LFD / Excessive processes running

Portal Home > Knowledgebase > Articles Database > LFD / Excessive processes running

Posted by Lost Eagle, 03-17-2013, 07:12 AM
Hi ... After the last cPanel update I am getting 10s of alerts from some of our servers ... The alerts are like: User:UserName PID:29702 PPID:23615 Run Time:3881237(secs) Memory:19092(kb) exe:/usr/local/cpanel/3rdparty/perl/514/bin/perl cmd:cpanellogd - http logs for UserName User:UserName PID:29703 PPID:29702 Run Time:33(secs) Memory:1796(kb) exe:/usr/local/cpanel/bin/cpuwatch cmd:/usr/local/cpanel/bin/logrunner 8.0 /usr/local/cpanel/3rdparty/bin/webalizer_lang/english -N 10 -D /home/UserName/tmp/webalizer/dns_cache.db -R 250 -p -n UserName.com -o /home/UserName/tmp/webalizer /usr/local/apache/domlogs/UserName.com.bkup User:UserName PID:29704 PPID:29703 Run Time:33(secs) Memory:6328(kb) exe:/usr/local/cpanel/3rdparty/bin/webalizer_lang/english cmd:/usr/local/cpanel/3rdparty/bin/webalizer_lang/english -N 10 -D /home/UserName/tmp/webalizer/dns_cache.db -R 250 -p -n UserName.com -o /home/UserName/tmp/webalizer /usr/local/apache/domlogs/UserName.com.bkup User:UserName PID:29720 PPID:29704 Run Time:30(secs) Memory:6484(kb) exe:/usr/local/cpanel/3rdparty/bin/webalizer_lang/english cmd:/usr/local/cpanel/3rdparty/bin/webalizer_lang/english -N 10 -D /home/UserName/tmp/webalizer/dns_cache.db -R 250 -p -n UserName.com -o /home/UserName/tmp/webalizer /usr/local/apache/domlogs/UserName.com.bkup ______________ Can you please advise ... whats this ?
Posted by TravisT-[SSS], 03-17-2013, 08:47 AM
You could whitelist the process so you stop getting alerts in /etc/csf/csf,pginore
Posted by Lost Eagle, 03-17-2013, 08:52 AM
Hi ... This happened just after the last cPanel update ... any body is getting the same ? Should I just ignore those alerts ? advise plz
Posted by Lost Eagle, 03-21-2013, 06:07 AM
Any advise ?
Posted by EthernetServers, 03-21-2013, 07:20 AM
Travis gave you a possibility of whitelisting the processes. You can disable process tracking if you want, but it's best to spend a while whitelisting instead, so if something that's genuinely a problem crops up, you'll get notified about it. Take a look at the 'Process Tracking' section under /etc/csf.csf.conf or WHM --> ConfigServer Security & Firewall -> Firewall Configuration - The settings that are triggering the emails are found there.
Posted by Patrick, 03-21-2013, 07:41 AM
Add: exe:/usr/local/cpanel/3rdparty/perl/514/bin/perl exe:/usr/local/cpanel/3rdparty/bin/webalizer_lang/english To: csf.pignore That will properly and safely whitelist those programs from generating warnings. We had to do the same thing after upgrading to cPanel a while back.
Posted by Lost Eagle, 03-21-2013, 07:41 AM
Hi .. What I mean have U faced the same issue ? Why cPanel is causing this after updating ? Is it safe to ignore the mentioned process ?
Posted by BestServerSupport, 03-21-2013, 08:54 AM
It's safe to ignore this alerts. It have started receiving this alerts now because it may be possible that the earlier version of cPanel before update was not having /usr/local/cpanel/3rdparty/bin/webalizer_lang/english and now since you update cPanel, you started receiving such alerts.
Posted by host4profit, 03-24-2013, 03:46 PM
Hello, What is the proper command-line to add all the different languages without adding each one? examples: /usr/local/cpanel/3rdparty/bin/webalizer_lang/portuguese /usr/local/cpanel/3rdparty/bin/webalizer_lang/english I had tried: exe:/usr/local/cpanel/3rdparty/bin/webalizer_lang/* exe:/usr/local/cpanel/3rdparty/bin/webalizer_lang/.* but neither seemed to catch them. Not real good with regex stuff :-) David
Posted by host4profit, 03-24-2013, 04:04 PM
Hello, I figured once I posted a message I'd find the answer :-) Have to use pexe for the regex stuff. So, for those that want to block all the languages, use this line: pexe:/usr/local/cpanel/3rdparty/bin/webalizer_lang/.* Thanks, David
Posted by bear, 03-24-2013, 05:35 PM
Simplest is to add this to pignore, then restart CSF/lfd: pcmd:cpanellog.* Works on all.
Posted by woodsandhillsplc, 10-30-2013, 05:44 PM
Just out of interest, how would this work? Curious as I can't see 'cpanellog' in the logs. Thanks!
Posted by bear, 10-30-2013, 06:04 PM
I highlighted it for you.
Posted by woodsandhillsplc, 10-30-2013, 07:56 PM
Ahah, thankyou I didn't spot that. I am guessing that won't help with the Webalizer problem I am getting in my logs:
Posted by bear, 10-30-2013, 08:51 PM
Have you tried the answer in post #10 above?

Add to Favourites Print this Article