view others process

taheri6 · #1 (**permalink**) 09-16-2008

Hello,

I hope this is an easy question.

I have a few users who login through SSH and some times their bash session is using 100% cpu even though its been "idle" according to who for several days.

I would like to know what command the user ran in their bash session to peg the cpu out but am unsure how to do that.

Any assistance would be appreciated.

Ikon · #2 (**permalink**) 09-16-2008

To find users processes (This will also show cpu usage for the process):

man ps

use top to view processes you can then sort by the different columns, this will also show who started the process.

jim mcnamara · #3 (**permalink**) 09-16-2008

Try putting this in /etc/profile

Code:

        TMOUT=14400
        readonly TMOUT
        export TMOUT

If the terminal is idle for 14400 seconds the session ends.

Have you tired lsof to see if there is a script being run?

taheri6 · #4 (**permalink**) 09-16-2008

Hi,

Thank you both for your replies.

I did do a

Code:

 
ps auxf | cat

and it just showed me that Bash was running and using 100% cpu. It gave me pids and showed the owner but that didnt show me what they did.

I then took that user and ran an lsof but I didnt see any scripts running. Our cpu monitoring didnt start alerting until today, when the session was idle (according to w command) for 10 days

avronius · #5 (**permalink**) 09-16-2008

Try this

Code:

lsof -p <pid>

will provide you with lots of information about what this PID is using.

frank_rizzo · #6 (**permalink**) 09-16-2008

I would suggest attaching a debugger or generate a core file(kill -ABRT) and then analyze it.

or try use gdb/truss/strace/other stack utilities on the process to see where it is spinning.

taheri6 · #7 (**permalink**) 09-17-2008

Thanks everyone for your ideas and advice, it is appreciated.

Im not terribly familiar with strace, I do see that I can do

Code:

strace -p <pid>

to trace through a running process, but I dont see a way to do that with a core dump

The only thing I see regarding a file at all is

Code:

strace -o <file>

which sends the output of strace to a file but nothing that would read in a dump - did I miss an option that is staring me in the face?

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
how do I view a jpeg?	dsstamps	UNIX for Dummies Questions & Answers	0	05-14-2008 02:25 PM
How to view my IP	blowFish@ubuntu	UNIX for Dummies Questions & Answers	14	05-09-2008 10:35 AM
how to view my own process in a multiuser envrionment	vishsid3	UNIX for Dummies Questions & Answers	4	11-15-2006 12:11 PM
view log files	sak900354	UNIX for Dummies Questions & Answers	5	06-15-2006 08:26 AM
DBM View	schafferm	UNIX for Dummies Questions & Answers	1	08-06-2002 05:18 AM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode	Rate This Thread:


	Powered by