Apache not killing processes

[TheMatrix]

Hello-

This is getting to be a problem. Over the past few days, I've had to restart apache 3 times because of excessive CPU usage. top reveals about 10 apache processes. It's not going to be good if I'm not near a computer next time to restart apache.

19:20:03 up 4 days, 18:15, 1 user, load average: 17.87, 17.24, 11.86
172 processes: 157 sleeping, 12 running, 3 zombie, 0 stopped
CPU states: cpu user nice system irq softirq iowait idle
total 91.9% 0.0% 8.0% 0.0% 0.0% 0.0% 0.0%
Mem: 1011356k av, 1000956k used, 10400k free, 0k shrd, 132860k buff
739900k actv, 136928k in_d, 20104k in_c
Swap: 1052248k av, 76748k used, 975500k free 487452k cached

PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
30755 apache 25 0 16956 14M 6632 R 12.3 1.5 2:06 0 httpd
29616 apache 25 0 17216 15M 6632 R 9.8 1.5 1:56 0 httpd
25444 apache 25 0 17684 15M 6632 R 6.1 1.5 2:18 0 httpd
25711 apache 25 0 17636 15M 6632 R 6.1 1.5 4:14 0 httpd
27169 apache 25 0 17156 15M 6620 R 6.1 1.5 2:23 0 httpd
27860 apache 25 0 17336 15M 6632 R 6.1 1.5 2:20 0 httpd
27861 apache 25 0 16864 14M 6620 R 6.1 1.4 1:57 0 httpd
27863 apache 25 0 17596 15M 6620 R 6.1 1.5 1:53 0 httpd
27864 apache 25 0 17436 15M 6632 R 6.1 1.5 2:00 0 httpd
9726 mysql 16 0 56276 46M 3628 S 1.8 4.6 0:54 0 mysqld
980 mysql 15 0 56276 46M 3628 S 0.6 4.6 0:47 0 mysqld
8792 mysql 15 0 56276 46M 3628 S 0.6 4.6 0:46 0 mysqld
4077 mysql 15 0 56276 46M 3628 S 0.6 4.6 0:37 0 mysqld
2591 mysql 15 0 56276 46M 3628 S 0.6 4.6 0:19 0 mysqld
2801 mysql 15 0 56276 46M 3628 S 0.6 4.6 0:05 0 mysqld

I checked the logs, and there's no indication of any errors. How can I tell what might be causing this?

Thanks.

TM

 

[etan]

what operating system are you running

and what version of plesk

 

[TheMatrix]

CentOS 3.4 and Plesk 7.5.2

 

[kilgore]

Same problem on FC2 and any solution...

Regards,

Kilgore

 

[nmathon]

Same problem on FC2 too... It seems to be a worm. I'm in that list :
http://www.merit.edu/mail.archives/nanog/msg14628.html

How to remove this worm ?

 

[alexgd]

when uses TOP command press "u" and write "apache" to filter this process after press "c" to display the commnad line ans "H" to show threads

Usually apache runs with httpd and the command line is /usr/sbin/httpd

if appear some different to /usr/sbin/httpd, porbably is invoke for some process not authorize

you can kill the process using kill -9 PID

Hello-

This is getting to be a problem. Over the past few days, I've had to restart apache 3 times because of excessive CPU usage. top reveals about 10 apache processes. It's not going to be good if I'm not near a computer next time to restart apache.

19:20:03 up 4 days, 18:15, 1 user, load average: 17.87, 17.24, 11.86
172 processes: 157 sleeping, 12 running, 3 zombie, 0 stopped
CPU states: cpu user nice system irq softirq iowait idle
total 91.9% 0.0% 8.0% 0.0% 0.0% 0.0% 0.0%
Mem: 1011356k av, 1000956k used, 10400k free, 0k shrd, 132860k buff
739900k actv, 136928k in_d, 20104k in_c
Swap: 1052248k av, 76748k used, 975500k free 487452k cached

PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
30755 apache 25 0 16956 14M 6632 R 12.3 1.5 2:06 0 httpd
29616 apache 25 0 17216 15M 6632 R 9.8 1.5 1:56 0 httpd
25444 apache 25 0 17684 15M 6632 R 6.1 1.5 2:18 0 httpd
25711 apache 25 0 17636 15M 6632 R 6.1 1.5 4:14 0 httpd
27169 apache 25 0 17156 15M 6620 R 6.1 1.5 2:23 0 httpd
27860 apache 25 0 17336 15M 6632 R 6.1 1.5 2:20 0 httpd
27861 apache 25 0 16864 14M 6620 R 6.1 1.4 1:57 0 httpd
27863 apache 25 0 17596 15M 6620 R 6.1 1.5 1:53 0 httpd
27864 apache 25 0 17436 15M 6632 R 6.1 1.5 2:00 0 httpd
9726 mysql 16 0 56276 46M 3628 S 1.8 4.6 0:54 0 mysqld
980 mysql 15 0 56276 46M 3628 S 0.6 4.6 0:47 0 mysqld
8792 mysql 15 0 56276 46M 3628 S 0.6 4.6 0:46 0 mysqld
4077 mysql 15 0 56276 46M 3628 S 0.6 4.6 0:37 0 mysqld
2591 mysql 15 0 56276 46M 3628 S 0.6 4.6 0:19 0 mysqld
2801 mysql 15 0 56276 46M 3628 S 0.6 4.6 0:05 0 mysqld

I checked the logs, and there's no indication of any errors. How can I tell what might be causing this?

Thanks.

TM [/QUOTE]

 

[wagnerch]

Hmm, check this thread, it may help.

If the load is unusual, such as the server is always busy even when it normally should be idle, then I would be highly suspicous.