hi all... for the last 4 - 5 days i noticed something weird on one of the freebsd boxes here. one httpd process -or sometimes 2 or 3 - take up all the cpu. and it looks like this: # top CPU states: 33.1% user, 0.0% nice, 66.5% system, 0.4% interrupt, 0.0% idle Mem: 476M Active, 295M Inact, 162M Wired, 61M Cache, 112M Buf, 7556K Free Swap: 2032M Total, 4K Used, 2032M Free PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND 85655 nobody 64 0 20632K 14880K RUN 126:03 97.07% 97.07% httpd 85654 nobody 2 0 19532K 13616K sbwait 0:16 0.24% 0.24% httpd 6081 root 28 0 2016K 1196K RUN 0:00 0.22% 0.10% top # ps -auwx|grep httpd ..................................... nobody 85648 0.0 1.3 19564 13848 ?? S 1:35PM 0:14.90 /etc/httpd/bin/httpd -DSSL nobody 85647 0.0 1.2 18528 12720 ?? S 1:35PM 0:19.13 /etc/httpd/bin/httpd -DSSL nobody 85646 0.0 1.3 19136 13320 ?? S 1:35PM 0:17.12 /etc/httpd/bin/httpd -DSSL root 85645 0.0 0.6 12752 6472 ?? Ss 1:35PM 0:08.30 /etc/httpd/bin/httpd -DSSL nobody 85642 0.0 0.2 3272 2096 ?? S 1:35PM 0:17.78 /usr/local/apache/bin/httpd -DSSL nobody 1376 0.0 0.0 0 0 ?? Z 6:46AM 0:00.00 (httpd) this last process is unexisting. to make it disappear i have to stop the server and then killall -9 httpd it... after i do that it's ok until i get the same. the time varies... here for example from bsdsar from today: #bsdsar -s .................. 09:40: USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND www 239 1.5 7.5 86200 78616 p0- S 28May05 121:08.51 WebCatalog -m root 3368 0.0 0.0 480 316 ?? R 9:40AM 0:00.00 ps -auxwwr root 3367 0.0 0.0 628 252 ?? S 9:40AM 0:00.00 sh -c ps -auxwwr [PIPE] head -6 nobody 3363 0.0 0.6 12752 6496 ?? S 9:40AM 0:00.00 /etc/httpd/bin/httpd -DSSL nobody 3362 0.0 0.6 12752 6496 ?? S 9:40AM 0:00.00 /etc/httpd/bin/httpd -DSSL 10:00: USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND nobody 85655 95.2 1.4 20632 14880 ?? R 1:35PM 11:27.22 /etc/httpd/bin/httpd -DSSL www 239 1.5 7.5 86200 78616 p0- S 28May05 121:16.66 WebCatalog -m root 3739 0.0 0.0 628 252 ?? S 10:00AM 0:00.00 sh -c ps -auxwwr [PIPE] head -6 root 3725 0.0 0.1 1992 1464 ?? S 10:00AM 0:00.01 /usr/bin/perl /usr/local/bin/bsdsar_gather root 3718 0.0 0.0 628 252 ?? Ss 10:00AM 0:00.00 /bin/sh -c /usr/local/bin/bsdsar_gather ........... this si the first time it appeared today. it says it started at 1:35pm but that's not possible since it appears for the first at 10:00 am... i was trying to figure out if it's a connection being opened from the same client machine all the time but i can not tell from netstat which connection corresponds to this process... i can't find anything unusual in the logs... Server version: Apache/1.3.33 (Unix) FreeBSD 4.10-RELEASE can somebody please help explain what and why is this happening... thanks a lot... --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx