Which user is the problem?

[BlueNoteWeb]

My server has been suffering some high load recently due to httpd processes. I've been watching the mail logs so I don't think it's a spam bot, most likely one of my users running a huge backup in the middle of the day (rather than the middle of the night when it SHOULD be done). How can I tell who is the offending user? I don't see a conglomerate log anywhere and the user listed in 'ps aux' is the same for every process.

 

[jmstacey]

If it's a backup why would it be apache?

Anyhow, you can try the domain load script available in the 3rd party forums. (or just enable apache's server-status and look with the good 'ol eyeballs for the highest usage by domain)

 

[BlueNoteWeb]

Most of my users would run a backup through a PHP script in their site admin, rather than directly through PHPMyAdmin or the command line. I was seeing spikes in MySQL usage at the same time and figured the two were connected.

I did find the domain tool, thanks very much - problem has been found and the offender properly chastised.