High load -> how to find responsible user

futurevision

Verified User
Joined
Nov 26, 2008
Messages
51
Since a few days i'm experiencing some high loads now and then. I would like to find out what user is responsible for this. Currently i am checking top and htop and i'm only seeing stuff like this:

/usr/sbin/httpd -k start -DSSL from user apache

but this doesnt tell me what user these processes are from (DA users). How can I add some logging or something to make this clear?
 
vi /etc/httpd/conf/httpd.conf

search for
ExtendedStatus on
<Location /server-status>
SetHandler server-status
Order Deny,Allow
Deny from all
Allow from 127.0.0.1 '# Lokaal '
Allow from <your ip here>
</Location>

Restart apache

Go to
http://yourwebserver/server-status
You should see all the active connections to pages and the load.
Hit de F5 button to refresh or do

http://yourwebserver/server-status?auto


Hope this helps.
 
Thanks for you fast reply, I will try this! :)

edit:
its working! I made the mistake by putting in the server ip instead of client ip but i noticed it before to reply here :) Thanks again!
 
Last edited:
You are not using suPHP or similar modules like mod_ruid2? That would help you identify your issues much quicker.
 
Hi. In my case, with heavy load, this appears in more than 50%:

84-0 - 0/0/50 . 1.54 548 0 0.0 0.00 0.38 190.138.0.112 shared.domain NULL
85-0 - 0/0/41 . 1.74 562 68 0.0 0.00 0.26 190.31.147.180 shared.domain NULL
87-0 - 0/0/30 . 1.48 525 357 0.0 0.00 0.16 190.138.0.112 shared.domain NULL
88-0 - 0/0/160 . 7.28 413 170 0.0 0.00 2.11 190.179.51.54 shared.domain NULL


anyone knows what it is? shared.domain and NULL? whis this appears?
 
shared.domain means your server is connected by an IP (no virtual host in headers) in most cases. So you need read apache logs (located in directory /var/log/httpd/) to learn details.
 
Back
Top