Unknown Command

Cemil Sedefoglu

• November 09, 2016 01:53

Dear Sirs, We have closed all backups. On our server, this code is working and 99% CPU is used. /bin/ls --full-time -lARt /home/ It is checking all the users and files, mails on the server. Sample code is: rocess 32244 attached lstat("/home/****/mail/new/1386145054.H106670P7904.server.*****.net,S=2398", {st_mode=S_IFREG|0640, st_size=2398, ...}) = 0 lgetxattr("/home/*****/mail/new/1386145054.H106670P7904.server.*****.net,S=2398", "security.selinux", 0x1cc4480, 255) = -1 ENODATA (No data available) What can be the cause? Can it be because of virtfs? Thank you

• 

  SysSachin

  • November 09, 2016 09:38

  What exact issues are you facing ?

  lgetxattr("/home/*****/mail/new/1386145054.H106670P7904.server.*****.net,S=2398", "security.selinux", 0x1cc4480, 255) = -1 ENODATA (No data available

  
  As per above error, File /home/*****/mail/new/1386145054.H106670P7904.server.*****.net,S=2398 is not present on your server and because of that it's showing " No data available "

  0
• 

  cPanelMichael

  • November 09, 2016 17:03

  Hello, The command you mentioned shouldn't run based on any cPanel feature or functionality. Are you running the command manually as root, or through a third-party application? Thank you.

  0
• 

  Cemil Sedefoglu

  • November 09, 2016 20:00

  Hello, The command you mentioned shouldn't run based on any cPanel feature or functionality. Are you running the command manually as root, or through a third-party application? Thank you.

  
  We are not running the command manually and we are not sure why this command is working continuously. Do not know how to stop it. We thought that it may be caused of backup, we have stop the backup, but it is same.

  0
• 

  Cemil Sedefoglu

  • November 09, 2016 20:02

  What exact issues are you facing ? As per above error, File /home/*****/mail/new/1386145054.H106670P7904.server.*****.net,S=2398 is not present on your server and because of that it's showing " No data available "

  
  CPU is working 99% continuously. After it finishes, and then starts from the beginning. Checks all the files, folders, emails, everything.

  0
• 

  cPanelMichael

  • November 09, 2016 21:08

  Hello, You can kill the process ID with a command such as:
  kill -9 $PID
  Replace "$PID" with the process ID found with the "ps" command. Also, you may find this third-party URL helpful: Linux: How to know where a process was started and how it was started? Thank you.

  0

Please sign in to leave a comment.