How do you attribute the 50% sys usage to that one process? That is for all processes is it not? BTW - when ANY process runs it spends time in kernel code (sys) when invoking a syscall, .e.g. open(). That means vmstat and sar would normally show a summed % sys for all processes system wide.
Doesn't mean that the daemon is or is not using most of that %.
My mistake. I was trying to say the same thing you just did. The usage is around 50%.
Using tools such as lsof or truss, if you have them installed.
Examine the calls, perhaps some file is missing and program runs continuously in loops or similar issues (could explain the large %sys usage)
Also issue a find to perhaps to locate from which script is that spawned as rbatte suggested.
Something in the line of :
If you get a match, examine that script for possibility to disable that and what that is actually.
Perhaps i can offer more assistance in couple of days when i get to hpux box.
Unfortunately I don't have lsof nor truss installed on this box.
I issued the find command but it came back with no results.
---------- Post updated at 04:04 PM ---------- Previous update was at 03:57 PM ----------
I decided to run find on the entire / fs. This came up, not sure what to make of it. This came from a file in the /tmp directory. /tmp/toolset/spin.0509
I can only guess that shptdaemon belongs to some clustering software.
And it is certainly misbehaving.
Please contact HPE support! Or Oracle if you run the Oracle RAC software.