2967 0.0 0.7 12672 8044 ? S 20:57 0:00 chkservd
root 2978 0.0 0.0 3432 212 ? S 20:57 0:00 /usr/sbin/courier
root 2979 0.0 0.0 2776 476 ? S 20:57 0:00 /usr/lib/courier-
root 2985 0.0 0.0 2160 212 ? S 20:57 0:00 /usr/sbin/courier
root 2986 0.0 0.0 2328 476 ? S 20:57 0:00 /usr/lib/courier-
root 2992 0.0 0.0 1876 288 ? S 20:57 0:00 /usr/sbin/courier
root 2993 0.0 0.0 3488 500 ? S 20:57 0:00 /usr/lib/courier-
root 2998 0.0 0.0 3440 212 ? S 20:57 0:00 /usr/sbin/courier
root 2999 0.0 0.0 2272 476 ? S 20:57 0:00 /usr/lib/courier-
root 3489 5.6 0.5 9784 5696 ? S 20:57 0:34 lfd - sleeping
root 3662 0.0 0.0 5580 940 ? Ss 20:57 0:00 crond
root 4150 0.0 0.4 7328 4848 ? S 20:57 0:00 cpbandwd
root 4151 0.1 0.7 10968 7448 ? SN 20:57 0:00 cpanellogd - slee
root 4165 0.1 0.8 17320 8348 ? S 20:57 0:00 cpsrvd - waiting
mailman 4215 0.0 0.4 11352 4900 ? Ss 20:57 0:00 /usr/local/bin/py
dbus 4224 0.0 0.0 3204 960 ? Ss 20:57 0:00 dbus-daemon-1 --s
mailman 4227 0.1 0.6 10828 6624 ? S 20:57 0:00 /usr/local/bin/py
mailman 4228 0.1 0.6 10700 6632 ? S 20:57 0:01 /usr/local/bin/py
mailman 4229 0.0 0.6 12028 6632 ? S 20:57 0:00 /usr/local/bin/py
mailman 4230 0.1 0.6 11232 6696 ? S 20:57 0:00 /usr/local/bin/py
mailman 4231 0.1 0.6 11504 6648 ? S 20:57 0:01 /usr/local/bin/py
mailman 4232 0.2 0.6 10316 6764 ? S 20:57 0:01 /usr/local/bin/py
mailman 4233 0.1 0.6 10828 6620 ? S 20:57 0:00 /usr/local/bin/py
mailman 4234 0.0 0.6 10652 6620 ? S 20:57 0:00 /usr/local/bin/py
root 4243 0.1 0.5 8448 5672 ? Ss 20:57 0:00 hald
root 4313 0.0 0.0 1480 392 ? Ss 20:57 0:00 /usr/sbin/portsen
root 4364 0.0 0.1 4676 1240 ? S 20:58 0:00 /bin/sh /usr/bin/
mysql 4394 1.3 2.4 108052 24740 ? Sl 20:58 0:08 /usr/sbin/mysqld
root 4570 0.0 0.0 1804 412 tty1 Ss+ 20:58 0:00 /sbin/mingetty tt
root 4571 0.0 0.0 2700 412 tty2 Ss+ 20:58 0:00 /sbin/mingetty tt
root 4572 0.0 0.0 2016 412 tty3 Ss+ 20:58 0:00 /sbin/mingetty tt
root 4573 0.0 0.0 3292 412 tty4 Ss+ 20:58 0:00 /sbin/mingetty tt
root 4574 0.0 0.0 1564 408 tty5 Ss+ 20:58 0:00 /sbin/mingetty tt
root 4575 0.0 0.0 3292 412 tty6 Ss+ 20:58 0:00 /sbin/mingetty tt
root 6400 0.1 0.7 11540 8072 ? S 21:02 0:00 /etc/authlib/auth
root 7437 0.3 0.2 8332 2296 ? Ss 21:06 0:00 sshd: [email protected]/0
root 7461 0.0 0.1 5296 1444 pts/0 Ss 21:06 0:00 -bash
root 7628 0.2 0.7 11540 8072 ? S 21:07 0:00 /etc/authlib/auth
shortti 7631 2.6 0.8 17468 8892 ? Ss 21:07 0:00 cpaneld - serving
shortti 7632 8.0 1.9 21304 19848 ? S 21:07 0:00 /usr/local/cpanel
root 7636 0.0 0.0 3264 784 pts/0 R+ 21:07 0:00 ps aux


----

netstat -plan|grep :80| grep -v TIME_WAIT | wc -l
0
 

jayh38

Well-Known Member
Mar 3, 2006
1,213
0
166
you dont seem to have http connections. The user shortii was using some processor there.

show a top output and what os and kernel do you have
 

chris8lunch

Well-Known Member
May 27, 2006
160
0
166
jayh38 said:
you dont seem to have http connections. The user shortii was using some processor there.

show a top output and what os and kernel do you have
Like I said I disabled things like HTTPD just so the server would load a LITTLE.

show a top output and what os and kernel do you have

Can you explain what you want me to do exacly.

Thanks man.
 

jayh38

Well-Known Member
Mar 3, 2006
1,213
0
166
show a top output, in ssh type
top

what kernel version, in ssh type
uname -r
 

jayh38

Well-Known Member
Mar 3, 2006
1,213
0
166
The last time I saw that was a kernel bug but you are on a good kernel.
since you have all the services disabled, did you try restarting?
There may be something hung thats not showing. Restart may be
the easiest fix at the moment.

shutdown -r now
 

chris8lunch

Well-Known Member
May 27, 2006
160
0
166
jayh38 said:
The last time I saw that was a kernel bug but you are on a good kernel.
since you have all the services disabled, did you try restarting?
There may be something hung thats not showing. Restart may be
the easiest fix at the moment.

shutdown -r now
I have restarted MANY times. It STILL shows up.. I even tried killing the proc but it doesn't work even with -9
 

jayh38

Well-Known Member
Mar 3, 2006
1,213
0
166
Well, you should have someone look at your settings. There is only so much that can be done without monitoring live processes. Your top and ps snapshots could be at moments where the processes were not showing and other things like that.
 

chris8lunch

Well-Known Member
May 27, 2006
160
0
166
jayh38 said:
Well, you should have someone look at your settings. There is only so much that can be done without monitoring live processes. Your top and ps snapshots could be at moments where the processes were not showing and other things like that.
Is there not a way to kill this proc?

And what others would you need to see? Thats the only one causing the issue!
 
Last edited:

chris8lunch

Well-Known Member
May 27, 2006
160
0
166
THANKS jayh38!!

This guy is no joke and really knows what he's doing!! He solved a problem my DataCenter wasted 6 hours on and STILL didn't figure it out!!

:D
 

freedog96150

Well-Known Member
Mar 25, 2005
68
0
156
Nevada, USA
What was the issue and solution? Please post so that future searches on this or similar problem show a solution and the whole thread does not get rehashed again.
Thanks!
 

jayh38

Well-Known Member
Mar 3, 2006
1,213
0
166
eh?? LOL... sorry for the lack of update. I did not think anyone would follow this.

There were just some hung processes, the main one from his CSF install. Just a
a reinstall of CSF was all that he needed. I adjusted it to be more suiting for his
needs.

Im not sure why a data center would not look in the error logs, but the logs hit ya
in the face like a mac truck.