Results 1 to 7 of 7
Thread: zombie processes increased
-
09-21-2005, 04:17 AM #1Junior Guru Wannabe
- Join Date
- Nov 2004
- Posts
- 57
zombie processes increased
Last 2 days, number of zombie processes at same time increased.
And all of them are "httpd <defunct>"
In one second there are 5-15 zombie processes.
Is it a problem? Can you explain the condition?
-
09-22-2005, 07:17 AM #2Registered User
- Join Date
- Sep 2005
- Posts
- 28
What OS?
What web server version/release?
More information would be helpful!
-JDB
-
09-22-2005, 07:25 AM #3Junior Guru
- Join Date
- Apr 2004
- Location
- India
- Posts
- 211
If httpd is causing load on the server, Then you may need to check the apache status and find out which of the sites is causing problem.
RootSupport.Com - Solutions That Fit On The First Try
::::: AIM: linuxengineers ::::: MSN: msn@rootsupport.com :::::
*Seven days FREE trial available on selected plans
24x7x365 days - Windows & Linux Servers
-
09-22-2005, 09:33 AM #4Junior Guru Wannabe
- Join Date
- Sep 2005
- Posts
- 59
Some php/perl worms disguise by naming themselves httpd - try running `ps aux` to see wether this zombies are really apache.
CoolWebServe - a great choice for offshore support and administration services
-
09-22-2005, 02:39 PM #5Junior Guru Wannabe
- Join Date
- Nov 2004
- Posts
- 57
centos 4, apache 1.3.33
-
09-23-2005, 02:31 AM #6Web Hosting Master
- Join Date
- Jan 2004
- Location
- /home/dislexik
- Posts
- 823
IIRC a zombie process is a process that has been killed but its 'essence' still exists? If that is the case then you have nothing to worry about, the parent process has yet to have removed it from the process table.
On the other hand (Though I have no experience in this as of yet) coolwebserve could be correct in saying it is a process disguising its self. If that is the case try:
# ps auxZ | grep 'Z'
And have a look to see if the process is using any resources. If the command has <defunct> next to it I would think you're safe."You don’t learn to hack, you hack to learn"
-
09-23-2005, 07:06 AM #7Newbie
- Join Date
- Sep 2005
- Location
- USA - POLAND
- Posts
- 22
Check your cron. Maybe you have some irc expolits which need to restart apache to apply some changes.