Results 1 to 4 of 4
  1. #1

    * Odd symptom! users in top are Numbers !!

    Hello everyone

    I'm unresting noticing lately in 'top' that there're users represented as numbers using 'php' without any increase in server's load or connection flooding ..
    PHP Code:
     6079 32056     18   0     0    0    0 Z    5  0.0   0:00.14 php <defunct>
     
    6081 root      19   0 10136 3836 2792 S    1  0.2   0:00.04 exim
     8011 root      17   0  3400 1064  760 S    1  0.1   1
    :06.31 top
     31076 nobody    15   0  7900 3404 1188 S    0  0.2   0
    :00.03 httpd
     1017 root      16   0  4416 1336 1100 S    0  0.1   0
    :00.02 rc
    .......... 
    I get 'rootkithunter' reporting similar number-users too
    PHP Code:
    /usr/bin/find//home/virtfs/mohamy/proc/12873/task: No such file or directory
    /usr/bin/find//home/virtfs/mohamy/proc/16870/task: No such file or directory
    /usr/bin/find//proc/16873/task: No such file or directory
    /usr/bin/find//proc/16875/task: No such file or directory 
    I was wondering if any one may know the cause!

    Box is cPanel-Centos
    2 coe 3.6 & 2GB ram

    Regards

    Tim
    Last edited by mostaman; 01-22-2007 at 06:15 AM.

  2. #2
    Join Date
    Jun 2003
    Location
    Ukiah, California
    Posts
    394
    How does /etc/passwd look? Typically a utility such as top will display the uid when it can't map that uid to a username in /etc/passwd
    Jacob Turner -- Ringnebula Systems
    Managed IT solutions for small business

  3. #3
    Join Date
    Feb 2002
    Location
    New York, NY
    Posts
    4,612
    The output you posted from the 'find' command is unrelated, since those are just process IDs. The user IDs that are showing up in top as numbers are probably just users from VPSes on the server. Try "grep 32056 /home/virtfs/*/etc/passwd"
    Scott Burns, President
    BQ Internet Corporation
    Remote Rsync and FTP backup solutions
    *** http://www.bqbackup.com/ ***

  4. #4
    ringnebula:

    /etc/passwd looks Just perfect. Thanks

    bqinternet:

    I failed to 'grep' those numbered users even when they exsist. Thanks

    By the way, they do not exsist all the time, only sometimes, but when they do, they will remain until I reboot the server.

    Thanking everyone

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •