memcached Resource: Process Time Exceeded: 2753146

[James Eco]

Hello, cpanel+cloudlinux -Getting an email from CSF about high Memcached usage -
Time: Sat Mar 13 20:02:15 2021 +0200
Account: memcached
Resource: Process Time
Exceeded: 2648865 > 1900 (seconds)
Executable: /usr/bin/memcached
Command Line: /usr/bin/memcached -u memcached -p 11211 -m 512 -c 1024 -l 127.0.0.1
PID: 12208 (Parent PID:12208)
Killed: No
after 2 days it grow to
Time: Mon Mar 15 01:00:15 2021 +0200
Account: memcached
Resource: Process Time
Exceeded: 2753146 > 1900 (seconds)
when checking the process manager i can see that this process is low -

12208 (Trace) (Kill)

memcached

0

0.01

0.01

/usr/bin/memcached -u memcached -p 11211 -m 512 -c 1024 -l 127.0.0.1

as well my PHP-fpm is off
Is it ok? what can cause this behavior?
Thank u

 

[cPRex]

Hey there! As you mentioned, this notification is from CSF and is just letting you know that is sees that process has been running for a long time. While not controlled by cPanel, we do have details on the CSF warnings here:

Why am I Receiving Suspicious Process Notifications?

Question Why am I receiving notifications from my cPanel server that a suspicious process is running? Answer Suspicious process notifications come from CSF/LFD and not actually cPanel. While thes...

support.cpanel.net

and you can adjust that configuration to stop those from being sent. It's important to note that this does not indicate any issues with the machine.

 

[James Eco]

so is it ok Exceeded: 2753146 ?

 

[cPRex]

That time in seconds is about 31 days, so it's possible this has just been running since the last time the server was rebooted. It's fine that it's been running for so long, but the CSF tool just doesn't know about that process. You can whitelist memcached using the details in the link I sent, but if you think that CSF isn't operating normally it would be best to reach out to their team at ConfigServer Technical Support to let them know.