When I run the TOP command in terminal most of the time I encounter that a specific Vhost PID - web132 %cpu - 100% command - php-cgi MY Server Configuration is Ubuntu - Apache 2.2, Php 5.3, and the Vhost I am takling about is using a Joomla website with Fabrik application I have checked the error log and acess log at the time the CPU is running at 100%, but nothing in there. Need some help where I should I start to debug/troubleshoot this problem.
Try: lsof -u web132 to get a list of all open files of that user. It might be that the site has been hacked, so the load is from a php scrpt of the hacker and not from joomla.
I get this output from the above command: PHP: php-cgi 18099 web132 cwd DIR 8,1 4096 23465670 /var/www/clients/client75/web132/webphp-cgi 18099 web132 rtd DIR 8,1 4096 2 /php-cgi 18099 web132 txt REG 8,1 8108400 4458528 /usr/bin/php5-cgiphp-cgi 18099 web132 mem REG 8,1 31104 17039405 /lib/x86_64-linux-gnu/libnss_dns-2.15.sophp-cgi 18099 web132 mem REG 8,1 10368 17039414 /lib/libnss_mdns4_minimal.so.2php-cgi 18099 web132 mem REG 8,1 138600 8000592 /usr/lib/ImageMagick-6.6.9/modules-Q16/coders/png.sophp-cgi 18099 web132 mem REG 8,1 88384 17042994 /lib/x86_64-linux-gnu/libgcc_s.so.1php-cgi 18099 web132 mem REG 8,1 52120 17039402 /lib/x86_64-linux-gnu/libnss_files-2.15.sophp-cgi 18099 web132 DEL REG 0,4 1826826 /dev/zerophp-cgi 18099 web132 mem REG 8,1 48480 4603180 /usr/lib/php5/20090626/sqlite3.sophp-cgi 18099 web132 mem REG 8,1 26960 4603179 /usr/lib/php5/20090626/pdo_sqlite.sophp-cgi 18099 web132 mem REG 8,1 31056 4603175 /usr/lib/php5/20090626/pdo_mysql.sophp-cgi 18099 web132 mem REG 8,1 104808 4603182 /usr/lib/php5/20090626/pdo.sophp-cgi 18099 web132 mem REG 8,1 139960 4588906 /usr/lib/php5/20090626/mysqli.sophp-cgi 18099 web132 mem REG 8,1 3412232 4467145 /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18.0.0php-cgi 18099 web132 mem REG 8,1 55360 4603176 /usr/lib/php5/20090626/mysql.sophp-cgi 18099 web132 mem REG 8,1 99296 4588924 /usr/lib/php5/20090626/memcache.sophp-cgi 18099 web132 mem REG 8,1 187752 4463949 /usr/lib/libmcrypt.so.4.4.8php-cgi 18099 web132 mem REG 8,1 47832 4591782 /usr/lib/php5/20090626/mcrypt.sophp-cgi 18099 web132 mem REG 8,1 55744 17043035 /lib/x86_64-linux-gnu/libpam.so.0.83.0php-cgi 18099 web132 mem REG 8,1 1116264 4463795 /usr/lib/libc-client.so.2007e.0php-cgi 18099 web132 mem REG 8,1 109800 4591781 /usr/lib/php5/20090626/imap.sophp-cgi 18099 web132 mem REG 8,1 1000472 17039426 /lib/x86_64-linux-gnu/libglib-2.0.so.0.3200.4php-cgi 18099 web132 mem REG 8,1 39184 4463920 /usr/lib/x86_64-linux-gnu/libltdl.so.7.3.0php-cgi 18099 web132 mem REG 8,1 69504 4458359 /usr/lib/x86_64-linux-gnu/libXext.so.6.4.0php-cgi 18099 web132 mem REG 8,1 80064 4463700 /usr/lib/liblqr-1.so.0.3.1php-cgi 18099 web132 mem REG 8,1 215520 4463909 /usr/lib/x86_64-linux-gnu/liblcms.so.1.0.19php-cgi 18099 web132 mem REG 8,1 55888 4463799 /usr/lib/x86_64-linux-gnu/libgomp.so.1.0.0php-cgi 18099 web132 mem REG 8,1 2499664 4463702 /usr/lib/libMagickCore.so.4.0.1php-cgi 18099 web132 mem REG 8,1 1134104 4463704 /usr/lib/libMagickWand.so.4.0.1php-cgi 18099 web132 mem REG 8,1 420480 4591780 /usr/lib/php5/20090626/imagick.sophp-cgi 18099 web132 mem REG 8,1 22504 4463548 /usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0php-cgi 18099 web132 mem REG 8,1 10328 4463537 /usr/lib/x86_64-linux-gnu/libXau.so.6.0.0php-cgi 18099 web132 mem REG 8,1 121232 4458354 /usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0php-cgi 18099 web132 mem REG 8,1 170024 17042991 /lib/x86_64-linux-gnu/libexpat.so.1.5.2php-cgi 18099 web132 mem REG 8,1 1265056 4467950 /usr/lib/x86_64-linux-gnu/libX11.so.6.3.0php-cgi 18099 web132 mem REG 8,1 162776 17043050 /lib/x86_64-linux-gnu/libpng12.so.0.46.0php-cgi 18099 web132 mem REG 8,1 637160 4463740 /usr/lib/x86_64-linux-gnu/libfreetype.so.6.8.0php-cgi 18099 web132 mem REG 8,1 220896 4463732 /usr/lib/x86_64-linux-gnu/libfontconfig.so.1.4.4php-cgi 18099 web132 mem REG 8,1 260872 4460591 /usr/lib/x86_64-linux-gnu/libjpeg.so.8.0.2php-cgi 18099 web132 mem REG 8,1 68288 4463566 /usr/lib/x86_64-linux-gnu/libXpm.so.4.11.0php-cgi 18099 web132 mem REG 8,1 294416 4459585 /usr/lib/libt1.so.5.1.2php-cgi 18099 web132 mem REG 8,1 270400 4463751 /usr/lib/x86_64-linux-gnu/libgd.so.2.0.0php-cgi 18099 web132 mem REG 8,1 116792 4603181 /usr/lib/php5/20090626/gd.sophp-cgi 18099 web132 mem REG 8,1 664504 4464070 /usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6php-cgi 18099 web132 mem REG 8,1 300704 4458647 /usr/lib/x86_64-linux-gnu/libhx509.so.5.0.0php-cgi 18099 web132 mem REG 8,1 61264 4458643 /usr/lib/x86_64-linux-gnu/libheimbase.so.1.0.0php-cgi 18099 web132 mem REG 8,1 166096 4458645 /usr/lib/x86_64-linux-gnu/libwind.so.0.0.0php-cgi 18099 web132 mem REG 8,1 14360 17043004 /lib/x86_64-linux-gnu/libkeyutils.so.1.4php-cgi 18099 web132 mem REG 8,1 14352 17043000 /lib/x86_64-linux-gnu/libgpg-error.so.0.8.0php-cgi 18099 web132 mem REG 8,1 72752 4463969 /usr/lib/x86_64-linux-gnu/libp11-kit.so.0.0.0php-cgi 18099 web132 mem REG 8,1 67864 4464086 /usr/lib/x86_64-linux-gnu/libtasn1.so.3.1.12php-cgi 18099 web132 mem REG 8,1 86024 4457834 /usr/lib/x86_64-linux-gnu/libroken.so.18.1.0php-cgi 18099 web132 mem REG 8,1 209184 4458641 /usr/lib/x86_64-linux-gnu/libhcrypto.so.4.1.0php-cgi 18099 web132 mem REG 8,1 655152 4458639 /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0php-cgi 18099 web132 mem REG 8,1 547488 4458659 /usr/lib/x86_64-linux-gnu/libkrb5.so.26.0.0php-cgi 18099 web132 mem REG 8,1 27624 4458661 /usr/lib/x86_64-linux-gnu/libheimntlm.so.0.1.0php-cgi 18099 web132 mem REG 8,1 31200 4463905 /usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1php-cgi 18099 web132 mem REG 8,1 14696 17042980 /lib/x86_64-linux-gnu/libcom_err.so.2.1php-cgi 18099 web132 mem REG 8,1 158168 4463899 /usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1php-cgi 18099 web132 mem REG 8,1 844648 4463903 /usr/lib/x86_64-linux-gnu/libkrb5.so.3.3php-cgi 18099 web132 mem REG 8,1 516056 17042974 /lib/x86_64-linux-gnu/libgcrypt.so.11.7.0php-cgi 18099 web132 mem REG 8,1 766856 4460966 /usr/lib/x86_64-linux-gnu/libgnutls.so.26.21.8php-cgi 18099 web132 mem REG 8,1 252312 4458663 /usr/lib/x86_64-linux-gnu/libgssapi.so.3.0.0php-cgi 18099 web132 mem REG 8,1 109288 4464047 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25php-cgi 18099 web132 mem REG 8,1 105656 4464040 /usr/lib/x86_64-linux-gnu/librtmp.so.0php-cgi 18099 web132 mem REG 8,1 252720 4463810 /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2php-cgi 18099 web132 mem REG 8,1 314936 4466898 /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2.8.1php-cgi 18099 web132 mem REG 8,1 55528 4466899 /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2.8.1php-cgi 18099 web132 mem REG 8,1 207312 4463880 /usr/lib/x86_64-linux-gnu/libidn.so.11.6.6php-cgi 18099 web132 mem REG 8,1 381512 4458452 /usr/lib/x86_64-linux-gnu/libcurl.so.4.2.0php-cgi 18099 web132 mem REG 8,1 71968 4603178 /usr/lib/php5/20090626/curl.sophp-cgi 18099 web132 mem REG 8,1 31752 17039432 /lib/x86_64-linux-gnu/librt-2.15.sophp-cgi 18099 web132 mem REG 8,1 143616 4592744 /usr/lib/php5/20090626/apc.sophp-cgi 18099 web132 mem REG 8,1 135366 17042904 /lib/x86_64-linux-gnu/libpthread-2.15.sophp-cgi 18099 web132 mem REG 8,1 1815224 17039398 /lib/x86_64-linux-gnu/libc-2.15.sophp-cgi 18099 web132 mem REG 8,1 1421464 4458361 /usr/lib/x86_64-linux-gnu/libxml2.so.2.7.8php-cgi 18099 web132 mem REG 8,1 1930616 17049080 /lib/x86_64-linux-gnu/libcrypto.so.1.0.0php-cgi 18099 web132 mem REG 8,1 382896 17049081 /lib/x86_64-linux-gnu/libssl.so.1.0.0php-cgi 18099 web132 mem REG 8,1 14768 17043089 /lib/x86_64-linux-gnu/libdl-2.15.sophp-cgi 18099 web132 mem REG 8,1 1030512 17043085 /lib/x86_64-linux-gnu/libm-2.15.sophp-cgi 18099 web132 mem REG 8,1 247896 17043046 /lib/x86_64-linux-gnu/libpcre.so.3.12.1php-cgi 18099 web132 mem REG 8,1 66784 17042972 /lib/x86_64-linux-gnu/libbz2.so.1.0.4php-cgi 18099 web132 mem REG 8,1 1518928 4463680 /usr/lib/x86_64-linux-gnu/libdb-5.1.sophp-cgi 18099 web132 mem REG 8,1 105288 17039403 /lib/x86_64-linux-gnu/libresolv-2.15.sophp-cgi 18099 web132 mem REG 8,1 92720 17043084 /lib/x86_64-linux-gnu/libz.so.1.2.3.4php-cgi 18099 web132 mem REG 8,1 43288 17039399 /lib/x86_64-linux-gnu/libcrypt-2.15.sophp-cgi 18099 web132 mem REG 8,1 149280 17043086 /lib/x86_64-linux-gnu/ld-2.15.sophp-cgi 18099 web132 0u unix 0xffff8800a9582a40 0t0 1825977 /var/lib/apache2/fcgid/sock/11222.725php-cgi 18099 web132 1w REG 8,1 20197 3151617 /var/log/apache2/error.logphp-cgi 18099 web132 2w REG 8,1 20197 3151617 /var/log/apache2/error.logphp-cgi 18099 web132 3r REG 0,3 0 1439730 /proc/11170/auxvphp-cgi 18099 web132 4u unix 0xffff880078470680 0t0 1439736 socketphp-cgi 18099 web132 5r REG 0,3 0 1826825 /proc/18099/auxvphp-cgi 18099 web132 6u unix 0xffff8800024d49c0 0t0 1835216 /var/lib/apache2/fcgid/sock/11222.725php-cgi 18099 web132 7u IPv4 1835991 0t0 TCP localhost.localdomain:37612->localhost.localdomain:mysql (ESTABLISHED)php-cgi 18099 web132 8u IPv4 1832849 0t0 TCP localhost.localdomain:37613->localhost.localdomain:mysql (ESTABLISHED)php-cgi 18099 web132 9u unix 0xffff88014b9c70c0 0t0 1832850 socketphp-cgi 18099 web132 85r FIFO 0,8 0t0 1445190 pipephp-cgi 18099 web132 86w FIFO 0,8 0t0 1445188 pipephp-cgi 18099 web132 89w FIFO 0,8 0t0 1445191 pipephp-cgi 18101 web132 cwd DIR 8,1 4096 3945152 /var/www/php-fcgi-scripts/web132php-cgi 18101 web132 rtd DIR 8,1 4096 2 /php-cgi 18101 web132 txt REG 8,1 8108400 4458528 /usr/bin/php5-cgiphp-cgi 18101 web132 mem REG 8,1 31104 17039405 /lib/x86_64-linux-gnu/libnss_dns-2.15.sophp-cgi 18101 web132 mem REG 8,1 10368 17039414 /lib/libnss_mdns4_minimal.so.2php-cgi 18101 web132 mem REG 8,1 88384 17042994 /lib/x86_64-linux-gnu/libgcc_s.so.1php-cgi 18101 web132 mem REG 8,1 52120 17039402 /lib/x86_64-linux-gnu/libnss_files-2.15.sophp-cgi 18101 web132 DEL REG 0,4 1826863 /dev/zerophp-cgi 18101 web132 mem REG 8,1 48480 4603180 /usr/lib/php5/20090626/sqlite3.sophp-cgi 18101 web132 mem REG 8,1 26960 4603179 /usr/lib/php5/20090626/pdo_sqlite.sophp-cgi 18101 web132 mem REG 8,1 31056 4603175 /usr/lib/php5/20090626/pdo_mysql.sophp-cgi 18101 web132 mem REG 8,1 104808 4603182 /usr/lib/php5/20090626/pdo.sophp-cgi 18101 web132 mem REG 8,1 139960 4588906 /usr/lib/php5/20090626/mysqli.sophp-cgi 18101 web132 mem REG 8,1 3412232 4467145 /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18.0.0php-cgi 18101 web132 mem REG 8,1 55360 4603176 /usr/lib/php5/20090626/mysql.sophp-cgi 18101 web132 mem REG 8,1 99296 4588924 /usr/lib/php5/20090626/memcache.sophp-cgi 18101 web132 mem REG 8,1 187752 4463949 /usr/lib/libmcrypt.so.4.4.8php-cgi 18101 web132 mem REG 8,1 47832 4591782 /usr/lib/php5/20090626/mcrypt.sophp-cgi 18101 web132 mem REG 8,1 55744 17043035 /lib/x86_64-linux-gnu/libpam.so.0.83.0php-cgi 18101 web132 mem REG 8,1 1116264 4463795 /usr/lib/libc-client.so.2007e.0php-cgi 18101 web132 mem REG 8,1 109800 4591781 /usr/lib/php5/20090626/imap.sophp-cgi 18101 web132 mem REG 8,1 1000472 17039426 /lib/x86_64-linux-gnu/libglib-2.0.so.0.3200.4php-cgi 18101 web132 mem REG 8,1 39184 4463920 /usr/lib/x86_64-linux-gnu/libltdl.so.7.3.0php-cgi 18101 web132 mem REG 8,1 69504 4458359 /usr/lib/x86_64-linux-gnu/libXext.so.6.4.0php-cgi 18101 web132 mem REG 8,1 80064 4463700 /usr/lib/liblqr-1.so.0.3.1php-cgi 18101 web132 mem REG 8,1 215520 4463909 /usr/lib/x86_64-linux-gnu/liblcms.so.1.0.19php-cgi 18101 web132 mem REG 8,1 55888 4463799 /usr/lib/x86_64-linux-gnu/libgomp.so.1.0.0php-cgi 18101 web132 mem REG 8,1 2499664 4463702 /usr/lib/libMagickCore.so.4.0.1php-cgi 18101 web132 mem REG 8,1 1134104 4463704 /usr/lib/libMagickWand.so.4.0.1php-cgi 18101 web132 mem REG 8,1 420480 4591780 /usr/lib/php5/20090626/imagick.sophp-cgi 18101 web132 mem REG 8,1 22504 4463548 /usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0php-cgi 18101 web132 mem REG 8,1 10328 4463537 /usr/lib/x86_64-linux-gnu/libXau.so.6.0.0php-cgi 18101 web132 mem REG 8,1 121232 4458354 /usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0php-cgi 18101 web132 mem REG 8,1 170024 17042991 /lib/x86_64-linux-gnu/libexpat.so.1.5.2php-cgi 18101 web132 mem REG 8,1 1265056 4467950 /usr/lib/x86_64-linux-gnu/libX11.so.6.3.0php-cgi 18101 web132 mem REG 8,1 162776 17043050 /lib/x86_64-linux-gnu/libpng12.so.0.46.0php-cgi 18101 web132 mem REG 8,1 637160 4463740 /usr/lib/x86_64-linux-gnu/libfreetype.so.6.8.0php-cgi 18101 web132 mem REG 8,1 220896 4463732 /usr/lib/x86_64-linux-gnu/libfontconfig.so.1.4.4php-cgi 18101 web132 mem REG 8,1 260872 4460591 /usr/lib/x86_64-linux-gnu/libjpeg.so.8.0.2php-cgi 18101 web132 mem REG 8,1 68288 4463566 /usr/lib/x86_64-linux-gnu/libXpm.so.4.11.0php-cgi 18101 web132 mem REG 8,1 294416 4459585 /usr/lib/libt1.so.5.1.2php-cgi 18101 web132 mem REG 8,1 270400 4463751 /usr/lib/x86_64-linux-gnu/libgd.so.2.0.0php-cgi 18101 web132 mem REG 8,1 116792 4603181 /usr/lib/php5/20090626/gd.sophp-cgi 18101 web132 mem REG 8,1 664504 4464070 /usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6php-cgi 18101 web132 mem REG 8,1 300704 4458647 /usr/lib/x86_64-linux-gnu/libhx509.so.5.0.0php-cgi 18101 web132 mem REG 8,1 61264 4458643 /usr/lib/x86_64-linux-gnu/libheimbase.so.1.0.0php-cgi 18101 web132 mem REG 8,1 166096 4458645 /usr/lib/x86_64-linux-gnu/libwind.so.0.0.0php-cgi 18101 web132 mem REG 8,1 14360 17043004 /lib/x86_64-linux-gnu/libkeyutils.so.1.4php-cgi 18101 web132 mem REG 8,1 14352 17043000 /lib/x86_64-linux-gnu/libgpg-error.so.0.8.0php-cgi 18101 web132 mem REG 8,1 72752 4463969 /usr/lib/x86_64-linux-gnu/libp11-kit.so.0.0.0php-cgi 18101 web132 mem REG 8,1 67864 4464086 /usr/lib/x86_64-linux-gnu/libtasn1.so.3.1.12php-cgi 18101 web132 mem REG 8,1 86024 4457834 /usr/lib/x86_64-linux-gnu/libroken.so.18.1.0php-cgi 18101 web132 mem REG 8,1 209184 4458641 /usr/lib/x86_64-linux-gnu/libhcrypto.so.4.1.0php-cgi 18101 web132 mem REG 8,1 655152 4458639 /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0php-cgi 18101 web132 mem REG 8,1 547488 4458659 /usr/lib/x86_64-linux-gnu/libkrb5.so.26.0.0php-cgi 18101 web132 mem REG 8,1 27624 4458661 /usr/lib/x86_64-linux-gnu/libheimntlm.so.0.1.0php-cgi 18101 web132 mem REG 8,1 31200 4463905 /usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1php-cgi 18101 web132 mem REG 8,1 14696 17042980 /lib/x86_64-linux-gnu/libcom_err.so.2.1php-cgi 18101 web132 mem REG 8,1 158168 4463899 /usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1php-cgi 18101 web132 mem REG 8,1 844648 4463903 /usr/lib/x86_64-linux-gnu/libkrb5.so.3.3php-cgi 18101 web132 mem REG 8,1 516056 17042974 /lib/x86_64-linux-gnu/libgcrypt.so.11.7.0php-cgi 18101 web132 mem REG 8,1 766856 4460966 /usr/lib/x86_64-linux-gnu/libgnutls.so.26.21.8php-cgi 18101 web132 mem REG 8,1 252312 4458663 /usr/lib/x86_64-linux-gnu/libgssapi.so.3.0.0php-cgi 18101 web132 mem REG 8,1 109288 4464047 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25php-cgi 18101 web132 mem REG 8,1 105656 4464040 /usr/lib/x86_64-linux-gnu/librtmp.so.0php-cgi 18101 web132 mem REG 8,1 252720 4463810 /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2php-cgi 18101 web132 mem REG 8,1 314936 4466898 /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2.8.1php-cgi 18101 web132 mem REG 8,1 55528 4466899 /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2.8.1php-cgi 18101 web132 mem REG 8,1 207312 4463880 /usr/lib/x86_64-linux-gnu/libidn.so.11.6.6php-cgi 18101 web132 mem REG 8,1 381512 4458452 /usr/lib/x86_64-linux-gnu/libcurl.so.4.2.0php-cgi 18101 web132 mem REG 8,1 71968 4603178 /usr/lib/php5/20090626/curl.sophp-cgi 18101 web132 mem REG 8,1 31752 17039432 /lib/x86_64-linux-gnu/librt-2.15.sophp-cgi 18101 web132 mem REG 8,1 143616 4592744 /usr/lib/php5/20090626/apc.sophp-cgi 18101 web132 mem REG 8,1 135366 17042904 /lib/x86_64-linux-gnu/libpthread-2.15.sophp-cgi 18101 web132 mem REG 8,1 1815224 17039398 /lib/x86_64-linux-gnu/libc-2.15.sophp-cgi 18101 web132 mem REG 8,1 1421464 4458361 /usr/lib/x86_64-linux-gnu/libxml2.so.2.7.8php-cgi 18101 web132 mem REG 8,1 1930616 17049080 /lib/x86_64-linux-gnu/libcrypto.so.1.0.0php-cgi 18101 web132 mem REG 8,1 382896 17049081 /lib/x86_64-linux-gnu/libssl.so.1.0.0php-cgi 18101 web132 mem REG 8,1 14768 17043089 /lib/x86_64-linux-gnu/libdl-2.15.sophp-cgi 18101 web132 mem REG 8,1 1030512 17043085 /lib/x86_64-linux-gnu/libm-2.15.sophp-cgi 18101 web132 mem REG 8,1 247896 17043046 /lib/x86_64-linux-gnu/libpcre.so.3.12.1php-cgi 18101 web132 mem REG 8,1 66784 17042972 /lib/x86_64-linux-gnu/libbz2.so.1.0.4php-cgi 18101 web132 mem REG 8,1 1518928 4463680 /usr/lib/x86_64-linux-gnu/libdb-5.1.sophp-cgi 18101 web132 mem REG 8,1 105288 17039403 /lib/x86_64-linux-gnu/libresolv-2.15.sophp-cgi 18101 web132 mem REG 8,1 92720 17043084 /lib/x86_64-linux-gnu/libz.so.1.2.3.4php-cgi 18101 web132 mem REG 8,1 43288 17039399 /lib/x86_64-linux-gnu/libcrypt-2.15.sophp-cgi 18101 web132 mem REG 8,1 149280 17043086 /lib/x86_64-linux-gnu/ld-2.15.sophp-cgi 18101 web132 0u unix 0xffff880190851d40 0t0 1826856 /var/lib/apache2/fcgid/sock/11222.726php-cgi 18101 web132 1w REG 8,1 20197 3151617 /var/log/apache2/error.logphp-cgi 18101 web132 2w REG 8,1 20197 3151617 /var/log/apache2/error.logphp-cgi 18101 web132 3r REG 0,3 0 1439730 /proc/11170/auxvphp-cgi 18101 web132 4u unix 0xffff880078470680 0t0 1439736 socketphp-cgi 18101 web132 5r REG 0,3 0 1826862 /proc/18101/auxvphp-cgi 18101 web132 85r FIFO 0,8 0t0 1445190 pipephp-cgi 18101 web132 86w FIFO 0,8 0t0 1445188 pipephp-cgi 18101 web132 89w FIFO 0,8 0t0 1445191 pipephp-cgi 18287 web132 cwd DIR 8,1 4096 3945152 /var/www/php-fcgi-scripts/web132php-cgi 18287 web132 rtd DIR 8,1 4096 2 /php-cgi 18287 web132 txt REG 8,1 8108400 4458528 /usr/bin/php5-cgiphp-cgi 18287 web132 mem REG 8,1 88384 17042994 /lib/x86_64-linux-gnu/libgcc_s.so.1php-cgi 18287 web132 mem REG 8,1 52120 17039402 /lib/x86_64-linux-gnu/libnss_files-2.15.sophp-cgi 18287 web132 DEL REG 0,4 1830369 /dev/zerophp-cgi 18287 web132 mem REG 8,1 48480 4603180 /usr/lib/php5/20090626/sqlite3.sophp-cgi 18287 web132 mem REG 8,1 26960 4603179 /usr/lib/php5/20090626/pdo_sqlite.sophp-cgi 18287 web132 mem REG 8,1 31056 4603175 /usr/lib/php5/20090626/pdo_mysql.sophp-cgi 18287 web132 mem REG 8,1 104808 4603182 /usr/lib/php5/20090626/pdo.sophp-cgi 18287 web132 mem REG 8,1 139960 4588906 /usr/lib/php5/20090626/mysqli.sophp-cgi 18287 web132 mem REG 8,1 3412232 4467145 /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18.0.0php-cgi 18287 web132 mem REG 8,1 55360 4603176 /usr/lib/php5/20090626/mysql.sophp-cgi 18287 web132 mem REG 8,1 99296 4588924 /usr/lib/php5/20090626/memcache.sophp-cgi 18287 web132 mem REG 8,1 187752 4463949 /usr/lib/libmcrypt.so.4.4.8php-cgi 18287 web132 mem REG 8,1 47832 4591782 /usr/lib/php5/20090626/mcrypt.sophp-cgi 18287 web132 mem REG 8,1 55744 17043035 /lib/x86_64-linux-gnu/libpam.so.0.83.0php-cgi 18287 web132 mem REG 8,1 1116264 4463795 /usr/lib/libc-client.so.2007e.0php-cgi 18287 web132 mem REG 8,1 109800 4591781 /usr/lib/php5/20090626/imap.sophp-cgi 18287 web132 mem REG 8,1 1000472 17039426 /lib/x86_64-linux-gnu/libglib-2.0.so.0.3200.4php-cgi 18287 web132 mem REG 8,1 39184 4463920 /usr/lib/x86_64-linux-gnu/libltdl.so.7.3.0php-cgi 18287 web132 mem REG 8,1 69504 4458359 /usr/lib/x86_64-linux-gnu/libXext.so.6.4.0php-cgi 18287 web132 mem REG 8,1 80064 4463700 /usr/lib/liblqr-1.so.0.3.1php-cgi 18287 web132 mem REG 8,1 215520 4463909 /usr/lib/x86_64-linux-gnu/liblcms.so.1.0.19php-cgi 18287 web132 mem REG 8,1 55888 4463799 /usr/lib/x86_64-linux-gnu/libgomp.so.1.0.0php-cgi 18287 web132 mem REG 8,1 2499664 4463702 /usr/lib/libMagickCore.so.4.0.1php-cgi 18287 web132 mem REG 8,1 1134104 4463704 /usr/lib/libMagickWand.so.4.0.1php-cgi 18287 web132 mem REG 8,1 420480 4591780 /usr/lib/php5/20090626/imagick.sophp-cgi 18287 web132 mem REG 8,1 22504 4463548 /usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0php-cgi 18287 web132 mem REG 8,1 10328 4463537 /usr/lib/x86_64-linux-gnu/libXau.so.6.0.0php-cgi 18287 web132 mem REG 8,1 121232 4458354 /usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0php-cgi 18287 web132 mem REG 8,1 170024 17042991 /lib/x86_64-linux-gnu/libexpat.so.1.5.2php-cgi 18287 web132 mem REG 8,1 1265056 4467950 /usr/lib/x86_64-linux-gnu/libX11.so.6.3.0php-cgi 18287 web132 mem REG 8,1 162776 17043050 /lib/x86_64-linux-gnu/libpng12.so.0.46.0php-cgi 18287 web132 mem REG 8,1 637160 4463740 /usr/lib/x86_64-linux-gnu/libfreetype.so.6.8.0php-cgi 18287 web132 mem REG 8,1 220896 4463732 /usr/lib/x86_64-linux-gnu/libfontconfig.so.1.4.4php-cgi 18287 web132 mem REG 8,1 260872 4460591 /usr/lib/x86_64-linux-gnu/libjpeg.so.8.0.2php-cgi 18287 web132 mem REG 8,1 68288 4463566 /usr/lib/x86_64-linux-gnu/libXpm.so.4.11.0php-cgi 18287 web132 mem REG 8,1 294416 4459585 /usr/lib/libt1.so.5.1.2php-cgi 18287 web132 mem REG 8,1 270400 4463751 /usr/lib/x86_64-linux-gnu/libgd.so.2.0.0php-cgi 18287 web132 mem REG 8,1 116792 4603181 /usr/lib/php5/20090626/gd.sophp-cgi 18287 web132 mem REG 8,1 664504 4464070 /usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6php-cgi 18287 web132 mem REG 8,1 300704 4458647 /usr/lib/x86_64-linux-gnu/libhx509.so.5.0.0php-cgi 18287 web132 mem REG 8,1 61264 4458643 /usr/lib/x86_64-linux-gnu/libheimbase.so.1.0.0php-cgi 18287 web132 mem REG 8,1 166096 4458645 /usr/lib/x86_64-linux-gnu/libwind.so.0.0.0php-cgi 18287 web132 mem REG 8,1 14360 17043004 /lib/x86_64-linux-gnu/libkeyutils.so.1.4php-cgi 18287 web132 mem REG 8,1 14352 17043000 /lib/x86_64-linux-gnu/libgpg-error.so.0.8.0php-cgi 18287 web132 mem REG 8,1 72752 4463969 /usr/lib/x86_64-linux-gnu/libp11-kit.so.0.0.0php-cgi 18287 web132 mem REG 8,1 67864 4464086 /usr/lib/x86_64-linux-gnu/libtasn1.so.3.1.12php-cgi 18287 web132 mem REG 8,1 86024 4457834 /usr/lib/x86_64-linux-gnu/libroken.so.18.1.0php-cgi 18287 web132 mem REG 8,1 209184 4458641 /usr/lib/x86_64-linux-gnu/libhcrypto.so.4.1.0php-cgi 18287 web132 mem REG 8,1 655152 4458639 /usr/lib/x86_64-linux-gnu/libasn1.so.8.0.0php-cgi 18287 web132 mem REG 8,1 547488 4458659 /usr/lib/x86_64-linux-gnu/libkrb5.so.26.0.0php-cgi 18287 web132 mem REG 8,1 27624 4458661 /usr/lib/x86_64-linux-gnu/libheimntlm.so.0.1.0php-cgi 18287 web132 mem REG 8,1 31200 4463905 /usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1php-cgi 18287 web132 mem REG 8,1 14696 17042980 /lib/x86_64-linux-gnu/libcom_err.so.2.1php-cgi 18287 web132 mem REG 8,1 158168 4463899 /usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1php-cgi 18287 web132 mem REG 8,1 844648 4463903 /usr/lib/x86_64-linux-gnu/libkrb5.so.3.3php-cgi 18287 web132 mem REG 8,1 516056 17042974 /lib/x86_64-linux-gnu/libgcrypt.so.11.7.0php-cgi 18287 web132 mem REG 8,1 766856 4460966 /usr/lib/x86_64-linux-gnu/libgnutls.so.26.21.8php-cgi 18287 web132 mem REG 8,1 252312 4458663 /usr/lib/x86_64-linux-gnu/libgssapi.so.3.0.0php-cgi 18287 web132 mem REG 8,1 109288 4464047 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25php-cgi 18287 web132 mem REG 8,1 105656 4464040 /usr/lib/x86_64-linux-gnu/librtmp.so.0php-cgi 18287 web132 mem REG 8,1 252720 4463810 /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2php-cgi 18287 web132 mem REG 8,1 314936 4466898 /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2.8.1php-cgi 18287 web132 mem REG 8,1 55528 4466899 /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2.8.1php-cgi 18287 web132 mem REG 8,1 207312 4463880 /usr/lib/x86_64-linux-gnu/libidn.so.11.6.6php-cgi 18287 web132 mem REG 8,1 381512 4458452 /usr/lib/x86_64-linux-gnu/libcurl.so.4.2.0php-cgi 18287 web132 mem REG 8,1 71968 4603178 /usr/lib/php5/20090626/curl.sophp-cgi 18287 web132 mem REG 8,1 31752 17039432 /lib/x86_64-linux-gnu/librt-2.15.sophp-cgi 18287 web132 mem REG 8,1 143616 4592744 /usr/lib/php5/20090626/apc.sophp-cgi 18287 web132 mem REG 8,1 135366 17042904 /lib/x86_64-linux-gnu/libpthread-2.15.sophp-cgi 18287 web132 mem REG 8,1 1815224 17039398 /lib/x86_64-linux-gnu/libc-2.15.sophp-cgi 18287 web132 mem REG 8,1 1421464 4458361 /usr/lib/x86_64-linux-gnu/libxml2.so.2.7.8php-cgi 18287 web132 mem REG 8,1 1930616 17049080 /lib/x86_64-linux-gnu/libcrypto.so.1.0.0php-cgi 18287 web132 mem REG 8,1 382896 17049081 /lib/x86_64-linux-gnu/libssl.so.1.0.0php-cgi 18287 web132 mem REG 8,1 14768 17043089 /lib/x86_64-linux-gnu/libdl-2.15.sophp-cgi 18287 web132 mem REG 8,1 1030512 17043085 /lib/x86_64-linux-gnu/libm-2.15.sophp-cgi 18287 web132 mem REG 8,1 247896 17043046 /lib/x86_64-linux-gnu/libpcre.so.3.12.1php-cgi 18287 web132 mem REG 8,1 66784 17042972 /lib/x86_64-linux-gnu/libbz2.so.1.0.4php-cgi 18287 web132 mem REG 8,1 1518928 4463680 /usr/lib/x86_64-linux-gnu/libdb-5.1.sophp-cgi 18287 web132 mem REG 8,1 105288 17039403 /lib/x86_64-linux-gnu/libresolv-2.15.sophp-cgi 18287 web132 mem REG 8,1 92720 17043084 /lib/x86_64-linux-gnu/libz.so.1.2.3.4php-cgi 18287 web132 mem REG 8,1 43288 17039399 /lib/x86_64-linux-gnu/libcrypt-2.15.sophp-cgi 18287 web132 mem REG 8,1 149280 17043086 /lib/x86_64-linux-gnu/ld-2.15.sophp-cgi 18287 web132 0u unix 0xffff8801318e8340 0t0 1830358 /var/lib/apache2/fcgid/sock/11222.729php-cgi 18287 web132 1w REG 8,1 20197 3151617 /var/log/apache2/error.logphp-cgi 18287 web132 2w REG 8,1 20197 3151617 /var/log/apache2/error.logphp-cgi 18287 web132 3r REG 0,3 0 1439730 /proc/11170/auxvphp-cgi 18287 web132 4u unix 0xffff880078470680 0t0 1439736 socketphp-cgi 18287 web132 5r REG 0,3 0 1830368 /proc/18287/auxvphp-cgi 18287 web132 85r FIFO 0,8 0t0 1445190 pipephp-cgi 18287 web132 86w FIFO 0,8 0t0 1445188 pipephp-cgi 18287 web132 89w FIFO 0,8 0t0 1445191 pipe
Till, At the time the CPU usage reaches 100%, there is nothing in the httpd error log or access log. Can you please point me in the direction, how I can resolve this problem?
You find entries in the list like this: Code: php-cgi*18099*web132****3r***REG****************0,3********0**1439730*/proc/11170/auxv Try checking what these processes do with Code: lsof -p 11170 the 11170 replaced by the corresponding number of the entry. As your script has open connection(s) to mysql you should have a look at the processlist when the script runs: Code: mysql -u root -p and then when logged in do Code: SHOW PROCESSLIST; or Code: SHOW FULL PROCESSLIST; Maybe you find some mysql queries that make the script working hard (lots of results etc.)