CentOS 7 VPS<\/a> with cPanel installed on it:<\/p>\n # ps aux\r\n\r\nUSER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND\r\nroot 1 0.0 0.1 129180 3584 ? Ss Mar16 1:44 init -z\r\nroot 2 0.0 0.0 0 0 ? S Mar16 0:00 [kthreadd\/2172]\r\nroot 3 0.0 0.0 0 0 ? S Mar16 0:00 [khelper\/2172]\r\nroot 59 0.0 0.4 36920 8508 ? Ss Mar16 0:09 \/usr\/lib\/systemd\/systemd-journald\r\nroot 60 0.0 0.0 41880 1680 ? Ss Mar16 0:00 \/usr\/lib\/systemd\/systemd-udevd\r\ndbus 96 0.0 0.0 24348 1712 ? Ss Mar16 0:07 \/bin\/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation\r\nroot 97 0.0 0.1 148184 3168 ? Ss Mar16 0:00 pure-ftpd (SERVER)\r\nmysql 99 0.0 0.0 113204 1588 ? Ss Mar16 0:00 \/bin\/sh \/usr\/bin\/mysqld_safe\r\nroot 103 0.0 0.0 22232 1576 ? Ss Mar16 0:03 \/usr\/lib\/systemd\/systemd-logind\r\nroot 108 0.0 0.0 14536 1624 ? Ss Mar16 0:01 \/usr\/sbin\/dovecot -F -c \/etc\/dovecot\/dovecot.conf\r\nroot 115 0.0 0.0 145660 1920 ? Ss Mar16 0:00 \/usr\/sbin\/pure-authd -s \/var\/run\/ftpd.sock -r \/usr\/local\/cpanel\/bin\/pureauth\r\nroot 121 0.0 0.0 24236 2072 ? Ss Mar16 0:00 \/usr\/sbin\/smartd -n -q never\r\nnscd 126 0.0 0.1 1059752 2116 ? Ssl Mar16 0:05 \/usr\/sbin\/nscd\r\nroot 132 0.0 0.0 82476 1332 ? Ss Mar16 0:00 \/usr\/sbin\/sshd\r\nroot 133 0.0 0.3 308544 7972 ? Ssl Mar16 0:00 \/usr\/sbin\/rsyslogd -n\r\nroot 146 0.0 0.0 124308 1532 ? Ss Mar16 0:00 \/usr\/sbin\/crond -n\r\nroot 148 0.0 0.0 4488 736 tty2 Ss+ Mar16 0:00 \/sbin\/agetty --noclear tty2 linux\r\nroot 149 0.0 0.0 108076 776 tty1 Ss+ Mar16 0:00 \/sbin\/agetty --noclear --keep-baud console 115200 38400 9600 vt220\r\nroot 150 0.0 0.0 24096 980 ? Ss Mar16 0:00 \/usr\/sbin\/atd -f\r\ndovenull 159 0.0 0.1 43392 3588 ? S Mar16 0:00 dovecot\/pop3-login\r\ndovenull 160 0.0 0.1 43536 3844 ? S Mar16 0:00 dovecot\/imap-login\r\ndovecot 161 0.0 0.0 9568 1192 ? S Mar16 0:00 dovecot\/anvil\r\nroot 162 0.0 0.0 9700 1376 ? S Mar16 0:00 dovecot\/log\r\ndovenull 164 0.0 0.1 43536 3880 ? S Mar16 0:00 dovecot\/pop3-login\r\ndovenull 165 0.0 0.1 43400 3608 ? S Mar16 0:00 dovecot\/imap-login\r\nroot 170 0.0 0.1 10908 2336 ? S Mar16 0:01 dovecot\/config\r\nroot 295 0.0 1.1 165248 23448 ? S Mar16 0:06 queueprocd - wait to process a task\r\nmysql 407 0.0 2.2 706500 47848 ? Sl Mar16 2:20 \/usr\/sbin\/mysqld --basedir=\/usr --datadir=\/var\/lib\/mysql --plugin-dir=\/usr\/lib64\/mysql\/plugin --log-error=\/var\/lib\/mysql\/vps.err --open-files-limit=10000 --pid-file=\/var\/li\r\nroot 410 0.0 0.9 501748 20392 ? Ss Mar16 0:05 \/usr\/sbin\/httpd -k start\r\nroot 412 0.0 0.7 55208 15124 ? S Mar16 0:00 \/usr\/local\/cpanel\/3rdparty\/bin\/perl \/usr\/local\/cpanel\/bin\/leechprotect\r\nnobody 429 0.0 0.5 502120 10552 ? S Mar16 0:00 \/usr\/sbin\/httpd -k start\r\nnobody 430 0.0 0.5 502024 10528 ? S Mar16 0:00 \/usr\/sbin\/httpd -k start\r\nnobody 431 0.0 0.5 502024 10536 ? S Mar16 0:00 \/usr\/sbin\/httpd -k start\r\nnobody 432 0.0 0.5 502024 10568 ? S Mar16 0:00 \/usr\/sbin\/httpd -k start\r\nnobody 433 0.0 0.5 502024 10580 ? S Mar16 0:00 \/usr\/sbin\/httpd -k start\r\nroot 582 0.0 0.1 26848 3212 ? S Mar16 0:02 cpsrvd (SSL) - dormant mode - accepting --llu=1489749164 --listen=10,11,12,4,5,6,7,8,9\r\nnamed 596 0.0 1.0 248500 20988 ? Ssl Mar16 0:47 \/usr\/sbin\/named -u named\r\nroot 636 0.0 0.1 130088 2620 ? Ss Mar16 0:00 dnsadmin - dormant mode --listen=3\r\nroot 639 0.0 0.1 130448 2212 ? S Mar16 0:00 cpdavd - accepting connections on 2077, 2078, 2079, and 2080 (dormant)\r\nroot 641 0.0 0.1 129796 2368 ? S Mar16 0:04 cPhulkd - processor - dormant mode - acce --listen=3\r\nroot 644 0.0 0.1 26496 2384 ? SN Mar16 0:00 cpanellogd - sleeping for logs\r\nroot 656 0.0 1.1 104032 24496 ? S Mar16 0:03 tailwatchd\r\nmailnull 818 0.0 0.2 77552 4672 ? Ss Mar16 0:00 \/usr\/sbin\/exim -ps -bd -q1h -oP \/var\/spool\/exim\/exim-daemon.pid\r\nnobody 2660 0.0 0.4 502016 10396 ? S Mar16 0:00 \/usr\/sbin\/httpd -k start\r\nroot 7500 0.9 4.7 225200 100212 ? Ss Mar16 29:01 \/usr\/local\/cpanel\/3rdparty\/perl\/524\/bin\/perl -T -w \/usr\/local\/cpanel\/3rdparty\/bin\/spamd --max-spare=1 --max-children=3 --allowed-ips=127.0.0.1,::1 --pidfile=\/var\/run\/spamd.\r\nroot 17897 0.2 4.6 225880 97464 ? S 09:37 0:00 spamd child\r\ndovecot 17905 0.0 0.1 32188 2388 ? S 09:37 0:00 dovecot\/auth\r\nroot 17937 0.0 0.0 9564 1096 ? S 09:37 0:00 dovecot\/ssl-params\r\nroot 17993 0.0 0.0 113420 1960 pts\/0 Ss 09:38 0:00 -bash\r\nroot 18019 0.0 0.0 149096 1772 pts\/0 R+ 09:38 0:00 ps aux<\/pre>\nA short explanation of ‘ps aux’ output:
\nUSER – Username of the process\u2019s owner
\nPID -Process ID
\n%CPU – Percentage of the CPU a specific process is using
\n%MEM – Percentage of real memory a specific process is using
\nVSZ – Virtual size of the process
\nRSS – Resident set size (number of pages in memory)
\nTTY – Control terminal ID
\nSTAT – Current process status
\nSTART – Time the command started
\nTIME – CPU time the process has consumed
\nCOMMAND – Command name and arguments<\/p>\n
<\/span>2. pstree – Command to Manage Processes in Linux<\/span><\/h2>\nThe pstree command displays processes in a tree format:<\/p>\n
# pstree\r\nsystemd\u2500\u252c\u25002*[agetty]\r\n \u251c\u2500atd\r\n \u251c\u2500cPhulkd - proce\r\n \u251c\u2500cpanellogd - sl\r\n \u251c\u2500cpdavd - accept\r\n \u251c\u2500cpsrvd (SSL) -\r\n \u251c\u2500crond\r\n \u251c\u2500dbus-daemon\r\n \u251c\u2500dnsadmin - dorm\r\n \u251c\u2500dovecot\u2500\u252c\u2500anvil\r\n \u2502 \u251c\u2500config\r\n \u2502 \u251c\u25002*[imap-login]\r\n \u2502 \u251c\u2500log\r\n \u2502 \u251c\u25002*[pop3-login]\r\n \u2502 \u2514\u2500ssl-params\r\n \u251c\u2500exim\r\n \u251c\u2500httpd\u2500\u252c\u25006*[httpd]\r\n \u2502 \u2514\u2500leechprotect\r\n \u251c\u2500kthreadd\/2172\u2500\u2500\u2500khelper\/2172\r\n \u251c\u2500mysqld_safe\u2500\u2500\u2500mysqld\u2500\u2500\u250016*[{mysqld}]\r\n \u251c\u2500named\u2500\u2500\u25004*[{named}]\r\n \u251c\u2500nscd\u2500\u2500\u250011*[{nscd}]\r\n \u251c\u2500pure-authd\r\n \u251c\u2500pure-ftpd\r\n \u251c\u2500queueprocd - wa\r\n \u251c\u2500rsyslogd\u2500\u2500\u25002*[{rsyslogd}]\r\n \u251c\u2500smartd\r\n \u251c\u2500spamd-dormant:\r\n \u251c\u2500sshd\r\n \u251c\u2500systemd-journal\r\n \u251c\u2500systemd-logind\r\n \u251c\u2500systemd-udevd\r\n \u2514\u2500tailwatchd<\/pre>\n<\/span>3. top – Command to Manage Processes in Linux<\/span><\/h2>\nAnother way to find out what processes are running on your server:<\/p>\n
top - 09:54:45 up 2 days, 8:44, 0 users, load average: 0.03, 0.02, 0.00\r\nTasks: 50 total, 1 running, 49 sleeping, 0 stopped, 0 zombie\r\n%Cpu(s): 0.0 us, 0.2 sy, 0.0 ni, 99.8 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st\r\nKiB Mem : 2097152 total, 316648 free, 379764 used, 1400740 buff\/cache\r\nKiB Swap: 0 total, 0 free, 0 used. 1551658 avail Mem\r\n\r\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\r\n 7500 root 20 0 225060 99964 5132 S 0.3 4.8 29:10.67 spamd\r\n 1 root 20 0 129180 3584 2312 S 0.0 0.2 1:44.80 systemd\r\n 2 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kthreadd\/2172\r\n 3 root 20 0 0 0 0 S 0.0 0.0 0:00.13 khelper\/2172\r\n 59 root 20 0 36920 8580 8272 S 0.0 0.4 0:09.38 systemd-journal\r\n 60 root 20 0 41880 1680 1248 S 0.0 0.1 0:00.01 systemd-udevd\r\n 96 dbus 20 0 24348 1712 1324 S 0.0 0.1 0:07.29 dbus-daemon\r\n 97 root 20 0 148184 3168 2420 S 0.0 0.2 0:00.28 pure-ftpd\r\n 99 mysql 20 0 113204 1588 1292 S 0.0 0.1 0:00.01 mysqld_safe\r\n 103 root 20 0 22232 1576 1296 S 0.0 0.1 0:03.88 systemd-logind\r\n 108 root 20 0 14536 1624 1296 S 0.0 0.1 0:01.26 dovecot\r\n 115 root 20 0 145660 1920 1412 S 0.0 0.1 0:00.25 pure-authd\r\n 121 root 20 0 24236 2072 1572 S 0.0 0.1 0:00.04 smartd\r\n 126 nscd 20 0 1059752 2116 1340 S 0.0 0.1 0:05.45 nscd\r\n 132 root 20 0 82476 1332 468 S 0.0 0.1 0:00.00 sshd\r\n 133 root 20 0 308544 8036 7440 S 0.0 0.4 0:00.71 rsyslogd\r\n 146 root 20 0 124308 1532 920 S 0.0 0.1 0:00.74 crond\r\n 148 root 20 0 4488 736 636 S 0.0 0.0 0:00.00 agetty\r\n 149 root 20 0 108076 776 676 S 0.0 0.0 0:00.00 agetty\r\n 150 root 20 0 24096 980 792 S 0.0 0.0 0:00.00 atd\r\n 159 dovenull 20 0 43392 3588 2712 S 0.0 0.2 0:00.05 pop3-login\r\n 160 dovenull 20 0 43536 3844 2892 S 0.0 0.2 0:00.44 imap-login\r\n 161 dovecot 20 0 9568 1192 1008 S 0.0 0.1 0:00.20 anvil\r\n 162 root 20 0 9700 1376 1032 S 0.0 0.1 0:00.43 log\r\n 164 dovenull 20 0 43536 3880 2920 S 0.0 0.2 0:00.27 pop3-login\r\n 165 dovenull 20 0 43400 3608 2732 S 0.0 0.2 0:00.09 imap-login\r\n 170 root 20 0 10908 2336 1180 S 0.0 0.1 0:01.85 config\r\n 295 root 20 0 165248 23448 1896 S 0.0 1.1 0:06.60 queueprocd - wa\r\n 407 mysql 20 0 706500 47848 6072 S 0.0 2.3 2:21.26 mysqld\r\n 410 root 20 0 501748 20392 13044 S 0.0 1.0 0:05.61 httpd\r\n 412 root 20 0 55208 15124 2156 S 0.0 0.7 0:00.16 leechprotect\r\n 429 nobody 20 0 502120 10552 2908 S 0.0 0.5 0:00.42 httpd\r\n 430 nobody 20 0 502024 10528 2904 S 0.0 0.5 0:00.47 httpd\r\n 431 nobody 20 0 502024 10536 2912 S 0.0 0.5 0:00.45 httpd\r\n 432 nobody 20 0 502024 10568 2940 S 0.0 0.5 0:00.41 httpd\r\n 433 nobody 20 0 502024 10580 2960 S 0.0 0.5 0:00.52 httpd\r\n 582 root 20 0 26848 3212 2000 S 0.0 0.2 0:02.02 cpsrvd (SSL) -\r\n 596 named 20 0 248500 20988 2876 S 0.0 1.0 0:47.43 named\r\n 636 root 20 0 130088 2620 1824 S 0.0 0.1 0:00.31 dnsadmin - dorm\r\n 639 root 20 0 130448 2212 976 S 0.0 0.1 0:00.40 cpdavd - accept\r\n 641 root 20 0 129796 2368 1752 S 0.0 0.1 0:04.45 cPhulkd - proce\r\n 644 root 38 18 26496 2384 1376 S 0.0 0.1 0:00.60 cpanellogd - sl\r\n 656 root 20 0 104032 24496 1604 S 0.0 1.2 0:03.73 tailwatchd\r\n 818 mailnull 20 0 77552 4672 800 S 0.0 0.2 0:00.57 exim\r\n 2660 nobody 20 0 502016 10396 2784 S 0.0 0.5 0:00.38 httpd\r\n17993 root 20 0 113420 1968 1608 S 0.0 0.1 0:00.01 bash\r\n18317 root 20 0 225888 97340 1664 S 0.0 4.6 0:00.15 spamd child\r\n18325 dovecot 20 0 32188 2384 1804 S 0.0 0.1 0:00.01 auth\r\n18415 root 20 0 153628 2124 1496 R 0.0 0.1 0:00.01 top<\/pre>\n