user nobody taking too much CPU

[uacomm]

From last 4 days my server taking load. To investigate when I:

1: Go to Main >> Server Status >> Daily Process Log I found user nobody taking high load:

User Domain % CPU % MEM MySQL Processes
nobody 73.64 1.78 0.0

2: Go to Main >> System Health >> Process Manager I found user nobody taking load:

Pid Owner Priority CPU % Memory % Command
24459 (Trace) (Kill) nobody 4 71.9 0.1 /usr/sbin/apache2 -k start
24488 (Trace) (Kill) nobody 4 71.8 0.1 /usr/sbin/apache2 -k start
24484 (Trace) (Kill) nobody 4 71.7 0.0 /usr/sbin/apache2 -k start
24485 (Trace) (Kill) nobody 4 71.6 0.0 /usr/sbin/apache2 -k start

3: When I used command lsof +p 24459 I found:


[email protected] [~]# lsof +p 24459
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
perl 24459 nobody cwd DIR 8,6 1343488 2 /tmp
perl 24459 nobody rtd DIR 8,5 4096 2 /
perl 24459 nobody txt REG 8,3 14984 66074 /usr/bin/perl
perl 24459 nobody mem REG 8,5 45432 65627 /lib/libcrypt-2.5.so
perl 24459 nobody mem REG 8,3 1241944 2132545 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so
perl 24459 nobody mem REG 8,5 15308 67479 /lib/libutil-2.5.so
perl 24459 nobody mem REG 8,5 129832 65553 /lib/ld-2.5.so
perl 24459 nobody mem REG 8,5 1689640 65560 /lib/libc-2.5.so
perl 24459 nobody mem REG 8,5 20668 67474 /lib/libdl-2.5.so
perl 24459 nobody mem REG 8,5 216544 67473 /lib/libm-2.5.so
perl 24459 nobody mem REG 8,5 137908 67480 /lib/libpthread-2.5.so
perl 24459 nobody mem REG 8,5 109740 67477 /lib/libnsl-2.5.so
perl 24459 nobody mem REG 8,5 80636 67476 /lib/libresolv-2.5.so
perl 24459 nobody mem REG 8,3 121136 2263805 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/HTML/Parser/Parser.so
perl 24459 nobody mem REG 8,3 18240 2130809 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/File/Glob/Glob.so
perl 24459 nobody mem REG 8,3 325629 2265298 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Raw/Zlib/Zlib.so
perl 24459 nobody mem REG 8,5 21948 65573 /lib/libnss_dns-2.5.so
perl 24459 nobody mem REG 8,5 50848 65575 /lib/libnss_files-2.5.so
perl 24459 nobody mem REG 8,3 75486 2130340 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/List/Util/Util.so
perl 24459 nobody mem REG 8,3 54418 2132336 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so
perl 24459 nobody mem REG 8,3 60416 2130779 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Digest/MD5/MD5.so
perl 24459 nobody mem REG 8,3 10736 2130818 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/I18N/Langinfo/Langinfo.so
perl 24459 nobody mem REG 8,3 102855 2131948 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Encode/Encode.so
perl 24459 nobody mem REG 8,3 204529 2132267 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Storable/Storable.so
perl 24459 nobody mem REG 8,3 16016 2130822 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/IO/IO.so
perl 24459 nobody mem REG 8,3 56413600 2067295 /usr/lib/locale/locale-archive
perl 24459 nobody mem REG 8,3 20216 2130997 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Socket/Socket.so
perl 24459 nobody mem REG 8,3 11680 2130807 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Fcntl/Fcntl.so
perl 24459 nobody 0r CHR 1,3 576 /dev/null
perl 24459 nobody 1w FIFO 0,6 1205362 pipe
perl 24459 nobody 2w REG 8,3 144515822 1738763 /usr/local/apache/logs/error_log
perl 24459 nobody 3u IPv4 1205390 TCP server.uacommunication.com:58846->guya.princ3ss.of.moon.dre.am:afs3-fileserver (ESTABLISHED)
perl 24459 nobody 910u REG 8,6 0 689 /tmp/ZCUDjNGFiS (deleted)



So can any one guide what is the cause of taking user nobody such high load? and how to resolve this issue?

 

[JerrySmith]

Hello,

By default, Apache runs as the user nobody and group nobody. You are likely seeing high load because one or more sites on your server are seeing higher traffic than usual.

It is difficult to track down this issue. I would start by looking at PHP. If PHP is configured as suPHP, you should be able to check for user process usage. The highest few users are likely the cause of your problem.

 

[uacomm]

How can I check user process usage?

 

[cPanelTristan]

In WHM > Daily Process Logs, you will find a list of each user on the machine. Also, high CPU does not always correlate to high load. What is the actual load on the machine at this point via the uptime command in root SSH.

Next, I would highly suggest logging into the machine in root SSH rather than using WHM to troubleshoot the issue, then running the "top" command in root SSH. If you watch top for about 10 minutes, you should get a pattern of the current activity to see which users are showing up the most in top for high CPU and memory usage. The default sorting for top area is highest CPU, but you can switch to highest memory view by entering "M" (uppercase m) while in top.