Every few hours I get this e-mail from cPanel, and even after deleting the log files for the user it mentions, I keep getting them:

IMPORTANT: Do not ignore this email.
This is cPanel stats runner on ----------------------------!
While processing the log files for user --------, the cpu has been
maxed out for more then a 6 hour period. The current load/uptime line on the server at the time of
this email is
22:41:59 up 205 days, 10:10, 0 users, load average: 14.13, 15.37, 16.71

You should check the server to see why the load is so high and take
steps to lower the load. If you want stats to continue to run even with a high load; Edit
/var/cpanel/cpanel.config and change extracpus to a number larger then 0 (run
/usr/local/cpanel/startup afterwards to pickup the changes).



These CPU usage numbers are unacceptable - how do I fix this problem without restarting (205 days of uptime is awesome :peace: )



Heres the list of processes running (ps aux) (With some taken out for obvious reasons) :

USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 1536 84 ? S 2005 0:48 init [3]
root 2 0.0 0.0 0 0 ? SW 2005 0:02 [keventd]
root 3 0.0 0.0 0 0 ? SW 2005 0:04 [kapmd]
root 4 0.0 0.0 0 0 ? SWN 2005 0:00 [ksoftirqd/0]
root 7 0.0 0.0 0 0 ? SW 2005 0:06 [bdflush]
root 5 0.0 0.0 0 0 ? SW 2005 6:01 [kswapd]
root 6 0.0 0.0 0 0 ? SW 2005 47:26 [kscand]
root 8 0.0 0.0 0 0 ? SW 2005 0:03 [kupdated]
root 9 0.0 0.0 0 0 ? SW 2005 0:00 [mdrecoveryd]
root 13 0.0 0.0 0 0 ? SW 2005 10:41 [kjournald]
root 68 0.0 0.0 0 0 ? SW 2005 0:00 [khubd]
root 1265 0.0 0.0 0 0 ? SW 2005 0:00 [kjournald]
root 1565 0.0 0.0 0 0 ? SW 2005 0:00 [eth0]
root 1684 0.0 0.0 1584 568 ? S 2005 2:59 syslogd -m 0
root 1688 0.0 0.0 1532 392 ? S 2005 0:00 klogd -x
root 1812 0.0 0.1 8104 1656 ? S 2005 5:35 chkservd
root 1934 0.0 0.0 1584 516 ? S 2005 0:11 crond
xfs 1986 0.0 0.0 5228 516 ? S 2005 0:00 xfs -droppriv -daemon
daemon 1995 0.0 0.0 1580 360 ? S 2005 0:00 /usr/sbin/atd
root 2136 0.0 0.1 12664 1040 ? S 2005 0:28 cpsrvd - waiting for connections
root 2181 0.0 1.0 18316 11088 ? SN 2005 110:33 cpanellogd - setting up logs for censored
nobody 2195 0.0 0.0 1876 504 ? S 2005 0:00 /usr/local/cpanel/bin/startmelange
cpanel 2220 0.0 0.0 13980 544 ? S 2005 0:00 /usr/bin/stunnel-4.04local /usr/local/cpanel/etc/stunnel/default/stunnel.conf
mailman 2234 0.0 0.1 7220 1168 ? S 2005 0:00 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start
root 2254 0.0 0.0 7832 284 ? S 2005 0:00 /usr/bin/perl /usr/local/bin/ipalert_statd
mailman 2260 0.0 0.1 7176 1288 ? S 2005 0:21 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
mailman 2261 0.0 0.1 7144 1336 ? S 2005 0:23 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
mailman 2262 0.0 0.1 7136 1292 ? S 2005 0:20 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
mailman 2263 0.0 0.1 7228 1308 ? S 2005 0:19 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
mailman 2264 0.0 0.1 7212 1356 ? S 2005 0:21 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
mailman 2265 0.0 0.1 7260 1432 ? S 2005 0:22 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
mailman 2266 0.0 0.1 7172 1236 ? S 2005 0:21 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
mailman 2267 0.0 0.1 7168 1216 ? S 2005 0:00 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
root 2285 0.0 0.0 1676 516 ? S 2005 0:00 /usr/sbin/portsentry -tcp
root 2306 0.0 0.0 1580 292 ? S 2005 0:00 mdadm --monitor --scan -f
root 2319 0.0 1.1 12148 12144 ? SL 2005 0:00 mdmpd
root 2338 0.0 0.0 3480 428 ? S 2005 0:03 /usr/local/urchin/bin/urchinwebd -f /usr/local/urchin/var/urchinwebd.conf
nobody 2339 0.0 0.0 3480 596 ? S 2005 0:00 /usr/local/urchin/bin/urchinwebd -f /usr/local/urchin/var/urchinwebd.conf
nobody 2340 0.0 0.0 3480 588 ? S 2005 0:00 /usr/local/urchin/bin/urchinwebd -f /usr/local/urchin/var/urchinwebd.conf
nobody 2341 0.0 0.0 3480 672 ? S 2005 0:00 /usr/local/urchin/bin/urchinwebd -f /usr/local/urchin/var/urchinwebd.conf
nobody 2342 0.0 0.0 3480 784 ? S 2005 0:00 /usr/local/urchin/bin/urchinwebd -f /usr/local/urchin/var/urchinwebd.conf
nobody 2343 0.0 0.0 3480 724 ? S 2005 0:00 /usr/local/urchin/bin/urchinwebd -f /usr/local/urchin/var/urchinwebd.conf
nobody 2349 0.0 0.0 796 376 ? S 2005 0:14 /usr/local/urchin/bin/urchind
root 2352 0.0 0.0 1500 256 tty1 S 2005 0:00 /sbin/mingetty tty1
root 2353 0.0 0.0 1500 232 tty2 S 2005 0:00 /sbin/mingetty tty2
root 2354 0.0 0.0 1500 232 tty3 S 2005 0:00 /sbin/mingetty tty3
root 2355 0.0 0.0 1504 224 tty4 S 2005 0:00 /sbin/mingetty tty4
root 2356 0.0 0.0 1504 244 tty5 S 2005 0:00 /sbin/mingetty tty5
root 2357 0.0 0.0 1504 240 tty6 S 2005 0:00 /sbin/mingetty tty6
mailnull 3672 0.0 0.1 6616 1640 ? S 2005 1:51 /usr/sbin/exim -bd -q60m
mailnull 3677 0.0 0.1 6596 1568 ? S 2005 0:03 /usr/sbin/exim -bd -oX 256
mailnull 3681 0.0 0.1 6600 1548 ? S 2005 0:01 /usr/sbin/exim -tls-on-connect -bd -oX 465
root 3691 0.0 0.1 25208 1812 ? S 2005 0:02 /usr/bin/spamd -d --allowed-ips=127.0.0.1 --pidfile=/var/run/spamd.pid --max-children=5
root 3712 0.0 0.0 3460 984 ? S 2005 1:00 antirelayd
root 4063 0.0 0.0 8168 1012 ? S 2005 3:36 cppop - accepting on port 110
postgres 4353 0.0 0.0 10676 484 ? S 2005 0:00 /usr/bin/postmaster
postgres 4354 0.0 0.0 10236 396 ? S 2005 0:00 postgres: stats buffer process
postgres 4355 0.0 0.0 9244 496 ? S 2005 0:00 postgres: stats collector process
root 10034 0.0 0.0 6908 956 ? S 2005 0:00 svnserve -d -r /home/eyesoute/svn/
nobody 16347 0.0 0.1 4440 1440 ? SL 2005 0:32 proftpd: (accepting connections)
root 14570 0.0 0.0 2176 316 ? S 2005 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/censored.pid
mysql 14590 0.0 2.1 54328 21904 ? S 2005 6:41 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking
mysql 14591 0.0 2.1 54328 21904 ? R 2005 8:51 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking
mysql 14592 0.0 2.1 54328 21904 ? S 2005 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking
mysql 14593 0.0 2.1 54328 21904 ? S 2005 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking
mysql 14594 0.0 2.1 54328 21904 ? S 2005 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking
mysql 14595 0.0 2.1 54328 21904 ? S 2005 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking
mysql 14596 0.0 2.1 54328 21904 ? S 2005 0:15 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking
mysql 14597 0.0 2.1 54328 21904 ? S 2005 0:11 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking
mysql 14598 0.0 2.1 54328 21904 ? S 2005 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking
mysql 14599 0.0 2.1 54328 21904 ? S 2005 0:21 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking
mailnull 14931 0.0 0.2 8616 2744 ? S 2005 0:07 /usr/bin/perl /usr/local/cpanel/bin/eximstats
nobody 1806 0.0 0.0 3480 652 ? S 2005 0:00 /usr/local/urchin/bin/urchinwebd -f /usr/local/urchin/var/urchinwebd.conf
nobody 1807 0.0 0.0 3480 692 ? S 2005 0:00 /usr/local/urchin/bin/urchinwebd -f /usr/local/urchin/var/urchinwebd.conf
nobody 1808 0.0 0.0 3480 688 ? S 2005 0:00 /usr/local/urchin/bin/urchinwebd -f /usr/local/urchin/var/urchinwebd.conf
nobody 21668 0.0 0.0 3480 776 ? S 2005 0:00 /usr/local/urchin/bin/urchinwebd -f /usr/local/urchin/var/urchinwebd.conf
nobody 21670 0.0 0.0 3480 636 ? S 2005 0:00 /usr/local/urchin/bin/urchinwebd -f /usr/local/urchin/var/urchinwebd.conf
root 990 0.0 0.1 13044 2012 ? S 2005 0:00 whostmgrd - serving ---.---.---.---
root 1082 0.0 1.2 18292 12332 ? S 2005 0:00 /usr/local/cpanel/whostmgr/bin/whostmgr2 ./managepid
root 1083 0.0 0.0 0 0 ? Z 2005 0:00 [ps <defunct>]
root 1084 0.0 0.0 1692 264 ? S 2005 0:00 strace -p 2189
nobody 2189 0.0 0.1 4152 1056 ? S 2005 0:00 entropychat
root 28835 0.0 0.0 3672 1012 ? S 2005 1:52 /usr/sbin/sshd
root 29159 0.0 0.0 1520 220 ? S 2005 0:00 rhnsd --interval 240
root 29178 0.0 0.0 2148 620 ? S 2005 0:09 xinetd -stayalive -pidfile /var/run/xinetd.pid
named 10581 0.0 0.3 38368 3984 ? S 2005 5:54 /usr/sbin/named -u named
ircd 14469 0.0 0.1 3308 1896 ? S 2005 0:58 /home/ircd/Unreal3.2/src/ircd
ircd 14581 0.0 0.2 3988 2132 ? S 2005 0:01 ./services
root 23514 0.0 0.3 15160 3184 ? S 2005 0:07 /usr/local/apache/bin/httpd -DSSL
mysql 790 0.0 2.1 54328 21904 ? S 2005 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking
root 4811 0.0 0.2 4812 2492 ? S Jan06 0:00 /usr/bin/perl /scripts/upcp
root 5009 0.0 0.3 4820 3212 ? S Jan06 0:00 /usr/bin/perl /scripts/rpmup2
root 5015 0.0 0.1 3316 1324 ? S Jan06 0:00 /usr/bin/perl /usr/local/cpanel/bin/checkperlmodules
root 5025 42.2 4.0 43120 40900 ? R Jan06 5120:18 /usr/bin/perl /scripts/realperlinstaller Time::HiRes Net::AIM Net::SSLeay Archive::Tar GD::Graph Tree::MultiNode Tie::IxHash HTML::En
jabroski 11649 0.0 1.0 18316 10424 ? SN Jan06 0:00 cpanellogd - setting up logs for ------
jabroski 11653 0.0 0.0 1364 340 ? SN Jan06 0:00 /usr/local/cpanel/bin/logrunner 1.0 /home/-----/tmp/urchin/bin/urchin -H -p -----.com
jabroski 11654 0.0 1.4 30736 15056 ? TN Jan06 0:00 /home/jabroski/tmp/urchin/bin/urchin -H -p ------.com
root 1943 0.0 0.1 4784 1512 ? S Jan08 0:00 /usr/bin/perl /scripts/upcp
root 2145 0.0 0.1 4832 1500 ? S Jan08 0:00 /usr/bin/perl /scripts/rpmup2
root 2151 0.0 0.1 3320 1108 ? S Jan08 0:00 /usr/bin/perl /usr/local/cpanel/bin/checkperlmodules
root 2161 26.0 0.3 10324 3344 ? R Jan08 2405:07 /usr/bin/perl /scripts/realperlinstaller Time::HiRes Net::AIM Net::SSLeay Archive::Tar GD::Graph Tree::MultiNode Tie::IxHash HTML::En
nobody 29104 0.0 0.4 22288 4752 ? S Jan08 0:23 /usr/local/apache/bin/httpd -DSSL
nobody 7239 0.0 0.0 0 0 ? Z Jan08 0:00 [sh <defunct>]
nobody 7490 12.1 0.3 8232 3168 ? R Jan08 1000:38 /usr/sbin/httpd
root 32509 0.0 1.4 25780 14692 ? S Jan10 0:09 spamd child
root 420 0.0 1.4 25780 14980 ? S Jan10 0:10 spamd child
root 623 0.0 1.4 25788 15144 ? S Jan10 0:09 spamd child
root 846 0.0 1.4 25792 15100 ? S Jan10 0:10 spamd child
root 1313 0.0 1.4 25780 15048 ? S Jan10 0:09 spamd child
root 28979 0.0 0.2 4792 2968 ? S Jan11 0:00 /usr/bin/perl /scripts/upcp
root 29195 0.0 0.1 4824 1500 ? S Jan11 0:00 /usr/bin/perl /scripts/rpmup2
root 29203 0.0 0.1 3336 1108 ? S Jan11 0:00 /usr/bin/perl /usr/local/cpanel/bin/checkperlmodules
root 29214 19.2 3.1 43128 32336 ? R Jan11 947:30 /usr/bin/perl /scripts/realperlinstaller Time::HiRes Net::AIM Net::SSLeay Archive::Tar GD::Graph Tree::MultiNode Tie::IxHash HTML::Ent
root 7398 0.0 0.1 4784 1512 ? S Jan13 0:00 /usr/bin/perl /scripts/upcp
mailnull 7619 0.0 0.0 0 0 ? Z Jan13 0:00 [exim <defunct>]
root 9525 0.0 0.1 4836 1500 ? S Jan13 0:00 /usr/bin/perl /scripts/rpmup2
root 9711 0.0 0.1 3336 1108 ? S Jan13 0:00 /usr/bin/perl /usr/local/cpanel/bin/checkperlmodules
root 9727 11.7 2.8 43140 29448 ? R Jan13 238:06 /usr/bin/perl /scripts/realperlinstaller Time::HiRes Net::AIM Net::SSLeay Archive::Tar GD::Graph Tree::MultiNode Tie::IxHash HTML::Ent
nobody 17585 0.6 0.8 23380 8216 ? S Jan13 9:23 /usr/local/apache/bin/httpd -DSSL
nobody 7501 0.4 0.5 22984 5864 ? S Jan13 6:08 /usr/local/apache/bin/httpd -DSSL
nobody 13827 0.3 0.8 23072 9136 ? S Jan13 3:57 /usr/local/apache/bin/httpd -DSSL
nobody 15442 0.3 1.0 23184 10644 ? S Jan13 3:55 /usr/local/apache/bin/httpd -DSSL
nobody 18762 0.2 0.9 23268 10140 ? S Jan13 2:42 /usr/local/apache/bin/httpd -DSSL
nobody 19407 0.2 0.5 23164 6060 ? S Jan13 2:49 /usr/local/apache/bin/httpd -DSSL
nobody 19411 0.2 0.6 23448 6964 ? S Jan13 2:47 /usr/local/apache/bin/httpd -DSSL
nobody 25959 0.1 0.3 23232 4060 ? S Jan13 1:37 /usr/local/apache/bin/httpd -DSSL
nobody 29509 0.0 1.0 21580 11004 ? S Jan13 0:51 /usr/local/apache/bin/httpd -DSSL
nobody 1065 0.0 0.9 22200 9532 ? S Jan13 0:40 /usr/local/apache/bin/httpd -DSSL
nobody 5417 0.0 0.9 20656 9796 ? S Jan13 0:14 /usr/local/apache/bin/httpd -DSSL
nobody 6923 0.0 0.5 16884 5972 ? S Jan13 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 7024 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
nobody 7138 4.8 0.3 8236 3696 ? S Jan13 41:06 /usr/sbin/httpd
nobody 9878 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
nobody 9956 0.0 0.5 17932 6068 ? S Jan13 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 10000 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
nobody 11324 0.0 0.6 17932 6820 ? S Jan13 0:03 /usr/local/apache/bin/httpd -DSSL
nobody 12214 0.0 0.5 17932 5660 ? S Jan13 0:02 /usr/local/apache/bin/httpd -DSSL
nobody 12993 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
nobody 13124 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
nobody 13375 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
nobody 13394 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
nobody 15406 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
nobody 15435 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
nobody 16568 4.4 0.3 8232 3452 ? S Jan13 36:02 /usr/sbin/httpd
nobody 16799 4.4 0.2 8236 2656 ? R Jan13 35:58 /usr/sbin/httpd
nobody 16808 6.4 0.3 8252 3132 ? R Jan13 52:03 /usr/sbin/httpd
nobody 16983 4.1 0.3 8232 3512 ? S Jan13 33:11 /usr/sbin/httpd
nobody 18416 4.4 0.2 8244 2728 ? R Jan13 35:18 /usr/sbin/httpd
nobody 18431 4.1 0.3 8244 3288 ? R Jan13 32:39 /usr/sbin/httpd
nobody 18626 4.1 0.2 8228 3056 ? S Jan13 32:59 /usr/sbin/httpd
nobody 18747 4.0 0.2 8248 3052 ? S Jan13 31:52 /usr/sbin/httpd
root 6734 0.0 0.2 4800 2972 ? S 00:21 0:00 /usr/bin/perl /scripts/upcp
root 7480 0.0 0.3 4836 3212 ? S 00:29 0:00 /usr/bin/perl /scripts/rpmup2
root 7514 0.0 0.1 3328 1328 ? S 00:30 0:00 /usr/bin/perl /usr/local/cpanel/bin/checkperlmodules
root 7526 6.6 0.8 10332 8740 ? R 00:31 40:03 /usr/bin/perl /scripts/realperlinstaller Time::HiRes Net::AIM Net::SSLeay Archive::Tar GD::Graph Tree::MultiNode Tie::IxHash HTML::Ent
root 13616 0.0 0.0 1584 472 ? S 04:02 0:00 CROND
root 13617 0.0 0.0 2140 940 ? S 04:02 0:00 /bin/bash /usr/bin/run-parts /etc/cron.daily
root 14160 0.0 0.0 2124 888 ? SN 04:06 0:00 /bin/sh /etc/cron.daily/slocate.cron
root 14161 0.0 0.0 1952 608 ? S 04:06 0:00 awk -v progname=/etc/cron.daily/slocate.cron progname {????? print progname ":\n"????? progname="";???? }???? { print;
root 14163 0.0 0.0 1620 660 ? RN 04:06 0:00 /usr/bin/updatedb -f NFS,SMBFS,NCPFS,PROC,DEVPTS -e /tmp,/var/tmp,/usr/tmp,/afs,/net
nobody 16673 0.8 1.2 23032 13112 ? S 05:20 2:41 /usr/local/apache/bin/httpd -DSSL
nobody 18991 0.6 1.2 22852 12996 ? S 06:32 1:38 /usr/local/apache/bin/httpd -DSSL
nobody 20339 0.5 1.2 22956 13084 ? S 06:56 1:12 /usr/local/apache/bin/httpd -DSSL
nobody 20480 0.9 1.2 23200 13016 ? S 06:59 2:00 /usr/local/apache/bin/httpd -DSSL
nobody 21832 0.8 1.2 22524 12660 ? S 07:22 1:36 /usr/local/apache/bin/httpd -DSSL
nobody 25625 0.8 1.2 22788 12560 ? S 08:05 1:15 /usr/local/apache/bin/httpd -DSSL
nobody 27291 0.6 1.1 21268 11324 ? S 08:20 0:47 /usr/local/apache/bin/httpd -DSSL
nobody 30297 0.8 1.3 23644 13644 ? S 08:50 0:48 /usr/local/apache/bin/httpd -DSSL
nobody 343 0.9 1.2 23300 12740 ? S 09:13 0:43 /usr/local/apache/bin/httpd -DSSL
nobody 1238 0.4 1.2 22916 12872 ? S 09:21 0:17 /usr/local/apache/bin/httpd -DSSL
nobody 1855 0.5 1.1 21560 11336 ? S 09:26 0:19 /usr/local/apache/bin/httpd -DSSL
nobody 1863 1.2 1.1 22600 11944 ? S 09:27 0:45 /usr/local/apache/bin/httpd -DSSL
nobody 3951 0.7 0.6 17632 7100 ? S 09:45 0:18 /usr/local/apache/bin/httpd -DSSL
nobody 4785 0.0 0.0 0 0 ? Z 09:52 0:00 [sh <defunct>]
nobody 4805 0.7 0.3 7972 3336 ? S 09:53 0:15 /usr/sbin/httpd
nobody 4806 0.7 0.3 7972 3336 ? S 09:53 0:15 /usr/sbin/httpd
nobody 5031 0.0 0.0 0 0 ? Z 09:54 0:00 [sh <defunct>]
nobody 5052 0.7 0.3 7980 3336 ? S 09:55 0:15 /usr/sbin/httpd
nobody 5053 0.7 0.3 7980 3336 ? S 09:55 0:15 /usr/sbin/httpd
nobody 5811 0.0 0.0 0 0 ? Z 10:00 0:00 [sh <defunct>]
nobody 5824 0.8 0.3 7964 3336 ? S 10:00 0:13 /usr/sbin/httpd
nobody 5825 0.8 0.3 7964 3336 ? S 10:00 0:14 /usr/sbin/httpd
nobody 6009 0.0 0.0 0 0 ? Z 10:01 0:00 [sh <defunct>]
nobody 6047 0.8 0.3 7972 3336 ? S 10:02 0:13 /usr/sbin/httpd
nobody 6048 0.7 0.3 7972 3336 ? S 10:02 0:12 /usr/sbin/httpd
nobody 6140 0.0 0.0 0 0 ? Z 10:02 0:00 [sh <defunct>]
nobody 6154 0.8 0.3 7968 3336 ? S 10:02 0:12 /usr/sbin/httpd
nobody 6155 0.8 0.3 7968 3336 ? S 10:02 0:13 /usr/sbin/httpd
nobody 6361 0.7 0.9 20248 9760 ? S 10:04 0:10 /usr/local/apache/bin/httpd -DSSL
nobody 7460 0.0 0.0 0 0 ? Z 10:11 0:00 [sh <defunct>]
nobody 7482 0.8 0.3 7972 3336 ? S 10:11 0:08 /usr/sbin/httpd
nobody 7483 0.9 0.3 7972 3336 ? S 10:11 0:09 /usr/sbin/httpd
nobody 7485 1.2 0.9 20100 9632 ? S 10:11 0:13 /usr/local/apache/bin/httpd -DSSL
nobody 7496 0.9 0.9 20472 9980 ? S 10:11 0:10 /usr/local/apache/bin/httpd -DSSL
nobody 8992 1.0 0.9 20304 9788 ? S 10:22 0:04 /usr/local/apache/bin/httpd -DSSL
nobody 9001 0.2 0.6 17608 6996 ? S 10:22 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 9025 0.9 1.0 21340 10844 ? S 10:22 0:03 /usr/local/apache/bin/httpd -DSSL
nobody 9030 0.9 1.0 21408 10960 ? S 10:22 0:03 /usr/local/apache/bin/httpd -DSSL
nobody 9486 1.9 0.9 20344 9760 ? S 10:26 0:03 /usr/local/apache/bin/httpd -DSSL
root 9708 0.0 0.1 6876 1968 ? S 10:27 0:00 sshd: ----- [priv]
Sykoi 9735 0.0 0.2 6892 2184 ? S 10:27 0:00 sshd: -----@pts/1
root 9737 0.0 0.2 12676 2624 ? S 10:27 0:00 whostmgrd - serving ---.---.---.---
root 9738 0.0 0.2 12676 2624 ? S 10:27 0:00 whostmgrd - serving ---.---.---.---
root 9739 0.0 0.2 12676 2628 ? S 10:27 0:00 whostmgrd - serving ---.---.---.---
root 9740 0.0 0.2 12676 2624 ? S 10:27 0:00 whostmgrd - serving ---.---.---.---
root 9741 0.1 0.2 12676 2624 ? S 10:27 0:00 whostmgrd - serving ---.---.---.---
root 9743 0.0 0.2 12676 2624 ? S 10:27 0:00 whostmgrd - serving ---.---.---.---
Sykoi 9744 0.1 0.1 5340 1332 pts/1 S 10:28 0:00 -bash
root 9880 0.0 0.0 5308 968 pts/1 S 10:28 0:00 su
root 9882 0.2 0.1 5332 1336 pts/1 S 10:28 0:00 bash
mysql 9927 0.0 2.1 54328 21904 ? R 10:29 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking
root 9928 0.0 0.0 2876 920 pts/1 R 10:29 0:00 ps aux
mysql 9929 0.0 2.1 54328 21904 ? S 10:29 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking
mysql 9930 0.0 2.1 54328 21904 ? R 10:29 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking
mysql 9931 0.0 2.1 54328 21904 ? R 10:29 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/censored.pid --skip-locking

If you have 205 days of uptime your server is vulnerable to all sorts of kernel exploits and really needs a restart if you are doing shared hosting....


With loads that high you need to look at top and ps -auxf and kill off the processes that are taking most of the cpu. Without knowing what your averages normally look like it may even just be normal for your server. By looking at top you should be able to figure out which process (if it is even stats) that is causing the trouble.

It is possible that the realperlinstaller is taking most of the cpu.

You must be pyschic ;)
Before killing it off, what exactly is realperlinstaller, and is there anything in that list of processes that poses ANY kind of threat?

Also: I'm not running shared hosting, just hosting several of my sites and a few more for friends of mine.

While we're on the subject of cPanel being annoying, I've been getting this email for over a year... Every night at 12:23am:

IMPORTANT: Do not ignore this email.
The hostname (Servername) resolves to . It should resolve to --.--.---.----. Please be sure to correct /etc/hosts as well as the 'A' entry in zone file for the domain.

Some are all of these problems can be caused by
/etc/resolv.conf being setup incorrectly. Please check this file if you
believe everything else is correct.


You may be able to
automaticly correct this problem by using the ' Add an A entry for your
hostname ' under ' Dns Functions ' in your Web Host Manager


Any clues as to how to fix this one?

The realperlinstaller is a known issue with cpanel. I have a fix on my webpage but I cannot direclty link to it because of WHT rules. Basically you just need to ugprade cpan. The realperlinstaller is stuck in a loop and just consumes more and more resources. If you upgrade it manually you can answer a few simple questions and it will stop doing that.

For the other error make sure your servers hostname can resolve. You probably do not have an A record for it.

Thanks, care to explain the A record part? :)
(Sorry my sysadmin is on a hiatus)

I was trying to update when I posted that message using manual update (cPanel/WHM Updates was set to 'manual'), I then left for a few hours and came back... Opera was using 280mb of ram and almost completely locked up my computer... WHM was downloading 280mb+ OF TEXT! Is there a way to trigger the update without actually having to... Look at it?

/scripts/updatenow
updatenow should only be run from upcp at /scripts/updatenow line 10.

(Is edit post disabled?)

Editing only works for 10-15 minutes, just run /scripts/upcp --force via ssh

Still running it, how long does this take? - Also, have any clues as to my other question? (A record)
Oh yeah, thanks for the help ;)

You may be able to
automaticly correct this problem by using the ' Add an A entry for your
hostname ' under ' Dns Functions ' in your Web Host Manager
You didn't mention what happened when you tried it?

Also, you should either wait till your SysAdmin gets back or hire someone to check out your Server for you. I can see many problems but the biggest seems to be the Server is overloaded and/or not optimized properly.

While processing the log files for user --------, the cpu has been maxed out for more then a 6 hour period.
Those type eMails usually happen because of daily updates being done and, due to lack of enough resources, are taking too long a time.

root 4811 0.0 0.2 4812 2492 ? S Jan06 0:00 /usr/bin/perl /scripts/upcp
Hopefully you stopped that process before running a new update, otherwise, you now have two running.

nobody 12993 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
Why so many of these? Are they from you logging out of Shell improperly or is there another reason?

root 14163 0.0 0.0 1620 660 ? RN 04:06 0:00 /usr/bin/updatedb
This update running at the same time as your other daily updates plus at the same time as doing a WHM update, will pop your Server load to the high extremes.

Well I ran the update on the server, and the next day I am unable to access cPanel or WHM, my datacenter (Servermatrix, who has been nothing but help since I've been with them) is currently looking into it.

WHM Error:

Invalid Hostname. (This account is currently not available.). Hostnames may not contains spaces or tabs.

I've been doing the check list on http://forums.cpanel.net/showthread.php?t=26108 and have yet to see any problems with it, and the license IS active.


Also, you should either wait till your SysAdmin gets back or hire someone to check out your Server for you. I can see many problems but the biggest seems to be the Server is overloaded and/or not optimized properly.

I am honestly not comfortable with anyone other than a emotionless drone accessing the server (:p) - it contains many years of hard work on a closed source project, along with databases from numerous decent sized communities.



Hopefully you stopped that process before running a new update, otherwise, you now have two running.

The process listing was posted before I ran the update, so I had no idea another one was running to begin with :(



Why so many of these? Are they from you logging out of Shell improperly or is there another reason?

Its more than likely my ignorance in closing Putty when done - something I really shouldn't do, but it slips my mind until its already been done.


This update running at the same time as your other daily updates plus at the same time as doing a WHM update, will pop your Server load to the high extremes.

How do I optimize this, then?



Thanks, and if you can recommend any true, professional services that I can actually keep track of - to optimize my box, please do tell - like I said, I can not afford having anyone, anyone doing anything on the box without my knowing about it.

Well, the statscheck bug is back, and while the CPU usage isn't as bad as it was before, its still over 2 and I'm getting 10+ emails a day.
I went through the cPanel fix that eth0 recommended before, and it doesn't seem it worked.

nobody 4805 0.7 0.3 7972 3336 ? S 09:53 0:15 /usr/sbin/httpd
nobody 4806 0.7 0.3 7972 3336 ? S 09:53 0:15 /usr/sbin/httpd
nobody 5031 0.0 0.0 0 0 ? Z 09:54 0:00 [sh <defunct>]
nobody 5052 0.7 0.3 7980 3336 ? S 09:55 0:15 /usr/sbin/httpd
nobody 5053 0.7 0.3 7980 3336 ? S 09:55 0:15 /usr/sbin/httpd
nobody 5811 0.0 0.0 0 0 ? Z 10:00 0:00 [sh <defunct>]
nobody 5824 0.8 0.3 7964 3336 ? S 10:00 0:13 /usr/sbin/httpd
nobody 5825 0.8 0.3 7964 3336 ? S 10:00 0:14 /usr/sbin/httpd
nobody 6009 0.0 0.0 0 0 ? Z 10:01 0:00 [sh <defunct>]
nobody 6047 0.8 0.3 7972 3336 ? S 10:02 0:13 /usr/sbin/httpd
nobody 6048 0.7 0.3 7972 3336 ? S 10:02 0:12 /usr/sbin/httpd
nobody 6140 0.0 0.0 0 0 ? Z 10:02 0:00 [sh <defunct>]
nobody 6154 0.8 0.3 7968 3336 ? S 10:02 0:12 /usr/sbin/httpd
nobody 6155 0.8 0.3 7968 3336 ? S 10:02 0:13 /usr/sbin/httpd

nobody 12993 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
nobody 13124 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
nobody 13375 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
nobody 13394 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
nobody 15406 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]
nobody 15435 0.0 0.0 0 0 ? Z Jan13 0:00 [sh <defunct>]

By that I would say you have some script kiddies playing on your machine and also it appears you have multiple instances of upcp and rpmup running that is going to drive your load thruogh the roof.

You should really hire a system admin to look at your box and secure it.

I had this problem on an old box, and one day, it just went away. I still haven't figured out what it was... are you still having problems? What are you running?

download the latest version of perlinstaller with wget and install it manually trough ssh. And your peoblems will be over hopefully.

download the latest version of perlinstaller with wget and install it manually trough ssh. And your peoblems will be over hopefully.

What is the full wget path? I'm having the same stat issue.