Hello,
I’m having a problem with CPU usage. While website performance is fine, i’m having trouble with e-mails because of the High CPU usage caused by xorg(even though the server is set for init3), and clamscan seems to be running high. the server is only dual core so that 6 and 7 CPU usage is pretty degrading as far as e-mail. i actually just received a few e-mails from the server that were sent on the 9th of May, but just delivered today.
Any help would be greatly appreciated!
Thanks!
edit
i’ve rebooted the server several times in init3, which is the current running mode. and everytime xorg is running anyway. the parent process is gdm, which i disable and set to NOT start on boot. i’ve killed both the gdm process and the xorg, yet xorg is still showing as 80+% cpu utilization.
Eric
June 1, 2015, 8:39pm
2
Howdy,
Hmm, what distro/version is it that you’re using there? And how are you going about setting it to boot into run level 3?
-Eric
centOS 5.11
i set it to to run level 3 via the webmin bootup and shutdown menu.
Eric
June 2, 2015, 6:05am
4
Howdy,
Okay, thanks for the info!
What output do you receive if you run this command:
ps auxwf
It may be a lot, you can either paste it in, or add it as an attachment.
-Eric
glamor
June 2, 2015, 11:52am
5
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 10372 600 ? Ss May15 0:12 init [3]
root 2 0.0 0.0 0 0 ? S< May15 0:00 [migration/0]
root 3 0.0 0.0 0 0 ? SN May15 0:00 [ksoftirqd/0]
root 4 0.0 0.0 0 0 ? S< May15 0:00 [watchdog/0]
root 5 0.0 0.0 0 0 ? S< May15 0:00 [migration/1]
root 6 0.0 0.0 0 0 ? SN May15 0:00 [ksoftirqd/1]
root 7 0.0 0.0 0 0 ? S< May15 0:00 [watchdog/1]
root 8 0.0 0.0 0 0 ? S< May15 0:28 [events/0]
root 9 0.0 0.0 0 0 ? S< May15 0:21 [events/1]
root 10 0.0 0.0 0 0 ? S< May15 0:00 [khelper]
root 66 0.0 0.0 0 0 ? S< May15 0:00 [kthread]
root 71 0.0 0.0 0 0 ? S< May15 0:01 \_ [kblockd/0]
root 72 0.0 0.0 0 0 ? S< May15 0:09 \_ [kblockd/1]
root 73 0.0 0.0 0 0 ? S< May15 0:00 \_ [kacpid]
root 155 0.0 0.0 0 0 ? S< May15 0:00 \_ [cqueue/0]
root 156 0.0 0.0 0 0 ? S< May15 0:00 \_ [cqueue/1]
root 159 0.0 0.0 0 0 ? S< May15 0:00 \_ [khubd]
root 161 0.0 0.0 0 0 ? S< May15 0:00 \_ [kseriod]
root 237 0.0 0.0 0 0 ? S May15 0:00 \_ [khungtaskd]
root 239 0.0 0.0 0 0 ? S May15 0:00 \_ [pdflush]
root 240 0.0 0.0 0 0 ? S< May15 3:39 \_ [kswapd0]
root 241 0.0 0.0 0 0 ? S< May15 0:00 \_ [aio/0]
root 242 0.0 0.0 0 0 ? S< May15 0:00 \_ [aio/1]
root 390 0.0 0.0 0 0 ? S< May15 0:00 \_ [kpsmoused]
root 422 0.0 0.0 0 0 ? S< May15 0:00 \_ [ata/0]
root 423 0.0 0.0 0 0 ? S< May15 0:00 \_ [ata/1]
root 424 0.0 0.0 0 0 ? S< May15 0:00 \_ [ata_aux]
root 428 0.0 0.0 0 0 ? S< May15 0:00 \_ [scsi_eh_0]
root 429 0.0 0.0 0 0 ? S< May15 1:24 \_ [scsi_eh_1]
root 430 0.0 0.0 0 0 ? S< May15 1:18 \_ [scsi_eh_2]
root 431 0.0 0.0 0 0 ? S< May15 0:00 \_ [scsi_eh_3]
root 432 0.0 0.0 0 0 ? S< May15 0:00 \_ [scsi_eh_4]
root 433 0.0 0.0 0 0 ? S< May15 0:00 \_ [scsi_eh_5]
root 437 0.0 0.0 0 0 ? S< May15 0:00 \_ [kstriped]
root 450 0.0 0.0 0 0 ? S< May15 0:00 \_ [ksnapd]
root 465 0.0 0.0 0 0 ? S< May15 7:19 \_ [kjournald]
root 491 0.0 0.0 0 0 ? S< May15 0:03 \_ [kauditd]
root 1640 0.0 0.0 0 0 ? S< May15 0:00 \_ [hd-audio0]
root 1845 0.0 0.0 0 0 ? S< May15 0:00 \_ [kmpathd/0]
root 1846 0.0 0.0 0 0 ? S< May15 0:00 \_ [kmpathd/1]
root 1847 0.0 0.0 0 0 ? S< May15 0:00 \_ [kmpath_handlerd]
root 1868 0.0 0.0 0 0 ? S< May15 0:00 \_ [kjournald]
root 2037 0.0 0.0 0 0 ? S< May15 0:51 \_ [kondemand/0]
root 2038 0.0 0.0 0 0 ? S< May15 1:13 \_ [kondemand/1]
root 2056 0.0 0.0 0 0 ? S< May15 0:00 \_ [iscsi_eh]
root 2087 0.0 0.0 0 0 ? S< May15 0:00 \_ [cnic_wq]
root 2091 0.0 0.0 0 0 ? S< May15 0:00 \_ [bnx2i_thread/0]
root 2092 0.0 0.0 0 0 ? S< May15 0:00 \_ [bnx2i_thread/1]
root 2106 0.0 0.0 0 0 ? S< May15 0:00 \_ [ib_addr]
root 2116 0.0 0.0 0 0 ? S< May15 0:00 \_ [ib_mcast]
root 2117 0.0 0.0 0 0 ? S< May15 0:00 \_ [ib_inform]
root 2118 0.0 0.0 0 0 ? S< May15 0:00 \_ [local_sa]
root 2122 0.0 0.0 0 0 ? S< May15 0:00 \_ [iw_cm_wq]
root 2126 0.0 0.0 0 0 ? S< May15 0:00 \_ [ib_cm/0]
root 2127 0.0 0.0 0 0 ? S< May15 0:00 \_ [ib_cm/1]
root 2131 0.0 0.0 0 0 ? S< May15 0:00 \_ [rdma_cm]
root 2514 0.0 0.0 0 0 ? S< May15 0:00 \_ [rpciod/0]
root 2515 0.0 0.0 0 0 ? S< May15 0:00 \_ [rpciod/1]
root 4892 0.0 0.0 0 0 ? S May15 1:09 \_ [pdflush]
root 524 0.0 0.0 12764 400 ? S<s May15 0:00 /sbin/udevd -d
root 2149 0.0 0.3 28704 22552 ? S<Lsl May15 0:00 iscsiuio
root 2154 0.0 0.0 4596 376 ? Ss May15 0:08 iscsid
root 2155 0.0 0.0 5100 3048 ? S<Ls May15 0:05 iscsid
root 2427 0.0 0.0 92912 760 ? S<sl May15 1:31 auditd
root 2429 0.0 0.0 147364 968 ? S/tmp/clamwrapper.2607
501 2609 97.0 1.4 121404 87372 ? R 07:56 0:01 | \_ /usr/bin/clamscan -
postfix 2234 0.0 0.0 60560 2868 ? S 07:54 0:00 \_ smtp -t unix -u
postfix 2268 0.0 0.0 60416 2592 ? S 07:54 0:00 \_ bounce -z -n defer -t unix -u
postfix 2435 0.0 0.0 60560 2860 ? S 07:55 0:00 \_ smtp -t unix -u
postfix 2447 0.0 0.0 60472 2964 ? S 07:55 0:00 \_ local -t unix
501 2590 0.0 0.0 8556 772 ? Ss 07:56 0:00 \_ /usr/bin/procmail-wrapper -o -a webnc-cherokee.com -d nc-cherokee
501 2596 0.0 0.0 22784 1664 ? S 07:56 0:00 \_ /usr/bin/perl /etc/webmin/virtual-server/clam-wrapper.pl /usr/bin/clamscan
501 2597 0.0 0.0 8728 964 ? S 07:56 0:00 \_ sh -c \/usr\/bin\/clamscan - >/tmp/clamwrapper.2596
501 2598 87.8 2.9 213364 173824 ? R 07:56 0:04 \_ /usr/bin/clamscan -
nobody 3011 0.0 0.0 106952 664 ? Ss May15 0:05 proftpd: (accepting connections)
root 3026 0.0 0.9 431200 58564 ? Ss May15 2:50 /usr/sbin/httpd
apache 11281 0.0 0.7 278096 44108 ? S May31 0:01 \_ /usr/sbin/httpd
510 20033 0.0 1.0 273540 62136 ? S May31 0:30 | \_ /usr/bin/php-cgi
510 20045 0.0 0.9 269044 57648 ? S May31 0:36 | \_ /usr/bin/php-cgi
505 20754 0.0 0.9 268700 56856 ? S May31 0:01 | \_ /usr/bin/php-cgi
505 20758 0.0 0.9 268796 57432 ? S May31 0:02 | \_ /usr/bin/php-cgi
510 5737 0.0 1.0 274116 62840 ? S May31 0:25 | \_ /usr/bin/php-cgi
516 25561 0.0 0.9 266764 54916 ? S 03:38 0:12 | \_ /usr/bin/php-cgi
516 25579 0.0 0.9 269068 56884 ? S 03:38 0:09 | \_ /usr/bin/php-cgi
501 25116 1.8 1.2 284448 72700 ? S 06:57 1:05 | \_ /usr/bin/php-cgi
501 25118 1.2 1.0 275552 64560 ? S 06:57 0:45 | \_ /usr/bin/php-cgi
501 30004 1.6 1.2 284764 73400 ? S 07:25 0:31 | \_ /usr/bin/php-cgi
501 30008 1.5 1.1 280520 69116 ? S 07:25 0:28 | \_ /usr/bin/php-cgi
501 30009 1.8 1.1 276980 67628 ? S 07:25 0:34 | \_ /usr/bin/php-cgi
apache 14351 0.0 0.8 431748 49508 ? S 05:54 0:00 \_ /usr/sbin/httpd
apache 24885 0.0 0.8 431764 49500 ? S 06:56 0:00 \_ /usr/sbin/httpd
apache 25087 0.0 0.8 431760 49480 ? S 06:57 0:00 \_ /usr/sbin/httpd
apache 25092 0.0 0.8 431760 49476 ? S 06:57 0:00 \_ /usr/sbin/httpd
apache 25141 0.0 0.8 431748 49528 ? S 06:57 0:00 \_ /usr/sbin/httpd
apache 27701 0.0 0.8 431752 49488 ? S 07:12 0:00 \_ /usr/sbin/httpd
apache 27706 0.0 0.8 431768 49332 ? S 07:12 0:00 \_ /usr/sbin/httpd
apache 29993 0.0 0.8 431748 49464 ? S 07:25 0:00 \_ /usr/sbin/httpd
apache 30013 0.0 0.8 431760 49280 ? S 07:25 0:00 \_ /usr/sbin/httpd
apache 30014 0.0 0.8 431760 49480 ? S 07:25 0:00 \_ /usr/sbin/httpd
apache 30032 0.0 0.8 431764 49468 ? S 07:25 0:00 \_ /usr/sbin/httpd
apache 30538 0.0 0.8 431632 49328 ? S 07:28 0:00 \_ /usr/sbin/httpd
apache 31066 0.0 0.8 431736 49448 ? S 07:32 0:00 \_ /usr/sbin/httpd
apache 32526 0.0 0.8 431604 48572 ? S 07:40 0:00 \_ /usr/sbin/httpd
apache 1378 0.0 0.8 431748 49392 ? S 07:48 0:00 \_ /usr/sbin/httpd
apache 1380 0.0 0.8 431468 48524 ? S 07:48 0:00 \_ /usr/sbin/httpd
apache 1393 0.0 0.8 431600 49288 ? S 07:48 0:00 \_ /usr/sbin/httpd
apache 1539 0.0 0.8 431612 49168 ? S 07:49 0:00 \_ /usr/sbin/httpd
apache 1545 0.0 0.8 431748 49416 ? S 07:49 0:00 \_ /usr/sbin/httpd
apache 1546 0.0 0.8 431608 48560 ? S 07:49 0:00 \_ /usr/sbin/httpd
root 3036 0.0 0.0 74872 720 ? Ss May15 0:01 crond
xfs 3065 0.0 0.0 20980 872 ? Ss May15 0:00 xfs -droppriv -daemon
root 3082 0.0 0.0 18756 376 ? Ss May15 0:00 /usr/sbin/atd
root 3091 0.0 0.0 46780 400 ? Ss May15 0:00 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 3092 0.0 0.0 46780 148 ? S May15 0:00 \_ /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 3093 0.0 0.0 46780 136 ? S May15 0:00 \_ /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 3094 0.0 0.0 46780 136 ? S May15 0:00 \_ /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 3095 0.0 0.0 46780 136 ? S May15 0:00 \_ /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
avahi 3122 0.0 0.0 23304 1136 ? Ss May15 0:00 avahi-daemon: running [centweb01.local]
avahi 3123 0.0 0.0 23180 132 ? Ss May15 0:00 \_ avahi-daemon: chroot helper
68 3133 0.0 0.0 31776 1520 ? Ss May15 0:54 hald
root 3134 0.0 0.0 21724 704 ? S May15 0:00 \_ hald-runner
68 3141 0.0 0.0 12348 708 ? S May15 0:00 \_ hald-addon-acpi: listening on acpid socket /var/run/acpid.socket
68 3148 0.0 0.0 12348 704 ? S May15 0:00 \_ hald-addon-keyboard: listening on /dev/input/event0
root 3159 0.0 0.0 10256 616 ? S May15 2:13 \_ hald-addon-storage: polling /dev/sr1
root 3161 0.0 0.0 10256 616 ? S May15 2:03 \_ hald-addon-storage: polling /dev/sr0
mailman 3197 0.0 0.0 159372 2000 ? Ss May15 0:00 /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
mailman 3258 0.0 0.0 161468 4436 ? S May15 0:39 \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
mailman 3259 0.0 0.0 161448 4480 ? S May15 1:26 \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
mailman 3260 0.0 0.0 161472 4448 ? S May15 0:57 \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
mailman 3261 0.0 0.0 161464 4452 ? S May15 0:39 \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
mailman 3262 0.0 0.0 161456 4460 ? S May15 0:39 \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
mailman 3263 0.0 0.0 161468 4464 ? S May15 0:41 \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
mailman 3264 0.0 0.0 161464 4460 ? S May15 0:39 \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
mailman 3265 0.0 0.0 161468 4440 ? S May15 0:00 \_ /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
root 3267 0.0 0.0 18716 392 ? S May15 0:00 /usr/sbin/smartd -q never
root 3281 0.0 0.0 259748 4244 ? SN May15 0:01 /usr/bin/python -tt /usr/sbin/yum-updatesd
root 3284 0.0 0.0 12944 992 ? SN May15 0:10 /usr/libexec/gam_server
root 3307 0.0 0.0 86808 2080 ? Ss May15 0:07 /usr/bin/perl /usr/libexec/usermin/miniserv.pl /etc/usermin/miniserv.conf
root 3456 0.0 0.3 136748 21088 ? Ss May15 0:16 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
root 2610 0.0 0.4 142332 29572 ? R 07:57 0:00 \_ /usr/libexec/webmin/shell/index.cgi
root 2611 0.0 0.0 10820 1052 ? R 07:57 0:00 \_ sh -c (ps auxwf) 2>&1
root 2612 0.0 0.0 10612 948 ? R 07:57 0:00 \_ ps auxwf
root 3461 0.0 0.0 3816 504 tty1 Ss+ May15 0:00 /sbin/mingetty tty1
root 3462 0.0 0.0 3816 508 tty2 Ss+ May15 0:00 /sbin/mingetty tty2
root 3465 0.0 0.0 3816 504 tty3 Ss+ May15 0:00 /sbin/mingetty tty3
root 3468 0.0 0.0 3816 504 tty4 Ss+ May15 0:00 /sbin/mingetty tty4
root 3471 0.0 0.0 3816 504 tty5 Ss+ May15 0:00 /sbin/mingetty tty5
root 3474 0.0 0.0 3816 504 tty6 Ss+ May15 0:00 /sbin/mingetty tty6
root 3508 0.0 0.0 167780 748 ? S May15 0:00 /usr/sbin/gdm-binary -nodaemon
root 3511 81.6 0.0 0 0 ? RNs May15 20652:44 \_ [Xorg]
Eric
June 2, 2015, 3:14pm
6
Howdy,
Yup, it’s definitely booting into run level 3.
What output does this command produce:
ls /etc/rc3.d/
That should show what all is starting up in that particular run level.
-Eric
> ls /etc/rc3.d/
K01dnsmasq
K02NetworkManager
K02avahi-dnsconfd
K02oddjobd
K05conman
K05wdaemon
K10dc_server
K10psacct
K10tcsd
K12dc_client
K15gpm
K15svnserve
K20nfs
K24irda
K25squid
K30spamassassin
K35smb
K35vncserver
K35winbind
K36postgresql
K50netconsole
K50snmpd
K50snmptrapd
K50tux
K50vsftpd
K69rpcsvcgssd
K73ypbind
K74ipmi
K74nscd
K74ntpd
K80kdump
K85mdmpd
K87multipathd
K87named
K88wpa_supplicant
K89dund
K89netplugd
K89pand
K89rdisc
K99readahead_later
S00microcode_ctl
S04readahead_early
S05kudzu
S06cpuspeed
S07iscsid
S08ip6tables
S08iptables
S08mcstrans
S10network
S11auditd
S12restorecond
S12syslog
S13irqbalance
S13iscsi
S13portmap
S14nfslock
S15mdmonitor
S18rpcidmapd
S19rpcgssd
S22messagebus
S23setroubleshoot
S25bluetooth
S25netfs
S25pcscd
S26acpid
S26hidd
S26lm_sensors
S26lvm2-monitor
S28autofs
S55sshd
S56cups
S56rawdevices
S56xinetd
S64mysqld
S65dovecot
S80postfix
S80proftpd
S85httpd
S90crond
S90xfs
S95anacron
S95atd
S95saslauthd
S97yum-updatesd
S98avahi-daemon
S98haldaemon
S98mailman
S99firstboot
S99local
S99smartd
S99usermin
S99webmin
i do apologize, as i am not as savvy as others, but i was wondering if there was anything obvious from the last post?
Eric
July 1, 2015, 3:07pm
9
Howdy,
I don’t actually see what’s launching X in your output above. And you’re right, X shouldn’t be trying to launch in init 3.
So something is odd
One thing you may want to try is to run this command – what output does this produce:
grep gdm /etc/rc3.d/*
Secondly, can you paste in the contents of your /etc/rc.local file?
-Eric
