Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : How to know user of a PID.. ?

[Gauch0r]

Hello!

If I do a

top

I have this...

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
24135 root 34 19 106m 9.9m 5220 D 38.3 1.0 0:09.77 httpd
24193 mailnull 34 19 32052 4808 2732 S 2.3 0.5 0:00.07 exim
52 root 15 0 0 0 0 S 1.0 0.0 22:02.84 kswapd0
32427 root 34 19 69928 6924 1660 S 0.3 0.7 0:06.27 spamd
20668 root 17 0 6416 1088 664 S 0.3 0.1 1:56.95 top
24205 root 16 0 6284 1028 756 R 0.3 0.1 0:00.01 top
1 root 16 0 4756 388 356 S 0.0 0.0 0:50.72 init

Si I want to get more information about the PID 24135 and 24193 like the user that is executing that PID .. How should I do? Which command?

Thank you!

[Patrick]

The information is right there:

24135 root
24193 mailnull

... unless I misread your question?

[Gauch0r]

uhm... okey.. but.. is really the 'root' user or any other?

I have more than 100 domains with cpanel (each one with his own username).

I thinked that a user (and not root ) is causing the overload...

So, the overload is caused by root user, and not by a web hosting user?

[Steven]

Since its httpd it would be a webhosting user causing it, but the parent process of apache runs under root

[Patrick]

Originally Posted by Gauch0r

So, the overload is caused by root user, and not by a web hosting user?

No, if the overload is related to Apache, it would be one of the child processes which run as nobody. If you install suPHP, you can then see what user is causing the server to overload... as PHP files (for example) will be executed as the user and not nobody.

[zacharooni]

Take a look at the output of:

lsof -p PID

[david510]

Gauch0,

I assume you are on a cpanel server. To see which domain is taking more apache process (to see to which domain there is more connection, as apache process will not be under the domain user), check the Apache Status page from the WHM --> Service status section.